CVE-2026-104646

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject...

CVE-2026-105194

The Easy Digital Downloads WordPress plugin before 3.7.1 does not restrict a block's order data to the current user, allowing users with subscriber-level access to view other customers' recent order products and obtain signed download links that grant access to paid digital files without purchase...

CVE-2026-104645

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a different object than the one being acted on, or omitting the check entirely, allowing any...

CVE-2026-85421

A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests. An unauthenticated attacker with network access can issue control commands, alter cluster states,...

EUVD-2026-94786

A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests. An unauthenticated attacker with network access can issue control commands, alter cluster states,...

CVE-2022-3168-adb-unexpected-reverse-forwards

Android Debug Bridge adb 的反向隧道功能存在漏洞，允许恶意的 adb 守护进程在主机上打开到任意主机/端口和 Unix 域套接字的连接。 攻击者窗口（运行恶意守护进程）： $ ./adbroguedaemon.py 受害者窗口（本例中为 GCE VM）： $ adb connect serverip:5556 connected to 8.tcp.ngrok.io:19076 攻击者窗口： ... Wooho, we got response for our rouge request! b'HTTP/1.0 200 OK\r\nMetadata-Flavor:...

everest-backup-cve-2025-11380

CVE-2025-11380 CVE-2025-11380的概念验证代码 - Everest Backup WordPress 插件中存在未经身份验证的备份访问漏洞。 博客文章链接即将发布。...

osueta

/ \ / / | || | | | ' / - ' \ \ \ | /| ./||||//||| || | | | | | | | | | || -= 5. 中。该脚本能够对暴力攻击中使用的用户名进行变体处理， 并且可以在 Open...

Apollo

Apollo 一个用 Python 编写的简单、轻量级的远程访问工具 Apollo 是一个跨平台（Windows、Linux、FreeBSD 和 MacOS）的远程访问工具，适用于 Python 3.4+。其功能目前非常基础，但允许在后期利用阶段执行远程代码，并获取客户端系统的信息，将其报告回命令与控制服务器。 功能 能够同时控制多个客户端 跨平台（Windows、Linux、FreeBSD 和 macOS） 使用 AES-256 加密的 C2 通信，并带有 D-H 密钥交换 接受多个客户端的连接 远程命令执行 标准 Linux/Unix 工具（cat、ls、pwd、unzip、wget...

Docker-Escape-Miner

Usando un exploit de Docker publicado para obtener acceso root y ejecutar un script de minería de bitcoin Esto usa dos bibliotecas de código abierto: nightminer de @ricmoo para minería de bitcoin en Python RunC-CVE-2019-5736 de @twistlock para el escape de Docker Requisitos del sistema Esto fue...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

sshuttle

sshuttle: where transparent proxy meets VPN meets ssh As far as I know, sshuttle is the only program that solves the following common case: Your client machine or router is Linux, FreeBSD, MacOS, or Windows experimental. You have access to a remote network via ssh. You don't necessarily have admi...

sshuttle

sshuttle：透明代理、VPN 与 ssh 的完美结合 据我所知，sshuttle 是唯一能解决以下常见场景的程序： 你的客户端机器（或路由器）运行的是 Linux、FreeBSD、MacOS 或 Windows （实验性支持）。 你可以通过 ssh 访问远程网络。 你不一定拥有远程网络的管理员权限。 远程网络没有 VPN，或者只有糟糕/复杂的 VPN 协议（IPsec、PPTP 等）。又或者你 就是 管理员，只是对 VPN 工具的糟糕现状感到失望。 你不想为远程网络上的每一台主机/端口都创建 ssh 端口转发。 你讨厌 openssh 的端口转发，因为它时快时慢，而且/或者很愚蠢。...

CVE-2026-94244

The Wallet System for WooCommerce WordPress plugin, in versions before 2.8.0 , is vulnerable to a store-wide wallet transaction disclosure. The root cause is a lack of capability checks where the plugin relies on a token obtainable by any authenticated user from a front-end page to generate repor...

EUVD-2026-94769

The Appointment Booking Plugin WordPress plugin before 5.6.5 does not verify that a backend staff user is authorized to act on the specific record targeted for deletion, allowing an authenticated user with a record-scoped staff role to irreversibly delete any order, customer, or transaction on th...

EUVD-2026-94766

The Easy Digital Downloads WordPress plugin before 3.7.1 does not restrict a block's order data to the current user, allowing users with subscriber-level access to view other customers' recent order products and obtain signed download links that grant access to paid digital files without purchase...

CVE-2026-104646 Image Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Stored XSS via Gallery Shortcode Attributes

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject...

EUVD-2026-94764

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject...

EUVD-2026-94763

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a different object than the one being acted on, or omitting the check entirely, allowing any...

Make-and-Break

Make-and-Break 创建并利用一个有漏洞的虚拟机 描述：构建一个自定义虚拟机，运行 Ubuntu 18.04.1 和 Webmin 1.810。利用 CVE-2019-15107 攻击 Linux 系统管理界面中的后门 概念验证 --- Linux 操作系统 Ubuntu 18.04.1 将被部署，其中包含安全漏洞，使攻击者能够将系统入侵到 root 级别。 安装 SSH 服务器 安装 Webmin 1.890 创建一个用户名 deathstart 和密码 readytograduate，默认在端口 10000 上提供服务...