CVE-2026-103355 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Blind SQL Injection.This issue affects Unlimited Elements For Elementor...

CVE-2026-103355

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) WordPress plugin is vulnerable to Blind SQL Injection in versions up to and including 2.0.20 . The root cause is the improper neutralization of special elements used in an SQL command. This vulnerability allows an attacker to ...

CVE-2026-103355 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Blind SQL Injection.This issue affects Unlimited Elements For Elementor...

CVE-2024-21532-PoC-ggit

CVE-2024-21532 ggit में कमांड इंजेक्शन भेद्यता ggit स्वयं को इस प्रकार वर्णित करता है: Local promise-returning git command wrappers संसाधन: प्रोजेक्ट का GitHub स्रोत कोड: https://github.com/bahmutov/ggit प्रोजेक्ट का npm पैकेज: https://www.npmjs.com/package/ggit इस भेद्यता पर लेख:...

CVE-2023-50564

CVE-2023-50564 CVE-2023-50564 é uma vulnerabilidade de RCE no Pluck CMS v4.7.18. Ela é possibilitada por uma vulnerabilidade de upload arbitrário de arquivos no componente /inc/modulesinstall.php, permitindo executar código arbitrário ao enviar um arquivo .zip malicioso. Uso Antes de executar o...

paint2die

Exploit mais simples e confiável para RichFaces Paint2DResource CVE-2018-12533 RF-14310 Instalação • Uso • Executando Paint2Die Instruções de Instalação git clone https://github.com/LucasKatashi/paint2die.git cd paint2die chmod +x paint2die.py pip install -r requirements.txt Uso ./paint2die -h Is...

CVE-2025-24893-PoC

CVE-2025-24893-PoC Exploit de RCE não autenticado no XWiki Versões XWiki Afetadas Versões 15.10.11 Versões 16.4.1 Versões 16.5.0RC1 Descrição da Vulnerabilidade As versões afetadas do XWiki contêm uma vulnerabilidade de Execução Remota de Código causada pelo tratamento inseguro de expressões Groo...

CVE-2026-68820

cve-id दान करें इस प्रोजेक्ट के रखरखाव में PayPal के माध्यम से या नीचे दिए गए QR कोड को स्कैन करके सहायता करें। ⚡ सरल उपयोग इस प्रोजेक्ट का उपयोग केवल सुरक्षित और अधिकृत वातावरण में करें, जैसे: स्थानीय वर्चुअल मशीनें Docker कंटेनर पृथक आइसोलेटेड लैब सेटअप अधिकृत पैठ परीक्षण penetration testing...

DutchOven

DutchOven Application-scoped Windows network brownouts for deterministic red-team validation. Native C • Windows Filtering Platform • IPv4 + IPv6 • Dynamic cleanup Read the accompanying blog post → Quick start • Profiles • CLI • How it works • Build • BOF • Validation !CAUTION Controlled...

CVE-2026-53413

cve-id दान करें इस प्रोजेक्ट के रखरखाव को PayPal के माध्यम से या नीचे दिए गए QR कोड को स्कैन करके समर्थन दें। ⚡ सरल उपयोग इस प्रोजेक्ट का उपयोग केवल सुरक्षित और अधिकृत वातावरण में करें, जैसे: स्थानीय वर्चुअल मशीनें Docker कंटेनर पृथक आइसोलेटेड लैब सेटअप अधिकृत पेनेट्रेशन परीक्षण वातावरण उदाहरण...

custom-oscp-tooling

Custom OSCP Tooling A consolidated set of read-only, OSCP-exam-safe custom tools by Samson Laird. Everything here enumerates, identifies, and advises. Nothing here exploits, sprays, or modifies a target. The problem this solves OSCP exam and lab work is a list of disconnected one-liners: nmap her...

lm-fingerprint

LM-Fingerprint Fingerprints the serving stack behind an OpenAI-compatible chat endpoint. It records tokenizer accounting, hidden template offset, validation prose, JSON/SSE shape, role acceptance, named limits, and gateway headers. It does not load weights, store API keys, or ask the model who it...

agentic-dm-gateway

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...

offensive-one-liners

offensive-one-liners Jean Miélot at his desk. Public domain. A notebook of 110 offensive security one-liners for authorized testing, CTFs, bug bounty, and lab research. Organized into one markdown notebook with 12 sections. Each entry is a full command or tight pipeline, not a stub. See...

OSCP Notes and Custom Dashboard

OSCP Field Notebook Tags: ligolo hashcat Port-indexed pentest methodology notebook: decision trees, copy-paste command patterns, and lessons from authorized practice boxes HTB / PG / personal labs. Merged from the older finalnotes-vault into this single tree. A workflow you can run under time...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

ctxdebug

MCP servers for WinDbg, IDA Pro, and x64dbg One stdio interface · 160+ tools · Three debuggers, one client. Quick Start · Architecture · Servers · Workflows · Report an Issue Website · ctxdebug.xyz · Contact · [email protected] · Status · Public alpha For authorized reverse engineering, cras...

CVE-2026-34910-PoC

CVE-2026-34910 / CVE-2026-34909 — UniFi OS Unauthenticated RCE & File Read Unauthenticated Command Injection RCE CVE-2026-34910 + Path Traversal Arbitrary File Read CVE-2026-34909 in UniFi OS Server. CVSS 10.0 Critical each · CISA KEV listed · actively exploited by a Mirai-derived botnet azsxd...

violin

Violin ☤ — Supervised Agentic Hermes Pentest Profile 35 playbooks · 19 references · 14 templates · required execution guard · Hermes-native Violin is a Hermes-native agentic pentest profile for supervised, authorised penetration tests — from reconnaissance through safe exploit validation to...