php_filter_chain_generator

Generatore di catene di filtri PHP Una CLI per generare catene di filtri PHP, ottieni la tua RCE senza caricare un file se controlli interamente il parametro passato a una require o a una include in PHP! Utilizzo Aiuto $ python3 phpfilterchaingenerator.py --help usage: phpfilterchaingenerator.py ...

Talon

Talon Talon is a 3rd party agent for Havoc written in C. It's very minimalistic and it's meant to show how to work with the Havoc service api. Talon.py is the script that handles callbacks, register reqeuest and tasks by interacting with the Havoc service api...

CVE-2026-14877

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id attribute in all versions up to, and including, 1.12.03 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

AutoHoneyPoC

AutoHoneyPoC AutoPoC Generator HoneyPoC ultimate edition. If this is the first time you've heard of or seen the project, you'll want to read the blog post. https://blog.zsec.uk/honeypoc-ultimate/ While I'm releasing AutoPoC, the framework on its own is harmless as it requires some pre-requisites ...

CVE-2026-14877 Data Tables Generator by Supsystic <= 1.12.03 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table 'id' HTML Attribute

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id attribute in all versions up to, and including, 1.12.03 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-96111

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id attribute in all versions up to, and including, 1.12.03 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-14877

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.12.03 . The root cause is insufficient input sanitization and output escaping within the id attribute of the table component. This flaw allows authe...

CVE-2026-96648

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-96648 Data Tables Generator by Supsystic <= 1.15.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-96053

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-96648

The Data Tables Generator by Supsystic WordPress plugin (versions up to and including 1.15.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the updateRows action, specifically affecting the Table Cell 'data' valu...

CVE-2025-5288

🚨 REST API | Custom API Generator For Cross Platform And Import Export In WP 1.0.0 - 2.0.3 - Missing Authorization to Unauthenticated Privilege Escalation 📋 Description The REST API | Custom API Generator For Cross Platform And Import Export In WP plugin for WordPress is vulnerable to Privilege...

lazyCSRF

LazyCSRF LazyCSRF is a more useful CSRF PoC generator that runs on Burp Suite. No longer maintenance🙇 When I started developing lazyCSRF, I mistakenly thought that the CSRF PoC generator built into Burp Professional could not generate PoC using XHR and did not support PUT requests, etc. I am stil...

Payload_CVE_2013_2186

PayloadCVE20132186 Code generate payload for CVE-2013-2186...

Mystikal

Mystikal macOS Initial Access Payload Generator Intended to be used with https://github.com/its-a-feature/Mythic Related Blog Post: https://posts.specterops.io/introducing-mystikal-4fbd2f7ae520 Usage: 1. Install Xcode on build machine Required for Installer Package w/ Installer Plugin 2. Install...

Chamemask

Chamemask Fake identity generator. 102 countries, one HTML file, no setup. Pick a country, hit Generate. You get a full fake profile where everything is linked: the job decides the income, the income decides the car, the car gets a plate in the right format for that country. Government workers ge...

WordPress Data Tables Generator by Supsystic plugin <= 1.15.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by braintx in WordPress Plugin Data Tables Generator by Supsystic versions = 1.15.1...

WordPress Data Tables Generator by Supsystic plugin <= 1.12.03 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Data Tables Generator by Supsystic versions = 1.12.03...

xss2shell

🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit Behavior-first mass scanner and evidence-grade PoC generator for the WordPress pre-auth XSS-to-RCE chain affecting 500M+ websites. Detection only. No weaponization. Built for bug bounty programs and blue teams. Official Checker:...

obridge

OBridge OBridge provides a simple Java source code generator for calling Oracle PL/SQL package procedures. Supported input, output parameters and return values are: BINARYINTEGER BOOLEAN CHAR CLOB BLOB DATE NCHAR NUMBER NVARCHAR2 OBJECT - Oracle Object Type PLSINTEGER TABLE - Table of Oracle Obje...