CVE-2025-11171

CVE-2025-11171: ثغرة نقص المصادقة في إضافة Chartify لووردبريس الكلمات المفتاحية: CVE-2025-11171, ثغرة إضافة Chartify لووردبريس, نقص المصادقة, أمان ووردبريس, استغلال AJAX غير مصادق, ثغرة إضافة ووردبريس, CWE-306, ثغرة إضافة الرسوم البيانية لووردبريس, تجاوز المصادقة, CVE لووردبريس 2025 جدول المحتويا...

CVE-2025-10046

CVE-2025-10046 - ELEX WooCommerce Google Shopping Autore: Byte Reaper Descrizione CVE-2025-10046 è una vulnerabilità di iniezione SQL nel plugin ELEX WooCommerce Google Shopping Product Feed per WordPress, versioni 1.4.3 e precedenti. Il problema risiede nel file includes/elex-manage-feed-ajax.ph...

Shellshock

استغلال شل شوك CVE-2014-6271 الاستغلال الوصف يحتوي هذا المستودع على استغلال لثغرة تؤثر على الأنظمة القائمة على يونكس. يرجى ملاحظة أن هذا مجرد نص برمجي لإثبات المفهوم تم إنشاؤه لأغراض تعليمية ويجب استخدامه بمسؤولية. تم تصميم هذا الاستغلال لإظهار كيفية عمل هجوم شل شوك وكيف يمكن استخدامه للحصول على...

xeca

xeca xeca is a project that creates encrypted PowerShell payloads for offensive purposes. Creating position independent shellcode from DLL files is also possible. Note: Please place your custom AMSI bypass in src/assets/amsi-bypass.ps1. Table of Contents xeca Install How It Works Mitigations...

kubebox

= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal and Web console for Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...

CVE-2024-45058

CVE-2024-45058 إثبات المفهوم لـ CVE-2024-45058 ثغرة التحكم في الوصول المعطوب، مما يسمح لأي مستخدم لديه صلاحية العرض في قسم تكوين المستخدم بأن يصبح مسؤولًا عن طريق تغيير نوع المستخدم الخاص به. احصل على معرّف nivelusuario المطلوب وقم بتشغيل الأداة. الاستخدام root@kitploit: usage: CVE-2024-45058.py ...

abaddon

Abaddon Red team operations involve miscellaneous skills, last several months and are politically sensitive; they require a lot of monitoring, consolidating and caution. Wavestone’s red team operations management software, Abaddon, has been designed to make red team operations faster, more...

wacker

Overview A set of scripts to help perform an online dictionary attack against a WPA3 access point. Wacker leverages the wpasupplicant control interface to control the operations of the supplicant daemon and to get status information and event notifications ultimately helping speedup connection...

path-auditor

PathAuditor The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions. The idea is roughly as follows: Audit every call to filesystem related libc functions performed by the binary. Check if the path used in the syscall is user-writable. In this case a...

sshtunnel

|CircleCI| |AppVeyor| |readthedocs| |coveralls| |version| |pyversions| |license| Author : Pahaz Repo : https://github.com/pahaz/sshtunnel/ Inspired by https://github.com/jmagnusson/bgtunnel, which doesn't work on Windows. See also: https://github.com/paramiko/paramiko/blob/master/demos/forward.py...

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...

path-auditor

PathAuditor PathAuditor è uno strumento progettato per trovare vulnerabilità legate all'accesso ai file, controllando le funzioni libc. L'idea è approssimativamente la seguente: Controlla ogni chiamata alle funzioni libc relative al filesystem eseguita dal binario. Verifica se il percorso...

kubolt

Wat? Kubolt is simple utility for scanning public unauthinticated kubernetes clusters and run commands inside containers Why? Sometimes, the kubelet port 10250 is open to unauthorized access and makes it possible to run commands inside the containers using getrun function from kubelet:...

rainmap-lite

rainmap-lite Rainmap Lite - Responsive web application that allows users to launch Nmap scans from their mobiles/tablets/web browsers! Unlike it's predecessor 1, Rainmap-lite does not require special services RabbitMQ, PostgreSQL, Celery, supervisor, etc to make it easy to install on any server...

memoro

Memoro Memoro is a highly detailed heap profiler. Memoro not only shows you where and when your program makes heap allocations, but will show you how your program actually used that memory. Memoro collects detailed information on accesses to the heap, including reads and writes to memory and when...

postEX

PostEX - Agente di Ricognizione Post-Exploitation Solo per test di sicurezza autorizzati. L'uso non autorizzato è illegale. PostEX è un agente di ricognizione post-exploitation basato su Python per Windows. Raccoglie informazioni di sistema, stato dei privilegi, patch installate, meccanismi di...

repokid

Repokid O Repokid usa o Access Advisor fornecido pelo Aardvark para remover permissões que concedem acesso a serviços não utilizados das políticas inline de funções IAM em uma conta AWS. Primeiros Passos Instalação...

cookie_crimes

Chrome Cookie Extraction Without Root This will print out a user's Chrome cookies. You don't need to have their password or be root to use it. nice nice nice nice nice. If you are not the kind of person who regularly gets the ability to execute code on other people's computers, you probably don't...

poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...