nishang

Nishang Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. By Nikhil Mittal Founder of Altered Security - Hands-on red team and...

CVE-2022-28346

CVE-2022-28346 Django QuerySet.annotate, aggregate, extra SQL 삽입 환경 초기화 1.python manage.py makemigrations 2.python manage.py migrate 3.访问http://x.x.x.x:8000/ 插入初始化数据 취약점 재현 访问http://x.x.x.x:8000/demo POC: http://x.x.x.x:8000/demo?field=demo.name" FROM "demouser" union SELECT "1",sqliteversion,"3"...

CVE-2023-43353-CMSmadesimple-Stored-XSS---News---Extra

CMSmadesimple 保存型XSS v2.2.18 作成者: Sergio 説明: CMSmadesimple v.2.2.18のクロスサイトスクリプティング脆弱性により、ローカル攻撃者が「Content - News」メニューの「Extra」フィールドに細工したスクリプトを仕込むことで、任意のコードを実行できる可能性があります。 攻撃ベクトル: 「Content - News」メニューの「Extra」フィールドのサニタイズ処理に脆弱性があり、ユーザーがWebページにアクセスした際にJavaScriptコードが実行されるように注入できます。 概念実証 POC:...

CVE-2022-28346

CVE-2022-28346 PoC 影響: QuerySet.annotate、aggregate、extra における潜在的なSQLインジェクション。 インストール poetry install python manage.py makemigrations python manage.py migrate python manage.py loaddata data.json python manage.py runserver PoC ?field=poc.title" FROM "pocblog" union SELECT "-1,",sqliteversion,"3" --...

puppeteer-extra

puppeteer-extra これは puppeteer のためのモジュラープラグインフレームワークである puppeteer-extra のモノレポです。:- 🌟 メインのドキュメントはpuppeteer-extra パッケージを参照してください。 また、最近 Playwright のサポートも追加しました。興味があれば playwright-extra をご覧ください。 モノレポ コントリビューション コントリビューション PR や新しいプラグインは大歓迎です！ puppeteer-extra のプラグイン API はクリーンで楽しく使えます。PuppeteerExtraPlugi...

Ocean Extra <= 2.4.6 - Unauthenticated Shortcode Execution

The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.6. This is due to the software allowing users to supply arbitrary shortcodes in the contentrechdata parameter that is then executed. This makes it possible for...

CVE-2023-44766_ConcreteCMS-Stored-XSS---SEO

ConcreteCMS Stored XSS v.9.2.1 작성자: Sergio 설명: ConcreteCMS v.9.2.1의 크로스 사이트 스크립팅Cross Site Scripting 취약점으로 인해 로컬 공격자가 Page Settings의 SEO - Extra 항목에 조작된 스크립트를 삽입하여 임의 코드를 실행할 수 있습니다. 공격 벡터: "SEO"의 "Header Extra Content" 입력값 검증 부재로 인해 사용자가 웹 페이지에 접속할 때 실행되는 JavaScript 코드를 삽입할 수 있습니다. PoC: 패널에 로그인한...

CVE-2022-28346

CVE-2022-28346 QuerySet.annotate、aggregate、extra におけるSQLインジェクション セットアップ: 初期セットアップのために ./setup.sh を実行してください データベースを初期化するためにdockerイメージを開いてください: docker exec -it containerid /bin/bash そして次のコマンドを実行してください: python manage.py makemigrations cve202228346 python manage.py migrate 次のコマンドでインスタンスを起動してください:...

CVE-2026-20516

CVE-2026-20516: Android TV における MiracastService の混乱した代理（confused deputy） Davide Di Matteo @Dingo97 による調査および開示。 これは私にとって初めてクレジットされた CVE です。PEAQ Android TV を調査中に、不適切にエクスポートされたシステム権限の Miracast サービスを発見しました。呼び出し元は、サービス自身の権限を使って Wi-Fi Direct の状態を変更させる intent extra を供給できます。 MediaTek はこの問題を...

Emerson Dixell XWEB-500 - Arbitrary File Write

Emerson Dixell XWEB-500 contains an arbitrary file write caused by unauthenticated access to /cgi-bin/logoextraupload.cgi, /cgi-bin/calsave.cgi, and /cgi-bin/loutils.cgi, letting attackers write any file on the system, exploit requires no authentication. id: CVE-2021-45420 info: name: Emerson...

WordPress Ocean Extra <1.9.5 - Cross-Site Scripting

WordPress Ocean Extra plugin before 1.9.5 contains a cross-site scripting vulnerability. The plugin does not escape generated links which are then used when the OceanWP theme is active. id: CVE-2021-25104 info: name: WordPress Ocean Extra 1.9.5 - Cross-Site Scripting author: Akincibor severity:...

[SECURITY] Fedora 45 Update: compiz-plugins-extra-0.8.18-18.fc45

The Compiz Fusion Project brings 3D desktop visual effects that improve usability of the X Window System and provide increased productivity though plugins and themes contributed by the community giving a rich desktop experience. This package contains additional plugins from the Compiz Fusion Proj...

CVE-2023-3519

CVE-2023-3519 네 엄마 PC에서 NMAP이나 PYTHON을 설치하거나, 너가 ARCH를 쓴다고 누구에게 말할 필요 없이 파워셸을 실행할 수 있으니까! ; x...

CVE-2026-102392

Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...

CVE-2026-102392 WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...

CVE-2026-102392 WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...

CVE-2026-102392

The Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin for WordPress is vulnerable to a PHP Object Injection vulnerability in versions

EUVD-2026-90225

Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...

WordPress Solace Extra plugin < 1.7.2 - Unauthenticated Non-Published Post Content Disclosure vulnerability

Unauthenticated Non-Published Post Content Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin Solace Extra versions 1.7.2...

CVE-2026-80333

The Solace Extra WordPress plugin before 1.7.2 does not perform any authorization or post-status checks on its front-end preview routes, allowing unauthenticated visitors to read the rendered content of non-published posts and pages of any type that WordPress would otherwise not serve...