CVE-2025-4380

CVE-2025-4380 - Ads Pro 插件 = 4.89 - 本地文件包含 LFI 利用工具 描述 此 Python 利用工具针对 WordPress 的 Ads Pro 插件 ≤ 4.89 ，该插件存在通过 bsapreviewcallback AJAX 操作的 本地文件包含 LFI 漏洞。 未认证的攻击者可利用此漏洞读取服务器文件系统中的任意文件，包括敏感文件，如 /etc/passwd、wp-config.php 等。 利用工具特性 利用 CVE-2025-4380 LFI 漏洞。 支持单个目标或批量利用。 可选择将输出保存到文件。 支持 HTTP 代理或 TOR 路由。...

Ads Pro Plugin <= 4.89 - Local File Inclusion

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsatemplate' parameter of the bsapreviewcallback function. This makes it possible for unauthenticated attackers to includ...

Ads Pro Plugin <= 4.88 - Unauthenticated SQL Injection

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the 'aid' parameter in all versions up to, and including, 4.88 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

ParrotNG

ParrotNG ParrotNG es una herramienta capaz de identificar aplicaciones Adobe Flex SWF vulnerables a CVE-2011-2461. Para más detalles, consulte las diapositivas de nuestra charla en Troopers 2015. Descargue la última versión desde AQUÍ. Características Escrito en Java, basado en swfdump Un JAR, do...

yarasafe

YARASAFE - Automatic Binary Function Similarity Checks with Yara SAFE is a tool developed to create Binary Functions Embedding developed by Massarelli L., Di Luna G.A., Petroni F., Querzoni L. and Baldoni R. You can use SAFE to create your function embedding to use inside yara rules. If you are...

yarasafe

YARASAFE - Verificaciones Automáticas de Similitud de Funciones Binarias con Yara SAFE es una herramienta desarrollada para crear Embeddings de Funciones Binarias por Massarelli L., Di Luna G.A., Petroni F., Querzoni L. y Baldoni R. Puedes usar SAFE para crear tu embedding de funciones para usar...

VulFi

VulFi v3.0 Einleitung Das VulFi Vulnerability Finder Tool ist ein Plugin für IDA Pro, das bei der Fehlersuche in Binärdateien hilft. Sein Hauptziel ist es, eine einzige Ansicht mit allen Querverweisen auf die interessantesten Funktionen wie strcpy, sprintf, system, usw. bereitzustellen. Für Fälle...

BinAIVulHunter

BinAIVulHunter Un plugin per IDA PRO che aiuta a trovare vulnerabilità nei binari. Usa il decompilatore HexRays di IDA PRO con OpenAI ChatGPT per trovare possibili vulnerabilità nei binari. Disclaimer: le risposte che si ottengono cercando vulnerabilità nei binari usando un'IA possono generare...

ida_ifl

IFL - Elenco interattivo delle funzioni Licenza: CC-BY https://creativecommons.org/licenses/by/3.0/ Un piccolo plugin con l'obiettivo di fornire un modo intuitivo per navigare tra le funzioni e i loro riferimenti. Inoltre, consente di importare report generati ad esempio da PE-sieve in IDA...

IDAssistMCP

IDAssistMCP Eigenständiges MCP Model Context Protocol Server-Plugin für IDA Pro 9.x , das IDAs Analysefähigkeiten für LLM-Clients wie Claude Desktop bereitstellt. Funktionen 41 MCP-Werkzeuge für Binäranalyse, Dekompilierung, Querverweise, Symbolverwaltung, Typsystem, Navigation, Patchen, Export u...

deREferencing

deREferencing deREferencing एक IDA Pro प्लगइन है जो नए रजिस्टर और स्टैक व्यू को लागू करता है। यह डीरेफ़रेंस किए गए पॉइंटर्स, रंग और अन्य उपयोगी जानकारी जोड़ता है, जो कुछ GDB प्लगइन्स जैसे: PEDA, GEF, pwndbg, आदि के समान है। निम्नलिखित आर्किटेक्चर समर्थित हैं: x86, x86-64, ARM, ARM64, MIPS32 और...

WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerability

WordPress ACPT Pro - Custom Post Types Plugin for WordPress plugin = 2.0.63 - SQL Injection vulnerability discovered by VDsec in WordPress Plugin ACPT Pro - Custom Post Types Plugin for WordPress versions = 2.0.63...

CVE-2026-32563 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32563 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32476

Unauthenticated Cross Site Scripting XSS in Brave Conversion Engine PRO = 0.8.6 versions...

CVE-2026-18464

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts...

CVE-2026-18464

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts...

EUVD-2026-54879

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include...

EUVD-2026-54878

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts...

WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.10 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Visitor Traffic Real Time Statistics Pro versions = 11.10...