web

Network-wide ad blocking via your own Linux hardware Pi-hole website | Documentation | Discourse Forum | Donate Pi-hole Web Interface Pi-hole®'s Web interface based off of AdminLTE provides a central location to manage your Pi-hole and review the statistics generated by FTLDNS™. Easy-to-interpret...

WinRAR-Exploit-Tool---Rust-Edition

WinRAR Exploit Tool - Rust Edition Advanced WinRAR Path Traversal Exploit Tool - Written in Rust A high-performance, memory-safe implementation of the WinRAR CVE-2025-8088 exploit tool, rewritten in Rust for better reliability and performance. Features ADS Exploitation - NTFS Alternate Data...

intercept

Support the developer of this open-source project Signal Intelligence Platform A web-based interface for software-defined radio tools. Features Pager Decoding - POCSAG/FLEX via rtlfm + multimon-ng 433MHz Sensors - Weather stations, TPMS, IoT devices via rtl433 Sub-GHz Analyzer - RF capture and...

Motors Car Dealer & Classified Ads <= 1.4.0 - Unauthenticated settings import/export

includes/options.php in the motors-car-dealership-classified-listings aka Motors - Car Dealer & Classified Ads plugin through 1.4.0 for WordPress allows unauthenticated options changes. id: CVE-2019-17228 info: name: Motors Car Dealer & Classified Ads = 1.4.0 - Unauthenticated settings...

Ads Pro Plugin <= 4.89 - Local File Inclusion

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsatemplate' parameter of the bsapreviewcallback function. This makes it possible for unauthenticated attackers to includ...

Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File

The Google for WooCommerce plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and including, 2.8.6. This is due to publicly accessible printphpinformation.php file. This makes it possible for unauthenticated attackers to retrieve information about Webserver and PH...

Tube Video Ads Lite - Reflected XSS

Tube Video Ads Lite WordPress plugin = 1.5.7 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute arbitrary scripts in the context of high privilege users, exploit requires attacker to craf...

Ads Pro Plugin <= 4.88 - Unauthenticated SQL Injection

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the 'aid' parameter in all versions up to, and including, 4.88 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR Exploit root@kitploit: | || | \ / / | / | | | | Advanced WinRAR Path Traversal Exploit Tool A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability CVE-2025-8088 using ADS and RAR5 header manipulation. Features ADS...

CVE-2022-31301

CVE-2022-31301 Haraj Script 3.7 - XSS Almacenado Autenticado al Publicar Anuncios Título del Exploit: Haraj Script 3.7 - XSS Almacenado Autenticado Fecha: 2022-06-13 CVE: CVE-2022-31301 Autor del Exploit: Abdulaziz Saad @b4zb0z Página de inicio del proveedor: https://angtech.org/ Enlace del...

signalops

Signal OPS A full-spectrum, all-source signal intelligence fusion platform for security research and training. Signal OPS pulls dozens of open collection sources — WiFi/Bluetooth/cell-tower databases, internet-exposure scanners, camera indexes, ADS-B flight feeds, satellite TLE tracking, and...

RAR-Anomaly-Inspector

RAR Anomaly Inspector RAR Anomaly Inspector is a read-only PowerShell tool for static inspection of RAR archives , designed to detect path traversal anomalies related to CVE-2025-8088 WinRAR RAR5 Path Traversal. The tool does not extract or execute archive contents. Features Static, read-only...

WinRAR-CVE-2025-8088-Exploitation-Toolkit

☠️ CVE-2025-8088 WinRAR Exploit Tool ☠️ SYSTEM ACCESS: GRANTED TARGET: WINRAR VULNERABILITY A sophisticated, military-grade GUI tool designed for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability CVE-2025-8088. This tool leverages advanced NTFS Alternate Data...

CVE-2025-8088-WinRAR-builder

CVE-2025-8088-WinRAR-builder A POC exploit for WinRAR vulnerability CVE-2025-8088 affecting versions 7.12 and lower 🚀 How It Works 1. Creates a Rar embed with other payloads 2. Using Multiple ADS Streams 🔄 - Attaches payload streams with different path traversal depths 3. Manipulates RAR Headers ...

CVE-2026-36358

CVE-2026-36358 PoC - Juzaweb CMS v.5.0.0 （XSS） First, set up the platform normally and register an account. Here, the administrator account I registered is [email protected] / 123456. After setting up the platform, you can see the website homepage. Access /admin and log in. After logging in,...

Amaranth-Project

Amaranth Project Utilize CVE-2025-8088 WinRAR path traversal vulnerability, ≤ 7.11 to implement a multi-stage backdoor implantation attack chain. root@kitploit: 诱饵文档 → 恶意RAR → CVE触发 → ADS写入 → Stager执行 → 文件加载 → C2上线 Project Structure Directory| Content ---|--- Stage01Stage07/| Source code and test...

CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR Exploit Advanced WinRAR Path Traversal Exploit Tool A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability CVE-2025-8088 using ADS and RAR5 header manipulation. Features ADS Exploitation - NTFS Alternate Data Streams...

CVE-2025-8088-Winrar

CVE-2025-8088 WinRAR Exploitation Advanced WinRAR Path Traversal Exploitation Tool A sophisticated GUI tool for creating malicious RAR files that exploit the WinRAR path traversal vulnerability CVE-2025-8088 by manipulating ADS and RAR5 headers. Features ADS Exploitation - NTFS alternate data...

CVE-2025-4380

CVE-2025-4380 - Ads Pro Plugin = 4.89 - Local File Inclusion LFI Exploit Description This Python exploit targets Ads Pro Plugin ≤ 4.89 for WordPress, vulnerable to Local File Inclusion LFI via the bsapreviewcallback AJAX action. An unauthenticated attacker can exploit this to read arbitrary files...

CVE-2025-8088

CVE-2025-8088 : WinRAR Path Traversal via NTFS ADS Abuse 📌 Executive Summary CVE-2025-8088 is a critical path traversal vulnerability in WinRAR versions 7.12 and prior. The flaw exists in the way the application processes archive entry filenames that utilize NTFS Alternate Data Streams ADS. By...