The vulnerability of the platform for creating individual web applications in CRM involves a lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

mkchain

mkchain Open source tool to help you build a valid SSL certificate chain. Description • How To Use • Parameters • How it works • Requirements • Other • License Description Is an open source tool to help you build a valid SSL certificate chain. Also can help you fix the incomplete chain and downlo...

Sweet-Pineapple-Builder

Sweet WiFi Pineapple Tetra Builder Sweet Pineapple Builder is a python script that automate the whole process of creating a custom WiFi Pineapple Tetra image. As the WiFi Pineapple Tetra firmware is a custom version of OpenWrt 19.07.2, it is therefore possible to create our own custom firmware...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

CVE-2026-86320

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...

CVE-2026-86320

CVE-2026-86320 affects flatpak-builder , a build tool for creating Flatpak applications. When applying patch sources with use-git-am: true, Git hooks are not disabled, allowing an attacker who supplies a malicious source containing a post-applypatch hook to execute arbitrary code on the host duri...

EUVD-2026-81387

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...

CVE-2026-86320 Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...

CVE-2026-86320

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...

paradoxiaRAT

Paradoxia Remote Access Tool. Are you looking for a GUI alternative? Check outRemote Hacker Probe. More Advanced and Stable with ton of features. Features Paradoxia Console Feature| Description ---|--- Easy to use| Paradoxia is extremely easy to use, So far the easiest rat! Root Shell| - Automati...

skyvern

🐉 Automate Browser-based workflows using LLMs and Computer Vision 🐉...

ghidra-evm

Ghidra EVM Module In the last few years, attacks on deployed smart contracts in the Ethereum blockchain have ended up in a significant amount of stolen funds due to programming mistakes. Since smart contracts, once compiled and deployed, are complex to modify and update different practitioners ha...

CVE-2024-25600-Bricks-Builder-plugin-for-WordPress

CVE-2024-25600 エクスプロイトツール 🚀 説明 📝 このツール 🛠️ は、WordPress 用の Bricks Builder プラグインに存在する CVE-2024-25600 の脆弱性 🕳️ を悪用するために設計されています。この脆弱性により、影響を受けるウェブサイト 💻 では、認証なしでリモートからコードが実行される可能性があります。このツールは、nonce を取得し、特別に細工したリクエストを送信して任意のコマンドを実行することで、悪用プロセスを自動化します。 機能 🌟 インタラクティブモード : ターゲットウェブサイトとリアルタイムで対話します 🕹️。 バッチモード...

CVE-2022-1386-FusionBuilder-SSRF

CVE-2022-1386 – Fusion Builder 示例： root@kitploit: python3 exploitcve20221386.py https://vulnerable.site https://abc123.oast.fun 使用Interact.sh或Burp Collaborator接收回调。 📋 示例输出 root@kitploit: 从目标获取nonce... 向https://abc123.oast.fun发送SSRF载荷... + SSRF确认：从受害服务器收到回调。 📌 注意 此PoC不会进行数据窃取。 仅限道德使用：未经授权请勿利用系统。 📚...

goodoldsearch-oss

Good Old Search Build precise search queries with exact phrases, site filters, exclusions, date ranges, filetypes, and one-click links across search engines and vertical search targets. This is not a search engine, metasearch aggregator, scraper, or API proxy. It is a local static query builder...

CVE-2025-2011

CVE-2025-2011 PoC 作者： X3RX3S 但自豪地被 Ash Wesker 剥离，这家伙用他的横幅对 GPT 了我的代码 ; 看这里 --- https://github.com/Ashwesker/Blackash-CVE-2025-2011 你甚至可以在“他”的代码里看到我的 handle --' 目的： 一个概念验证工具，用于测试针对 WordPress 站点的 SQL 注入漏洞（CVE-2025-2011）。 免责声明： 仅用于您拥有 或已获得明确书面许可的系统。未经授权的测试是非法且不道德的。 关于漏洞 : WordPress 插件 Slider & Popup...

WordPress Themify Builder < 7.5.8 - Open Redirect

The Themify Builder WordPress plugin before version 7.5.8 contains an open redirect vulnerability. The plugin does not validate the tbredirectfail parameter before redirecting users to its value, which could allow attackers to redirect users to malicious websites. id: CVE-2024-3032 info: name:...

User Profile Builder 3.16.4 - Unauthenticated Authentication Bypass

The User Profile Builder plugin for WordPress version 3.16.4 is vulnerable to an authentication bypass via type confusion. Profile Builder's automatic-login-after-registration handler passes the return value of wpinsertuser through absint before testing it with iswperror, so the error check runs...

Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection

The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.This makes ...

WordPress Stacks Mobile App Builder <=5.2.3 - Authentication Bypass

Stacks Mobile App Builder WordPress plugin ≤ 5.2.3 suffers from an authentication bypass vulnerability via improper handling of query parameters, allowing attackers to impersonate arbitrary users. id: CVE-2024-50477 info: name: WordPress Stacks Mobile App Builder =5.2.3 - Authentication Bypass...