1864 matches found
Hybrid Submit
Hybrid Analysis Batch Submission Script This Python script recursively scans a folder and submits executable, script, document, and other relevant files to Hybrid Analysis Falcon Sandbox for automated malware analysis. Features Recursively walks through directories Submits only supported file typ...
CSRF-exploit-generator
CSRF-exploit-generator The CSRF Exploit Generator allows users to generate a CSRF exploit form with configurable parameters. CSRF-exploit-generator Features Input Target URL : Specifies the URL to be exploited. Input POST Parameters : Allows adding POST parameters to be sent via the CSRF request...
magento-upload-auto-submit-zoneh
magento-upload-auto-submit-zoneh CVE-2025-54236 ⚠️ DISCLAIMER ⚠️ CRITICAL WARNING! This tool was created exclusively for: ✅ Educational purposes and security research ✅ Authorized penetration testing ✅ Security assessments on systems you own ✅ Vulnerability verification with written permission...
RE11S_1.11-formAccept-CommandInjection
RE11S1.11-formAccept-CommandInjection During my internship at Qi An Xin Tiangong Lab, I discovered a command injection vulnerability in the RE11S1.11 router. By analyzing the webs file in the bin directory, I found that the function formAccept contains a command injection vulnerability. The...
CVE-2026-119162
The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'user-submitted-content' parameter in all versions up to, and including, 20260916 due to insufficient input sanitization and output...
EUVD-2026-114603
The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'user-submitted-content' parameter in all versions up to, and including, 20260916 due to insufficient input sanitization and output...
spark-proxyuser-classpath
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-proxyuser-classpath Write-up: https://abraxaslabs.tech/research/spark-proxyuser-classpath spark-proxyuser-classpath Class: Privilege leftover leftover of CVE-2023-22946 / SPARK-41958 Reach: Remote Apache Spark...
PT-2026-134479
Name of the Vulnerable Software and Affected Versions User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission versions prior to 4.3.14 Description Authenticated users with Subscriber-level access and above can escalate their...
CVE-2026-119162: specialk User Submitted Posts – Enable Users to Submit Posts from the Front End: The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored…
The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'user-submitted-content' parameter in all versions up to, and including, 20260916 due to insufficient input sanitization and output...
PT-2026-128099
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: free the userptr ranges when a CS fails after parser bos amdgpu cs parser bos allocates an HMM range for every userptr entry of the BO list and looks up the user pages. Those ranges are only freed when amdgpu cs parse...
PT-2026-128261
Ninja Forms plugin for WordPress before 3.15.4 contains an incomplete server-side validation vulnerability that allows unauthenticated attackers to submit arbitrary values to Checkbox List, Multi-Select List, Image List, Country, and State fields because NF Abstracts List falls through to a...
WordPress Mail Mint CVE-2026-10196 POP RCE
CVE-2026-10196 Mail Mint ≤ 1.31.0: unauthenticated mint-form-submit stores a serialized PostHog ForkCurl object; maybeunserialize triggers exec via curl host injection. Requires public wprest nonce from a page with Mail Mint form. !/usr/bin/env python3 -- coding: utf-8 -- """Mail Mint WordPress...
CVE-2026-115196
An Open Redirect vulnerability exists in the public form submission endpoint /form/submit of Mautic. After a form is submitted, the application redirects the visitor to a return address supplied with the submission without verifying that it points to the Mautic instance or another trusted host. A...
CVE-2026-115196
An Open Redirect vulnerability exists in the public form submission endpoint /form/submit of Mautic. After a form is submitted, the application redirects the visitor to a return address supplied with the submission without verifying that it points to the Mautic instance or another trusted host. A...
CVE-2026-115196
An Open Redirect vulnerability exists in the public form submission endpoint /form/submit of Mautic. After a form is submitted, the application redirects the visitor to a return address supplied with the submission without verifying that it points to the Mautic instance or another trusted host. A...
EUVD-2026-109800
An Open Redirect vulnerability exists in the public form submission endpoint /form/submit of Mautic. After a form is submitted, the application redirects the visitor to a return address supplied with the submission without verifying that it points to the Mautic instance or another trusted host. A...
CVE-2026-115196
An Open Redirect vulnerability exists in the public form submission endpoint /form/submit of Mautic. After a form is submitted, the application redirects the visitor to a return address supplied with the submission without verifying that it points to the Mautic instance or another trusted host. A...
CVE-2026-115196
An Open Redirect vulnerability exists in the public form submission endpoint /form/submit of Mautic. After a form is submitted, the application redirects the visitor to a return address supplied with the submission without verifying that it points to the Mautic instance or another trusted host. A...
CVE-2026-115196
Mautic is affected by an Open Redirect vulnerability in the public form submission endpoint (PLATFORM_ENDPOINT ). The application fails to validate that the return address provided during form submission points to a trusted host. Consequently, an unauthenticated attacker can craft a form that red...
PT-2026-123316
An Open Redirect vulnerability exists in the public form submission endpoint /form/submit of Mautic. After a form is submitted, the application redirects the visitor to a return address supplied with the submission without verifying that it points to the Mautic instance or another trusted host. A...