CVE-2026-89195

The Site Setup Wizard WordPress plugin through 1.5.8 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database...

ssj

SSJ - Your everyday Linux distribution gone Super Saiyan. Introduction SSJ is a silly little script that makes use of Docker installed on your everyday Linux distribution Ubuntu, Debian, etc. and magically arms it with hundreds of penetration testing and forensic tools. Technical Details SSJ pull...

Stardox

Available in: Sponsors Huge thanks to the companies supporting Stardox: | | | ---|---|---|--- About Stardox is an advanced GitHub stargazers' information gathering tool. It scrapes GitHub and displays the results in a tree view, letting you collect data on any repository's stargazers — yours or...

seekr

A multi-purpose toolkit for gathering and managing OSINT-Data with a neat web-interface. Introduction Seekr is a multi-purpose toolkit for gathering and managing OSINT-data with a sleek web interface. Our desktop view enables you to have all of your favourite OSINT tools integrated in one. The...

bluewall

BLUEWALL Bluewall is a firewall framework designed for offensive and defensive cyber professionals. This framework allows Cybersecurity professionals to quickly setup their environment while staying within their scope. Credit Inspired by Andrew Benson's hostfw iptable generation script. Features...

filtron

Filtron Reverse HTTP proxy to filter requests by different rules. Can be used between production webserver and the application server to prevent abuse of the application backend. The original purpose of this program was to defend searx, but it can be used to guard any web application. Installatio...

CVE-2026-89195

The Site Setup Wizard WordPress plugin, in versions up to and including 1.5.8 , is vulnerable to an unauthenticated SQL injection attack. The root cause is the improper sanitization and escaping of a parameter before its use in a SQL statement, specifically within the ssw_check_admin_email_exists...

CVE-2026-89195 Site Setup Wizard <= 1.5.8 - Unauthenticated SQLi via ssw_check_admin_email_exists

The Site Setup Wizard WordPress plugin through 1.5.8 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database...

EUVD-2026-96780

The Site Setup Wizard WordPress plugin through 1.5.8 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database...

EUVD-2026-96739

The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard Envira Gallery WordPress plugin before 1.16.2-installation request, and does n...

pwninit

pwninit A tool for automating starting binary exploit challenges Features Set challenge binary to be executable Download a linker ld-linux.so. that can segfaultlessly load the provided libc Download debug symbols and unstrip the libc Patch the binary with patchelf to use the correct RPATH and...

dockernymous

SCROLL DOWN FOR REQUIREMENTS AND INSTRUCTIONS IT JUST WON'T WORK IF YOU DON'T FOLLOW THEM चेतावनी: Dockernymous विकास की बहुत प्रारंभिक अवस्था में है। इसका उपयोग केवल शैक्षिक उद्देश्यों के लिए करें। यदि आप मजबूत गुमनामी पर निर्भर हैं तो इसका उपयोग न करें! समाचार 13.10.2018 मैंने स्क्रिप्ट के समग्...

CVE-2021-41773

CVE-2021-41773 Mettre en place un environnement vulnérable...

algo

Algo VPN Algo VPN عبارة عن مجموعة من نصوص Ansible البرمجية التي تبسّط إعداد شبكة VPN شخصية عبر WireGuard وIPsec. يستخدم الإعدادات الافتراضية الأكثر أمانًا المتاحة ويعمل مع مزودي الخدمات السحابية الشائعين. لمزيد من المعلومات، اطّلع على إعلان الإصدار. الميزات يدعم فقط IKEv2 بتشفير قوي AES-GCM وSHA2...

hacktricks-cloud

HackTricks Cloud Hacktricks logos & motion designed by @ppieranacho .1 Run HackTricks Cloud Locally The workflow below follows Git's documented clone, checkout, and pull operations and the repository's published language branches and container setup.238910 Download latest version of hacktricks...

rainmap-lite

rainmap-lite Rainmap Lite - Responsive web application that allows users to launch Nmap scans from their mobiles/tablets/web browsers! Unlike it's predecessor 1, Rainmap-lite does not require special services RabbitMQ, PostgreSQL, Celery, supervisor, etc to make it easy to install on any server...

Kali-Setup

काली अनुकूलन स्क्रिप्ट यह स्क्रिप्ट विचार मूल रूप से g0tmi1k https://github.com/g0tmi1k/os-scripts से लिया गया था। मैं स्क्रिप्ट के आधार का श्रेय नहीं लेता! हालाँकि, मैंने बहुत सारे टूल जोड़े हैं और मूल संस्करण में कई त्रुटियों को ठीक किया है। मैं इसे बनाए रखता हूं और इसे अपनी पसंद के अनुसार अपडे...

bypass-url-parser

Bypass Url Parser Tool that tests MANY url bypasses to reach a 40X protected page. If you wonder why this code is nothing but a dirty curl wrapper, here's why: Most of the python requests do url/path/parameter encoding/decoding, and I hate this. If I submit raw chars, I want raw chars to be sent...

dnsobserver

DNSObserver A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends notifications with the received request's details via Slack. DNSObserver can help you find bugs such as blin...

openvpn-install

openvpn-install مثبّت OpenVPN لأنظمة Debian وUbuntu وFedora وopenSUSE وCentOS وAmazon Linux وArch Linux وOracle Linux وRocky Linux وAlmaLinux. سيمكّنك هذا السكربت من إعداد وإدارة خادم VPN آمن خاص بك في ثوانٍ معدودة. ما هذا؟ صُمم هذا السكربت ليعمل على خادمك الخاص، سواء كان VPS أو خادمًا مخصصًا، أو...