ida-pro-mcp

IDA Pro MCP IDA Pro MCP is a local Model Context Protocol server for IDA Pro. It lets an MCP client inspect an IDB, ask IDA for deterministic analysis results, and, when explicitly allowed, write annotations or other changes back to the IDB. The host process runs outside IDA and starts a separate...

CVE-2020-27199

CVE-2020-27199 Magic Home Pro - Authentication Bypass Multiple vulnerabilities found in the Magic Home Pro Mobile Application which is used to interface with the JadeHomic LED Strip RGB Kit. The most significant of these vulnerabilities is an Authentication Bypass CVE-2020-27199 vulnerability,...

CVE-2025-6934

🛡️ CVE-2025-6934 - Unauthenticated Privilege Escalation in Opal Estate Pro 📝 Description The Opal Estate Pro – Property Management and Submission plugin for WordPress, used by the FullHouse - Real Estate Responsive WordPress Theme , is vulnerable to Privilege Escalation in all versions up to and...

CVE-2026-58480

CVE-2026-58480 — Blocksy Companion Pro Unauthenticated File Upload RCE Advanced Reviews → saveattachments → Custom Fonts strpos Bypass → shell.woff2.php Overview CVE-2026-58480 also tracked as CVE-2026-15158 is a critical CVSS 9.8 unauthenticated arbitrary file upload vulnerability in Blocksy...

CVE-2022-35405

CVE-2022-35405 My blog post Nuclei template Other article ManageEngine PAM360 and Password Manager Pro unauthenticated remote code execution vulnerability PoC Access Manager Plus authenticated only :...

Exploit for CVE-2026-14894

CVE-2026-14894 Arbitrary File Upload Nxploited Mass Exploi...

CVE-2025-10897

CVE-2025-10897 WooCommerce is an open-source e-commerce plugin for WordPress that turns websites into online stores. WooCommerce Designer Pro is a WordPress plugin developed by JMA Plugins that enables customers to design and customize products directly on WooCommerce stores. IMPORTANT :...

cve-2025-21479-iqoo11pro

CVE-2025-21479 临时 Root（iQOO 11 系列） 版本 项目| 值 ---|--- 设备| vivo iQOO 11 Pro（PD2254 / V2254A） 系统| Android 15，PD2254BA15.2.12.2.W10 内核| 5.15.178-g3dc7c01077b8-dirty SoC| Snapdragon 8 Gen 2（SM8550 / kalama） GPU| Adreno 740，OpenGL ES 3.2 [email protected] 已支持机型...

CVE-2025-6440-Poc-Exploit

WC Designer Pro — Unauthenticated Arbitrary File Upload Security Research Proof of Concept A non-destructive proof of concept for an unauthenticated arbitrary file-upload vulnerability affecting the WC Designer Pro WordPress plugin. Table of Contents...

pmp-exploit

pmp-exploit This exploit takes advantage of the Privilege Escalation vulnerability found within Password Manager Pro to elevate a regular user to SuperAdmin and then download the passwords and files stored within the application. Systems Affected root@kitploit: Product : ManageEngine Password...

CVE-2025-6934

CVE-2025-6934 unauthenticated privilege escalation in opal estate pro Description CVE-2025-6934 is a critical vulnerability in the Opal Estate Pro WordPress plugin ≤ v1.7.5. This bug allows an unauthenticated attacker to create a new administrator account by sending a crafted request to:...

gemini-2.5-pro-nf-tables-red-teamin

gemini-2.5-pro-nf-tables-red-teamin A technical case study and timeline dataset documenting Google Gemini 2.5 Pro's safety alignment policies, guardrails, and refusal behavior evolution regarding legacy Linux kernel vulnerability primitives CVE-2023-32233. Link to case study website :...

CVE-2025-6440

🧨 CVE-2025-6440 – WooCommerce Designer Pro Unrestricted File Upload Unauthenticated Arbitrary File Upload viawcdpsavecanvasdesignajax WooCommerce Designer Pro plugin – Remote Code Execution RCE 📖 Description The WooCommerce Designer Pro plugin for WordPress contains an unauthenticated arbitrary...

CVE-2023-37739---Path-Traversal-in-i-doit-Pro-25-and-below

CVE-2023-37739 - Path Traversal in i-doit Pro 25 and below i-doit Pro 25 and below are vulnerable to Path Traversal vulnerability. These vulnerabilities could allows remote authenticated attackers low or high privilege to navigate to locations that should not be accessible to the user.it can be...

By-Poloss..-..CVE-2026-7515-PoC

CVE-2026-7515: BetterDocs Pro = 3.8.0 - Inclusión de Archivo Local No Autenticada Resumen...

CVE-2026-88745

The software EMLOG-Pro 2.6.29 is affected by a Cross-Site Scripting (XSS) vulnerability. This flaw allows attackers to execute malicious scripts, which can be leveraged to upload a malicious shell to the system. While the vulnerability requires user interaction, it poses a significant risk to the...

CVE-2026-88745

EMLOG-Pro 2.6.29 contains a XSS vulnerability that enables attackers to upload a malicious shell...

CVE-2026-9830

CVE-2026-9830 BookingPress Pro API Assessment PoC This repository contains a Python proof of concept for validating a reported unauthenticated BookingPress Pro REST API exposure. A successful response may contain booking and customer information, which can include personal data. Authorization...

CVE-2022-31491

CVE-2022-31491 Metasploit module and PoC files in this repo. Further Information Voltronic Viewpower/Pro and rebrands/derivatives The UPS management software normally allows a properly Authenticated and Authorized user using a web interface to configure the system to run a single OS command of th...

CVE-2025-4380

CVE-2025-4380 - Ads Pro Plugin = 4.89 - Local File Inclusion LFI Exploit Description This Python exploit targets Ads Pro Plugin ≤ 4.89 for WordPress, vulnerable to Local File Inclusion LFI via the bsapreviewcallback AJAX action. An unauthenticated attacker can exploit this to read arbitrary files...