wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

DigiDuck-Framework

DigiDuck Framework Framework for Digiduck Development Boards running ATTiny85 processors and micronucleus bootloader! alt text Screenshot of DDF Welcome Screen Roadmap: Plan to implement a command for Duckyspark translation within the framework. Requirements: - ATTiny85 or other compatible...

ssh-chatter

SSH-Chatter: TUI 게시판 시스템 C 언어 ssh [email protected] 일반 BBS 소프트웨어 SSH-Chatter는 Go ssh-chat 서버의 C 재구현에서 시작되었습니다. 현대적인 C 패턴과 소규모의 테스트 가능한 코어를 사용하면서 원래 동작을 반영/확장합니다. 이 서버는 SSH/TELNET 연결을 수신 대기하며, 인증된 모든 사용자를 공유 채팅방에 배치하여 Go 참조 구현과 동일한 명령 표면을 제공합니다. C를 이해하는 데 왜 그렇게 오래 걸리는지 아시나요? 그것은 본능이기 때문입니다. 최...

CVE-2023-29384

CVE-2023-29384 Exploiteur automatique CVE-2023-29384 pour le plugin WordPress Job Board and Recruitment Type de vulnérabilité : Téléchargement arbitraire de fichier...

DigiTrack

DigiTrack In 30 secondi, questo attacco può scoprire a quali reti si è connesso in precedenza un computer MacOS e piantare uno script che traccia l'indirizzo IP e la rete Wi-Fi corrente ogni 60 secondi. Ora include: Hardtracker - Digispark VPN buster per inviare l'indirizzo IP e BSSID/SSID delle...

CVE-2022-29593

CVE-2022-29593 - Authentifizierungsumgehung durch Capture-Replay Dingtian-DT-R002 Titel Authentifizierungsumgehung durch Capture-Replay Veröffentlicht: Version: 1.0 Hersteller: Shenzhen Dingtian Technologies Co.,Ltd Produkt: 2-Kanal-Relaisplatine/Relaiskarte Betroffene Version: Firmware V3.1.276A...

CVE-2025-25279

Avviso di sicurezza MMSA-2025-00430 / CVE-2025-25279 Riepilogo Dopo il caricamento di un file in Mattermost Boards, quando il parametro fileId viene modificato e la board viene copiata, il file ora punta al file di destinazione specificato nel parametro e lo scarica. Versioni interessate: Istanze...

CatSniffer

CatSniffer Disponibile anche presso i distributori: CatSniffer 😼 è una scheda multiprotocollo e multibanda originale realizzata per sniffare, comunicare e attaccare dispositivi IoT Internet of Things. È stata progettata come una chiavetta USB altamente portatile che integra i nuovi chip TI CC1352...

phantomdrive

Ovrdrive Size : 36.6 x 15 mm Layer : 4 Layers Material : FR-4: TG150 Thickness : 0.6 mm Min track/spacing : 4/4mil Min hole size : 0.2mm Solder mask : Black Silkscreen : White Edge connector : No Surface finish : HASL lead free Via process : Tenting vias Finished copper : 1 oz Cu Inner Copper:1 o...

CVE-2021-24741

CVE-2021-24741 Multiple SQL Injection बिना प्रमाणीकरण Support Board v 3.3.3 में विवरण root@kitploit: Support Board V 3.3.3 Multiple SQL Injection Vulnerability in Support Board Version 3.3.3 that allow remote unauthenticated attacker to execute arbitrary SQL commands via statuscode, department,...

CVE-2024-1813-POC

CVE-2024-1813 - Simple Job Board ≤ 2.11.0 WordPress - Unauthentifizierte PHP-Objektinjektion 🎥 Proof-of-Concept-Demo Ende-zu-Ende: Ein Gast speichert über das öffentliche Bewerbungsformular ein serialisiertes PHP-Objekt, der Administrator öffnet die Bewerberliste, und die Gadget-Kette legt eine...

CVE-2026-75977

The Mang Board WP plugin for WordPress is vulnerable to Missing Authorization via Authentication Cookie Forgery in all versions up to, and including, 2.3.7. This is due to flawed HMAC generation in the mbwgethashkey function that uses the current user's identity instead of the cookie username...

WordPress Mang Board WP plugin <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie vulnerability

Authenticated Subscriber+ Privilege Escalation to Forged Authentication Cookie vulnerability discovered by daroo in WordPress Plugin Mang Board WP versions = 2.3.7...

CVE-2026-75977 Mang Board WP <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie

The Mang Board WP plugin for WordPress is vulnerable to Missing Authorization via Authentication Cookie Forgery in all versions up to, and including, 2.3.7. This is due to flawed HMAC generation in the mbwgethashkey function that uses the current user's identity instead of the cookie username...

CVE-2026-75977

Mang Board WP WordPress plugin (all versions ≤ 2.3.7 ) suffers from a Missing Authorization vulnerability via authentication cookie forgery. The root cause is flawed HMAC generation in mbw_get_hash_key(), which uses the current user's identity instead of the cookie's username parameter when a Wor...

EUVD-2026-66335

The Mang Board WP plugin for WordPress is vulnerable to Missing Authorization via Authentication Cookie Forgery in all versions up to, and including, 2.3.7. This is due to flawed HMAC generation in the mbwgethashkey function that uses the current user's identity instead of the cookie username...

DigiPwn

DigiPwn La scheda di sviluppo USB Digispark KickStarter ATtiny85 è simile ad Arduino, ma più economica e più piccola ovviamente un po' meno potente. Con una vasta gamma di shield per estenderne le funzionalità e la possibilità di utilizzare il familiare IDE Arduino, questa scheda è un ottimo modo...

CVE-2021-24807

CVE-2021-24807 Support Board 3.3.4 XSS persistente autenticato Esiste una vulnerabilità di Cross-Site Scripting XSS persistente autenticato in Support Board versione 3.3.4 tramite il parametro Notes. L'impatto delle vulnerabilità di cross-site scripting può variare da un'applicazione web all'altr...

EUVD-2026-66279

The Project Manager WordPress plugin before 4.0.7 does not restrict several of its REST API routes to the projects a user belongs to, allowing any authenticated user, such as a subscriber, to read other projects' task content and user email addresses and to modify other projects' task boards...

WordPress Project Manager plugin < 4.0.7 - Subscriber+ Cross-Project Task Disclosure and Task Board Modification vulnerability

Subscriber+ Cross-Project Task Disclosure and Task Board Modification vulnerability discovered by Pedro Pinho in WordPress Plugin WP Project Manager versions 4.0.7...