iris-web

Incident Response Investigation System Current Version v2.4.20 Online Demonstration IRIS Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. Table of contents Getting Started Run IrisWeb Configuration Versioning Showcase...

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. This allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers, operating remotely, to circumvent existing security mechanisms and gain unauthorized access to...

wvctf

WebVulnCTF WVCTF or WebVulnCTF is a gamified web platform which promotes training in pentesting and web application development security in an entertaining way. Through a rewards system, the user must search for a set of flags in the vulnerable application, that correspond to frequent...

dep-scan

Introduction OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration with ASPM/VM...

VolWeb

Introduction VolWeb is a digital forensic memory analysis platform that leverages the power of the Volatility 3 framework. It is dedicated to aiding in investigations and incident responses. 🧬 Objectives The goal of VolWeb is to enhance the efficiency of memory collection and forensic analysis by...

CVE-2026-14281-check

Vérificateur CVE-2026-14281 Un vérificateur de sécurité Python léger et compatible Windows pour identifier les installations WordPress susceptibles d'être affectées par CVE-2026-14281. L'outil effectue des vérifications passives et non destructives. Il n'exploite pas la vulnérabilité, ne crée pas...

natlas

Natlas ملخص لديك الكثير من الخرائط وأصبحت غير منظمة بشكل كبير. ماذا تفعل؟ تضعها في كتاب وتسميه أطلس. هذا مشابه لذلك، باستثناء أنه موقع ويب ومجموعة من نتائج nmap. هدف Natlas هو تسهيل إجراء الفحص المستمر ومراجعة البيانات المجمعة. الهدف من Natlas ليس بالضرورة تحديد مجموعة من الثغرات الأمنية، بل تحدي...

CVE-2025-58780

CVE-2025-58780 الإفصاح عن ثغرة أمنية: حقن SQL في ScienceLogic نظرة عامة توثّق هذه الوثيقة ثغرة حقن SQL تم الإفصاح عنها بشكل مسؤول في منصة ScienceLogic على الويب. تم الإبلاغ عن الثغرة إلى القائمين على المشروع وفقًا لممارسات الإفصاح المسؤول لضمان التخفيف في الوقت المناسب وحماية المستخدمين. تفاصيل...

CVE-2026-14281

LANGZ Scanner + Exploit Scanner de masse + Exploit ciblé unique pour CVE-2026-14281 — une escalade de privilèges non authentifiée dans le plugin WordPress Automation Web Platform WAWP Aucune vérification de permission. Le gestionnaire copie les wawpcustomfields contrôlés par l'attaquant dans...

AperiSolve

Aperi'Solve Try it now: https://www.aperisolve.com Support Aperi'Solve: Aperi'Solve is an open-source steganalysis web platform that performs automated analysis on images to detect and extract hidden data using common steganography tools and techniques. Key features Visualize each bit layer LSB a...

CVE-2026-14281

CVE-2026-14281 — WAWP Automation Web Platform Élévation de privilèges non authentifiée PoC Python 3 pour CVE-2026-14281 dans le plugin WordPress Automation Web Platform automation-web-platform — WAWP / Notifications & OTP for WooCommerce. PoCbit Répertorié sur PoCbit — catalogue communautaire :...

WordPress Automation Web Platform 4.8.6 Vulnerability Checker

WordPress Automation Web Platform plugin versions through version 4.8.6 contain an unauthenticated privilege escalation vulnerability. This tool passively detects the plugin, identifies publicly exposed versions, and flags versions in the affected range...

Exploit for CVE-2026-14281

CVE-2026-14281 Checker A lightweight, Windows-friendly Python...

Exploit for CVE-2026-14281

LANGZ Scanner + Exploit Mass scanner + single-target Exploi...

Exploit for CVE-2026-14281

CVE-2026-14281 — WAWP Automation Web Platform Unauthenticate...

CVE-2026-14281

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.6. This is due to missing permission enforcement on the publicly accessible REST route POST...

CVE-2026-14281 Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.6. This is due to missing permission enforcement on the publicly accessible REST route POST...

CVE-2026-14281 Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.6. This is due to missing permission enforcement on the publicly accessible REST route POST...

CVE-2026-14281

The Automation Web Platform (WAWP) plugin for WordPress is vulnerable to unauthenticated privilege escalation in versions up to and including 4.8.6 . The root cause is a lack of permission enforcement on the POST /wp-json/wawp/v1/signup/ REST route and the absence of a key allowlist in the finish...

EUVD-2026-86548

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.6. This is due to missing permission enforcement on the publicly accessible REST route POST...