CVE-2026-112252

A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xpcmdshell of the file /ws.asmx. The manipulation of the argument sql leads to sql injection. The attack may be initiated remotely...

CVE-2026-112252 Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System ws.asmx xp_cmdshell sql injection

A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xpcmdshell of the file /ws.asmx. The manipulation of the argument sql leads to sql injection. The attack may be initiated remotely...

CVE-2026-112252

A SQL injection vulnerability exists in the Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System (versions up to 3.5). The flaw is located in the xp_cmdshell function of the /ws.asmx file, where manipulation of the sql argument allows for remote executi...

Seecret.it

📦 Seecret.it — Secure sharing via one-time link Seecret.it is an online service for sharing passwords, documents or sensitive information via encrypted one-time links. Your data remains invisible, secure, and self-destructs after viewing. Ideal for IT teams, businesses, freelancers, and anyone...

wifiphisher

About Wifiphisher is a rogue Access Point framework for conducting red team engagements or Wi-Fi security testing. Using Wifiphisher, penetration testers can easily achieve a man-in-the-middle position against wireless clients by performing targeted Wi-Fi association attacks. Wifiphisher can be...

CVE-2026-112247

A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx of the component Upload Endpoint. Executing a manipulation ...

CVE-2026-8037-POC

CVE-2026-8037-POC Includes executable command detection and one-click getshell requires server deployment service pco.yaml can be used with nuclei for quick detection Quick Start Interactive Mode python go.py Enter target URL → select function menu. Detection Target Fast detect 8 basic info items...

CVE-2026-12727

IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow when processing specially crafted object names...

CVE-2026-112247 Wuxi Wubang Security Software Five-in-One Safety Production Management Information System Upload Endpoint upload.aspx cross site scripting

A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx of the component Upload Endpoint. Executing a manipulation ...

EUVD-2026-104527

A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx of the component Upload Endpoint. Executing a manipulation ...

CVE-2026-112247

A cross-site scripting (XSS) vulnerability exists in the Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to version 3.5 . The flaw is located within the Upload Endpoint component, specifically affecting an unknown function in the file /FCKeditor/editor...

offensive-one-liners

offensive-one-liners Jean Miélot at his desk. Public domain. A notebook of 110 offensive security one-liners for authorized testing, CTFs, bug bounty, and lab research. Organized into one markdown notebook with 12 sections. Each entry is a full command or tight pipeline, not a stub. See...

alibaba__one-java-agent_CVE-2022-25842_0-0-1

one-java-agent Goals 1. Provide plugin support to centrally manage multiple Java Agents. 2. Plugins support install/uninstall, requiring the plugin to implement interfaces. 3. Support traditional Java agents, i.e., already developed Java agents. Plugin System If a plugin wishes to be aware of the...

Microsoft365_devicePhish

Microsoft365devicePhish Abusing Microsoft 365 OAuth Authorization Flow for Phishing Attack This is a simple proof-of-concept script that allows an attacker to conduct a phishing attack against Microsoft 365 OAuth Authorization Flow. Using this, one can connect to Microsoft's OAuth API endpoints t...

Malware in availab-le-alb-um-zip-music-is-rotted-one-note-7chcp-frcmmy

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2023-32629-CVE-2023-2640---POC-Escalation

CVE-2023-32629 & CVE-2023-2640 : Privilege escalation Ubuntu Privilege Escalation bash one-liner using CVE-2023-32629 & CVE-2023-2640. TOTALLY STOLE IT FROM https://twitter.com/liadeliyahu/status/1684841527959273472?t=puhDAlZCy75s7UbdV-bFw&s=19 PLEASE RETWEET THE ORIGINAL SOURCE I just wanted to...

One-Lin3r

One-Lin3r One-Lin3r is simple modular and light-weight framework gives you all the one-liners that you will need while penetration testing Windows, Linux, macOS or even BSD systems or hacking generally with a lot of new features to make all of this fully automated ex: you won't even need to copy...

CVE-2022-40684

CVE-2022-40684 One-click enumeration of all usernames and writing SSH public key Integrated and optimized the code from these two repositories to achieve one-click enumeration of all usernames and writing SSH public key results: https://github.com/carlosevieira/CVE-2022-40684/blob/main/exploit.py...

Pentest-Everything

⚔️ Pentest Everything Important Bookmark this page as other page links are likely to change or move over time. This page will always remain the same. About this book This book is my collection of notes and write-ups for various offensive security based topics and platforms. This book is generally...

awesome-hacking-lists

Awesome Stars A curated list of my GitHub stars! Generated by starred. Contents ASL ASP.NET ActionScript Ada Arduino Assembly AutoHotkey AutoIt Batchfile BitBake Blade BlitzBasic Boo C C C++ CMake CSS Classic ASP Clojure CodeQL ColdFusion Dart Dockerfile Emacs Lisp Erlang F Fluent FreeMarker Go...