http-protocol-exfil

http-protocol-exfil Use the HTTP protocol version to send a file bit by bit "HTTP/1.0" is a 0 and "HTTP/1.1" is a 1. It uses GET requests so the Blue Team would only see the requests to your IP address. However, it takes a long time to send bigger files, for example it needs 1 hour to send 200 KB...

wordlistgen

wordlistgen What and why? wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists are much more effective when you take the application's context into consideration. wordlistgen pulls out URL components, such as subdomain names, paths, quer...

CVE-2026-105413

The Form Maker by 10Web WordPress plugin (versions prior to 1.15.51 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the inconsistent escaping of user-submitted field values before they are rendered on the plugin's submissions admin page. This allows unauthenticated ...

W3 Total Cache < 2.8.2 - Log File Exposure

The plugin is vulnerable to Information Exposure through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For example, the log file may contain nonce values that can be used in further CSRF...

CVE-2026-120642

A security flaw exists in perl-cgi (CGI versions before 5.00) where request-derived values are returned without the taint flag when running under Perl's taint mode. Specifically, values such as the upload filename , uploadInfo , certain path_info and script_name values, Accept results, and name l...

CVE-2026-120642 CGI versions before 5.00 for Perl return request-derived values untainted under taint mode

CGI versions before 5.00 for Perl return request-derived values untainted under taint mode. The upload filename, uploadInfo values, some pathinfo and scriptname values, Accept results, and the name lists from urlparam and cookie are returned without the taint flag, as is a cookie named expires fr...

urlbuster

██╗ ██╗██████╗ ██╗ ██████╗ ██╗ ██╗███████╗████████╗███████╗██████╗ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║██╔════╝╚══██╔══╝██╔════╝██╔══██╗ ██║ ██║██████╔╝██║ ██████╔╝██║ ██║███████╗ ██║ █████╗ ██████╔╝ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║╚════██║ ██║ ██╔══╝ ██╔══██╗ ╚██████╔╝██║...

CVE-2026-114117

A flaw was found in Vyper. A remote attacker can cause smart contracts to execute with incorrect values due to an optimizer miscompilation. When compiling conditional branches containing certain bitwise operations under default optimization settings, the compiler incorrectly reduces the expressio...

EUVD-2026-115639

A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can cause the application processing the registry file to crash,...

CVE-2026-120223

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function sessionget of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

CVE-2026-120223 Oray Pugongying X5 Pro Session ID session.lua session_get random values

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function sessionget of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

CVE-2026-120223 Oray Pugongying X5 Pro Session ID session.lua session_get random values

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function sessionget of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

CVE-2026-120223

A vulnerability exists in Oray Pugongying X5 Pro (up to version 7.6.1) within the Session ID Handler component. Specifically, the session_get function in the session.lua file is susceptible to the manipulation of the _user argument, which leads to the generation of insufficiently random values (C...

EUVD-2026-114809

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function sessionget of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

CVE-2025-4334

🔓 Simple User Registration = 6.3 - Unauthenticated Privilege Escalation 📄 Description The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3. This is due to insufficient restrictions on user meta values that can be supplie...

CVE-2026-120223: Oray Pugongying X5 Pro: A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function sessionget of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

PT-2026-134886

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function session get of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

CVE-2023-50257

ROS2 CVE-2023-50257 Reproduction 🔍 Overview This repository is based on a PoC for CVE-2023-50257 and automates the collection of RTPS packets, parses GUID values, and sends a successful DoS packet. CVE-2023-50257 is a known security vulnerability in ROS2 Robot Operating System 2...

CLEANSTART-2024-CI20868 When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method, the specification requires the returned values be zero

CVE-2020-6821 affects multiple packages. When reading from areas partially or fully outside the source resource with WebGL's copyTexSubImage method, the specification requires the returned values be zero. See references for individual vulnerability details...

CLEANSTART-2025-CP61087 vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl

Security vulnerability affects the imagemagick package. A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl...