reSolver

reSolver — решатель CAPTCHA для Burp Suite Автоматически решает CAPTCHA во время тестирования безопасности веб-приложений. Перехватывает HTTP-запросы, содержащие плейсхолдеры CAPTCHA, решает их через внешних провайдеров и внедряет токены — бесшовно интегрируясь с Repeater, Intruder и другими...

CVE-2026-13001

CVE-2026-13001 — Podlove Podcast Publisher Unauthenticated File Upload RCE isimage vs extractfileextension Mismatch → PHP Polyglot Upload Overview CVE-2026-13001 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in the Podlove Podcast Publisher WordPress plugin...

enhanced-iframe-protection

Enhanced iFrame Protection — расширение для браузера Enhanced iFrame Protection EIP — это лёгкое расширение для автоматического обнаружения встроенных элементов iframe и вывода подробных предупреждений о них с целью защиты от атак типа «браузер в браузере» Browser-In-The-Browser, BITB. Скриншоты ...

CVE-2016-3714

CVE-2016-3714 ImageMagick Code Execution CVE-2016-3714 imagickbuilder.py = Simple Payload Builder to Exploit CVE-2016-3714 imagickbypassshell.php = PHP based web shell leveraging the PHP imagick extension wrapper to bypass disabled functions Few Images of things working: Payload Builder: imagick...

The vulnerability of the Cargo extension of the software platform for implementing the MediaWiki hypertext environment allows a hacker to perform cross-site scripting attacks.

The vulnerability of the Cargo extension of the software platform for implementing the MediaWiki hypertext environment is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attack...

Linux Distros Unpatched Vulnerability : CVE-2026-104874

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multidict is an implementation of a multidict data structure. From 6.7.0 until 6.9.1, the C extension's items-view reflected union operation, operand | d.items,...

CVE-2026-66858

The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. Affected: the Python C++ accelerator the pure-Python protocols are not affected, the PHP library and its...

PT-2026-106005

Name of the Vulnerable Software and Affected Versions Kunstmaan CMS versions prior to 7.3.2 Description An issue exists in the FileHandler::getFilePath function within src/Kunstmaan/MediaBundle/Helper/File/FileHandler.php where the blacklisted extensions check is performed case-sensitively. Becau...

PT-2026-106011

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping method, image type set, order status an...

PT-2026-106012

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension 6.6.0 - The page a shared image link opens the share mini page of the front end can link the article the image was shared from when the option "Share article links" is on. I...

CVE-2026-38526-POC

CVE-2026-38526 - Krayin CRM RCE Exploit Krayin CRM ≤ 2.2.x - Unrestricted File Upload leading to Remote Code Execution. This PoC exploits the vulnerable TinyMCE upload endpoint /admin/tinymce/upload to upload a PHP webshell and achieve command execution on the server. Features Full automatic logi...

nextjs-react2shell-detect

Chrome extension that runs next.version locally and injects a warning popover if the site runs a next version vulnerable to react2shell This is a Plasmo extension project bootstrapped with plasmo init. Getting Started First, run the development server: bun dev Open your browser and load the...

DFIR-Companion

DFIR Companion DFIR-триаж с поддержкой ИИ — на вашей машине. Превращает скриншоты расследования и импортированные артефакты в криминалистическую временную шкалу, находки, IOC, граф активы↔IOC и отчёты для обмена; задавайте вопросы по делу на простом английском и взаимодействуйте с другими...

SliverKeylogger

Sliver Keylogger This extension to sliver was written mostly as a learning exercise into how sliver handles extensions. I would like to thank the entire Sliver team for there work on this public implant framework. I would especially like to thank @rkervell for answering many of my questions relat...

pentest-mapper

Pentest Mapper Pentest Mapper is a Burp Suite extension that integrates the Burp Suite request logging with a custom application testing checklist. The extension provides a straightforward flow for application penetration testing. The extension includes functionalities to allow users to map the...

CVE-2024-9264

CVE-2024-9264-RCE-Exploit in Grafana via SQL Expressions Description Proof Of Concept for Remote Code Execution in Grafana CVE-2024-9264 This repository contains a Python script that exploits a Remote Code Execution RCE vulnerability in Grafana's SQL Expressions feature. By leveraging insufficien...

CVE-2024-5735

CVE-2024-5735 AdmirorFrames Joomla! Extension params'templatesBASE' = JPATHBASE . DIRECTORYSEPARATOR . 'plugins' . DIRECTORYSEPARATOR . 'content' . $path . 'templates' . DIRECTORYSEPARATOR; This issue was caused by direct usage of JPATHBASE variable when constructing image path. This problem has...

Ghidrathon

Ghidrathon Ghidrathon is a Ghidra extension that adds Python 3 scripting capabilities to Ghidra. Why? Ghidra natively supports scripting in Java and Jython. Unfortunately, many open-source analysis tools, like capa, Unicorn Engine, angr, etc., are written in Python 3 making it difficult, and in...

CVE-CVSS--CVE-2024-38063-IPv6-TCP-IP-Remote-Code-Execution-Analysis

🔐 CVE-2024-38063 — IPv6 TCP/IP Remote Code Execution Analysis 📌 Project Description This project presents a technical analysis and practical demonstration of the critical vulnerability CVE-2024-38063 , disclosed by Microsoft during Patch Tuesday August 13, 2024. The vulnerability affects the...

cve-2024-37762

Description MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution. The application offers the possibility of a creation of a form with a file upload functionality. While by default the accepted files are restricted to a common sa...