3642516 matches found
CVE-2026-75816
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, 3.29.12. This is due to the preupdatevalue function lacking any capability or ownership check, and ActionPost::conditionslogic short-circuiting it...
CVE-2026-18056
The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the accesstoken parameter in all versions up to, and including, 1.1.4. This is due to the authenticateuser function's Facebook authenticator resolving third-party identity by forwarding the...
CVE-2026-16310
The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.5 via the 'id' parameter due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to change the password of any WordPress...
CVE-2026-86164 itsourcecode Sales and Inventory System trans_view.php sql injection
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/transview.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...
CVE-2026-86164 itsourcecode Sales and Inventory System trans_view.php sql injection
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/transview.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...
GHSA-RGWJ-5XJ2-C3M3 vulnerabilities
Vulnerabilities for packages: sqlpad...
SocksOverRDP
Socks Over RDP / Socks Over Citrix 该工具为终端服务（Terminal Services，或远程桌面服务 Remote Desktop Services）和 Citrix（XenApp/XenDesktop）增加了 SOCKS 代理能力。 它利用动态虚拟通道（Dynamic Virtual Channel），使我们能够通过已建立的 RDP/Citrix 连接进行通信，而无需在防火墙上打开新的套接字、连接或端口。 如何使用？ 你需要在用于连接 RDP/Citrix 服务器的客户端计算机上安装一个插件（ .dll ）。在 RDP/Citrix...
awesome-privacy
Awesome Privacy 免费、开源且尊重隐私的服务列表，以及专有服务的替代品。 关于 | 贡献 | 引用 | 讨论 !IMPORTANT 匿名性、隐私和安全性经常被互换使用，但它们实际上代表不同的概念。理解它们之间的区别非常重要。在下方这一节中了解更多。 此列表的主要重点是提供优先考虑隐私的替代品。这些替代品让您掌控自己的数据，并且不会收集或出售这些数据。 目录 2FA 分析 Android Android 应用商店 Android 去臃肿工具 Android 拨号器 Android 文件管理器 Android 相册 Android 键盘 Android 启动器 人工智能...
sccm_sql_backdoor
sccmsqlbackdoor 一个概念验证工具，用于将受控后门植入管理点（Management Point）存储过程，从而通过合法的 MP HTTP 服务实现间接 SQL 执行。 安装 你可以通过克隆仓库并安装依赖项来安装。 root@kitploit: $ git clone --recurse-submodules https://github.com/synacktiv/sccmsqlbackdoor $ cd sccmsqlbackdoor $ python3 -m venv .venv && source .venv/bin/activate $ pip install -e...
CVE-2026-75816 Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifier
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, 3.29.12. This is due to the preupdatevalue function lacking any capability or ownership check, and ActionPost::conditionslogic short-circuiting it...
CVE-2026-75816
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, 3.29.12. This is due to the preupdatevalue function lacking any capability or ownership check, and ActionPost::conditionslogic short-circuiting it...
CVE-2026-18056 HivePress Authentication <= 1.1.4 - Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook Authenticator
The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the accesstoken parameter in all versions up to, and including, 1.1.4. This is due to the authenticateuser function's Facebook authenticator resolving third-party identity by forwarding the...
CVE-2026-16310 MemberDash <= 1.8.5 - Unauthenticated Account Takeover via Insecure Direct Object Reference via 'id' Parameter
The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.5 via the 'id' parameter due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to change the password of any WordPress...
CVE-2026-18056
The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the accesstoken parameter in all versions up to, and including, 1.1.4. This is due to the authenticateuser function's Facebook authenticator resolving third-party identity by forwarding the...
CVE-2026-16310
The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.5 via the 'id' parameter due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to change the password of any WordPress...
CVE-2024-36991-Tool
CVE-2024-36991-Tool 该二进制 POC 通过向存在漏洞的 Splunk 实例发送精心构造的 curl 请求，自动化利用 CVE-2024-36991。它可以检索敏感文件并将其保存到本地以供进一步分析。该脚本采用模块化设计，允许用户针对特定文件类别（例如凭据、日志、配置）进行定向获取。此工具从 https://github.com/jaytiwari05/CVE-2024-36991 分叉而来，随后经过修改以拉取并存储文件，供 Team ISP1337Hackers 使用。 漏洞摘要 CVE-2024-36991 是一个影响 Windows 系统上 Splunk...
sharepoint-deserialization-security-assessment
CVE-2026-45659 - Microsoft SharePoint 反序列化 RCE 顾问式网络安全报告 针对 SharePoint 反序列化风险的专业漏洞评估报告，涵盖执行摘要、技术影响、修复方案与缓解策略。 📍 报告概览 字段| 详情 ---|--- 报告类型| 漏洞评估报告 项目背景| 安全研究 主要关注点| 企业协作安全 目标受众| 安全团队、工程团队、招聘经理 输出风格| 执行摘要、技术分析、业务影响、修复路线图 发布状态| 已为公开作品集审查进行脱敏处理 !IMPORTANT 本报告特意为在 GitHub...
LdrShuffle
LdrShuffle 通过修改运行时已加载模块的 EntryPoint 实现隐蔽代码执行。 摘要 Windows 进程在运行时加载了各种模块。其中每个模块都定义了一个 DllMain 函数，该函数会在进程或线程创建/销毁时被调用（共有四种可能的情形）。 为了在进程生命周期内正确调用这些函数，Windows 加载器函数（ntdll!Ldrp）会引用一个条目列表，其中包含每个模块的关键参数（包括 EntryPoint 字段）。 通过覆写某个 DLL 的 EntryPoint，我们可以确保代码执行被重定向到我们选择的位置。 使用场景 这既可以用作代码执行原语，也可以用于 API...
SCCMSecrets
SCCMSecrets SCCMSecrets.py 是一款 SCCM 策略利用工具。它不仅仅提取 NAA 凭据，还旨在提供一种针对 SCCM 策略利用的综合性方法。该工具可以在不同权限级别下执行，并尝试发现与策略分发相关的潜在错误配置。有关该工具及其用法的更多详细信息，请参阅相关文章： https://www.synacktiv.com/publications/sccmsecretspy-exploiting-sccm-policies-distribution-for-credentials-harvesting-initial 提供两个子命令：policies 和 files。...
CVE-2023-22527
CVE-2023-22527 CVE-2023-22527 - Confluence Data Center 和 Server 过时版本中的 RCE（远程代码执行）漏洞 公告发布日期 2024年1月16日 周二 01:00 EST 产品： Confluence Data Center Confluence Server 受影响版本： 8.0.x 8.1.x 8.2.x 8.3.x 8.4.x 8.5.0-8.5.3 7.19.x LTS 版本不受此漏洞影响 参考链接：...