CVE-2024-23692

CVE-2024-23692 - تنفيذ التعليمات البرمجية عن بُعد RCE في Rejetto HFS توثيق تكتيكي ودليل استغلال لـ CVE-2024-23692 ، وهي ثغرة حرجة لتنفيذ التعليمات البرمجية عن بُعد RCE بدون مصادقة تؤثر على إصدارات Rejetto HTTP File Server HFS السابقة للإصدار 2.3m. يستفيد هذا الدليل من تقنية In-Memory Reverse Shel...

CVE-2026-96329

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6...

CVE-2026-96330

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6...

CVE-2026-95598

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Search in Place search-in-place allows Reflected XSS.This issue affects Search in Place: from n/a through 1.5.5...

CVE-2026-96329

The tagDiv Opt-In Builder WordPress plugin (versions up to and including 1.7.6 ) is vulnerable to a Blind SQL Injection flaw. This vulnerability is caused by the improper neutralization of special elements used in an SQL command within the td-subscription component. An attacker could potentially ...

EUVD-2026-95604

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Search in Place search-in-place allows Reflected XSS.This issue affects Search in Place: from n/a through 1.5.5...

CVE-2026-95598

The codepeople Search in Place WordPress plugin (versions n/a through 1.5.5 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. This issue stems from the Improper Neutralization of Input During Web Page Generation (CWE-79). The vulnerability allows an attacker to execute malicious scr...

EUVD-2026-95608

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6...

EUVD-2026-95609

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6...

CVE-2026-96329 WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6...

CVE-2026-96330 WordPress tagDiv Opt-In Builder plugin <= 1.7.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6...

CVE-2026-96330

The tagDiv Opt-In Builder WordPress plugin (versions n/a through 1.7.6 ) is vulnerable to a Blind SQL Injection flaw. The root cause is the Improper Neutralization of Special Elements used in an SQL Command within the td-subscription component. This vulnerability allows an attacker to execute mal...

CVE-2026-95598 WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Search in Place search-in-place allows Reflected XSS.This issue affects Search in Place: from n/a through 1.5.5...

ROOT-OS-UBUNTU-2204-CVE-2025-38384 CVE-2025-38384 in linux - Patched by Root

Root has patched CVE-2025-38384 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-64412 CVE-2026-64412 in linux - Patched by Root

Root has patched CVE-2026-64412 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

CVE-2026-106145

In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent. On the next server...

EDRSilencer

EDRSilencer مستوحىً من أداة FireBlock مغلقة المصدر FireBlock من MdSec NightHawk، قررت إنشاء نسختي الخاصة، وقد أُنشئت هذه الأداة بهدف حظر حركة المرور الصادرة لعمليات EDR قيد التشغيل باستخدام واجهات برمجة تطبيقات Windows Filtering Platform WFP. تقدم هذه الأداة الميزات التالية: البحث عن عمليات EDR...

No-Consolation

No-Consolation هذا ملف كائن منارة Beacon Object File - BOF ينفّذ ملفات PE غير المُدارة unmanaged PEs داخل الذاكرة ويستعيد مخرجاتها دون تخصيص وحدة تحكم أي دون استدعاء conhost.exe. الميزات يدعم 64 و 32 بت يدعم ملفات EXEs و DLLs لا ينشئ عمليات جديدة لا ينشئ خيوطًا جديدة يربط الوحدات بـ PEB يحفظ...

mitmAP

| / \ | \ | | / /\ | |/ / | ' | | | ' | || / | | | | | | | || | | | | | | | || | || || ||||| || || |/| 2.2 ⚠️ चेतावनी! यह प्रोजेक्ट अब मेंटेन नहीं किया जाता और यह उम्मीद के मुताबिक काम नहीं कर सकता। एक पायथन प्रोग्राम जो फर्जी एक्सेस पॉइंट बनाता है और डेटा स्निफ करता है। 2.0 में नया:...

pentestly

Pentestly Pentestly, पेनिट्रेशन परीक्षणों में उपयोग के लिए विस्तारित Python टूल्स का एक संयोजन है। लक्ष्य एक परिचित उपयोगकर्ता इंटरफ़ेस का उपयोग करना है, साथ ही Python की शक्ति के साथ फ्रेमवर्क में योगदान को आसान बनाना है। ब्लॉग पोस्ट: Pentestly Framework: When Pentesting Meets Python and...