Lucene search
+L

402 matches found

Kitploit
Kitploit
•added 2026/10/28 3:41 a.m.•26 views

Jatayu

JATAYU Stealthy Stand Alone PHP Web Shell FEATURES Http Header Based Authentication. 100% Undetectable. Exec Function Changer. Nothing Fancy USAGE GET /test/jatayu.php?fn=1&&cmd=whoami Host : http://test.com Authtoken : bb3b1a1f-0447-42a6-955a-88681fb88499 FUNCTIONS PARAMETER| FUNCTION ---|---...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/27 10:19 p.m.•22 views

CVE-2025-48129

🚨 CVE-2025-48129 - Privilege Escalation in WordPress Spreadsheet Price Changer Plugin 🛡️ Vulnerability Summary Plugin Affected : Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light Vulnerable Versions : Classified under: OWASP A7 – Identification and Authentication Failures 🧪...

9.8CVSS6.2AI score0.00554EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/27 2:55 p.m.•28 views

tor-ip-changer

tor-ip-changer request new identity every X seconds interval using TOR client !!!iam not responsible for anything what you will do with this program, or for any other sts !!! it is for education purposes only...

6AI score
SaveExploits0
Nuclei
Nuclei
•added 2026/10/27 2:09 a.m.•75 views

WordPress MW Font Changer <=4.2.5 - Cross-Site Scripting

WordPress MW Font Changer plugin 4.2.5 and before contains a cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

6.1CVSS6.3AI score0.04448EPSS
SaveExploits3References5
EUVD
EUVD
•added 2026/10/23 12:20 p.m.•6 views

EUVD-2026-108813

In the Linux kernel, the following vulnerability has been resolved: scsi: ch: Do not keep references to data transfer element devices chreadconfig looks up the scsidevice of every data transfer element whose SCSI id the changer reports in READ ELEMENT STATUS, and stores it in ch-dt...

5.8AI score0.00176EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/10/23 4:38 a.m.•21 views

hide-me

Mac and hostname random changer hide-me Every time I was trying to do an Network Penetration Testing, I needed to do some steps to make sure I was hidden, put my interface down, change my mac address, change my hostname, putting interface back up, and restarting network-manager service, and when...

6.3AI score
SaveExploits0
Cvelist
Cvelist
•added 2026/10/14 1:27 a.m.•44 views

CVE-2026-104767 Membership & User Roles for WooCommerce (Automatic Role Changer) <= 20260828 - Authenticated (Subscriber+) Privilege Escalation to Stale Foreign Role Cache

The Membership & User Roles for WooCommerce Automatic Role Changer plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828. This is due to the maybeaddroletouser function unconditionally re-assigning every role stored in the dfxwcrcforeignroles user...

7.5CVSS0.00335EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•16 views

PT-2026-113592

The Membership & User Roles for WooCommerce Automatic Role Changer plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828. This is due to the maybe add role to user function unconditionally re-assigning every role stored in the dfxwcrc foreign roles...

7.5CVSS5.6AI score0.00335EPSS
SaveExploits0References7
Patchstack
Patchstack
•added 2026/10/13 2:21 p.m.•14 views

WordPress Membership & User Roles for WooCommerce (Automatic Role Changer) plugin <= 20260828 - Authenticated (Subscriber+) Privilege Escalation to Stale Foreign Role Cache vulnerability

Authenticated Subscriber+ Privilege Escalation to Stale Foreign Role Cache vulnerability discovered by Azgnt in WordPress Plugin DFX Automatic Role Changer for WooCommerce versions = 20260828...

7.5CVSS5.8AI score0.00335EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/08/07 7:17 p.m.•25 views

CVE-2026-48098

NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 execute privileged system commands using sudo and shell=True directly inside application logic. In environments where passwordless sudo NOPASSWD is enabled,...

7.3CVSS0.00193EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/07 7:17 p.m.•21 views

CVE-2026-48097

NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 have a command execution vulnerability due to unsafe use of shell=True with commands that rely on executable resolution through the PATH environment variable...

7.8CVSS0.00227EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/07 7:09 p.m.•29 views

EUVD-2026-54604

NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 execute privileged system commands using sudo and shell=True directly inside application logic. In environments where passwordless sudo NOPASSWD is enabled,...

7.3CVSS6AI score0.00193EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/07 7:09 p.m.•111 views

CVE-2026-48098

NexTor IP Changer (command‑line tool) is affected by unsafe use of privileged commands prior to version 2.0.0. The root cause is that the application executes privileged system commands using sudo and Python's shell=True inside its logic, which can allow privileged commands to run in environments...

7.3CVSS6AI score0.00193EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/07 7:09 p.m.•21 views

CVE-2026-48098 NexTOR IP Changer Unsafely Uses sudo and shell=True

NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 execute privileged system commands using sudo and shell=True directly inside application logic. In environments where passwordless sudo NOPASSWD is enabled,...

7.3CVSS6AI score0.00193EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/07 7:09 p.m.•22 views

CVE-2026-48098

NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 execute privileged system commands using sudo and shell=True directly inside application logic. In environments where passwordless sudo NOPASSWD is enabled,...

7.3CVSS6AI score0.00193EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/08/07 7:06 p.m.•26 views

CVE-2026-48097

NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 have a command execution vulnerability due to unsafe use of shell=True with commands that rely on executable resolution through the PATH environment variable...

7.8CVSS6.1AI score0.00227EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/08/07 7:06 p.m.•65 views

CVE-2026-48097

NexTor IP Changer (CLI tool) is affected by a PATH-based command execution vulnerability caused by unsafe use of shell=True, where executable resolution via PATH allows an attacker with control of the execution environment to place malicious executables earlier in PATH, enabling execution of atta...

7.8CVSS6.1AI score0.00227EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/07 7:06 p.m.•22 views

CVE-2026-48097 NexTOR_IP_CHANGER has PATH Injection Leading to Arbitrary Command Execution

NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 have a command execution vulnerability due to unsafe use of shell=True with commands that rely on executable resolution through the PATH environment variable...

7.8CVSS6.1AI score0.00227EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/07 7:06 p.m.•44 views

CVE-2026-48097 NexTOR_IP_CHANGER has PATH Injection Leading to Arbitrary Command Execution

NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 have a command execution vulnerability due to unsafe use of shell=True with commands that rely on executable resolution through the PATH environment variable...

7.8CVSS0.00227EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/07 7:06 p.m.•27 views

EUVD-2026-54603

NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 have a command execution vulnerability due to unsafe use of shell=True with commands that rely on executable resolution through the PATH environment variable...

7.8CVSS6.1AI score0.00227EPSS
SaveExploits0References2
Rows per page
Query Builder