Name-That-Hash

➡️ Discord | 网站 ⬅️ 现代哈希识别系统 pip3 install name-that-hash && nth 无需安装的 Web 应用 🤔 这是什么？ 你是否曾经遇到过像 5f4dcc3b5aa765d61d8327deb882cf99 这样的哈希值，然后好奇这是什么类型的哈希？🤔 Name-that-hash 可以告诉你那个哈希的类型！ 🔥 特性 📺 流行度评级 - Name that hash 会首先显示最流行的哈希。在旧系统中，它会将 Skype Hash 与 Active Directory 的 NTLM 等同对待，这就像说我的 GitHub 和 VSCode...

Ch4120N-CVE-Pulse

⚡ Ch4120N CVE Pulse Agregador de PoC de CVE en vivo con búsqueda inteligente e inteligencia de amenazas CVE Pulse descubre, puntúa e indexa automáticamente Pruebas de Concepto de CVE desde GitHub. Las enriquece con puntuaciones EPSS y datos de CISA KEV , crea instantáneas y diferencias diarias, y...

CVE-2026-97637

The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability exists because the required PI-Media/json-api parent plugin caches controller dispatch results in transients keyed sole...

CVE-2026-97637

The JSON API Auth plugin for WordPress (versions up to and including 3.1.2 ) is vulnerable to an Authentication Bypass via cached session cookie disclosure. The root cause is that the required PI-Media/json-api parent plugin caches controller dispatch results using only the URI and query string, ...

EUVD-2026-91259

The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability exists because the required PI-Media/json-api parent plugin caches controller dispatch results in transients keyed sole...

CVE-2026-97637 JSON API Auth <= 3.1.2 - Unauthenticated Authentication Bypass via Cached 'generate_auth_cookie' Response

The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability exists because the required PI-Media/json-api parent plugin caches controller dispatch results in transients keyed sole...

WordPress JSON API Auth plugin <= 3.1.2 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by Chi Trung Huynh in WordPress Plugin JSON API Auth versions = 3.1.2...

novahot

novahot novahot 是一个面向渗透测试人员的 Webshell 框架。它实现了一个基于 JSON 的 API，可以与任何语言编写的木马进行通信。默认情况下，它附带用 PHP、Ruby 和 Python 编写的木马。 除了执行系统命令外，novahot 还能模拟交互式终端，包括 mysql、sqlite3 和 psql。它还实现了“虚拟命令”，使你能够使用本地偏好的应用程序上传、下载、编辑和查看远程文件。 安装 直接从 npm 安装可执行文件： sudo npm install -g novahot 然后生成一个配置文件： novahot config /.novahotrc ...

PT-2026-104152

Name of the Vulnerable Software and Affected Versions JSON API Auth plugin for WordPress versions prior to 3.1.3 Description An authentication bypass exists due to cached session cookie disclosure. The PI-Media/json-api parent plugin caches controller dispatch results in transients based only on...

CVE-2024-6624

CVE-2024-6624 | JSON API User = 3.9.3 - Escalada de Privilegios No Autenticada Este es un script de Python que explota la vulnerabilidad CVE-2024-6624 en el plugin JSON API User = 3.9.3 para WordPress. Esta herramienta permite a atacantes no autenticados registrar nuevos usuarios y escalar sus...

Mass-Scanner-CVE-2026-1405

⚡ Mass-Scanner-CVE-2026-1405 Escáner Masivo Limpio de WordPress para CVE-2026-1405 🧠 Descripción General Un escáner limpio y ligero diseñado para comprobar la exposición a CVE-2026-1405 en múltiples objetivos WordPress. Se centra en: escaneo masivo rápido de múltiples objetivos salida limpia en...

CVE-2024-6624

CVE-2024-6624 JSON API User = 3.9.3 - Escalada de privilegios no autenticada Descripción El plugin JSON API User para WordPress es vulnerable a la escalada de privilegios en todas las versiones hasta la 3.9.3 inclusive. Esto se debe a controles inadecuados sobre los campos de metadatos de usuario...

REST & JSON API Authentication for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2026-182

This module enables you to add an extra authentication layer to the API. The module does not sufficiently validate authentication requirements for all API requests, which can result in an access bypass vulnerability...

VulnCheck KEV: CVE-2026-54569

SENAITE.CORE is the core framework for the SENAITE laboratory information management system. From 2.0.0 to 2.6.0, the SENAITE.CORE JSON API permits unauthenticated remote code execution through a two-request chain involving missing authorization and unsafe evaluation. The state-changing routes in...

CVE-2026-61534 Yayson: Prototype pollution in the Store/LegacyStore deserialization

Yayson is a library for serializing and reading JSON API data in JavaScript. Prior to 4.3.0, Store and LegacyStore use attacker-controlled JSON:API type, id, and relationship names as keys in plain-object lookup tables in src/yayson/store.ts and src/yayson/legacy-store.ts. A document whose type i...

senaite.core Vulnerable to Eval Injection and Missing Authorization

SummaryAn unauthenticated remote code execution vulnerability in the SENAITE JSON API allows any network-reachable attacker to execute arbitrary Python on the Zope worker process via a two-request anonymous chain. The /@@API/update route is reachable to anonymous callers and runs eval on...

PYSEC-2026-3919 senaite.core Vulnerable to Eval Injection and Missing Authorization

Summary An unauthenticated remote code execution vulnerability in the SENAITE JSON API allows any network-reachable attacker to execute arbitrary Python on the Zope worker process via a two-request anonymous chain. The /@@API/update route is reachable to anonymous callers and runs eval on...

CVE-2026-75162

An information disclosure vulnerability in the opcua-configuration method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V60005 allows any remote authenticated user, including users with the low-privileged Standard role, to retrieve the configured OPC-UA authentication credentia...

EUVD-2026-71452

An information disclosure vulnerability in the opcua-configuration method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V60005 allows any remote authenticated user, including users with the low-privileged Standard role, to retrieve the configured OPC-UA authentication credentia...

CVE-2026-75162

An information disclosure vulnerability in the opcua-configuration method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V60005 allows any remote authenticated user, including users with the low-privileged Standard role, to retrieve the configured OPC-UA authentication credentia...