Specter-FlipperZero

The waveform is not a graphic. It is 128 columns of 13.56 MHz carrier that Specter recorded off a real polling reader at 8 ms per column, read back out of the screenshot beside it. Its duty measures 28% where the device's own counter printed 27%, and both numbers are on the banner. Sweep for the...

CVE-2026-14382

CVE-2026-14382 Disparador binario Corrección de error $250000492218546 High CVE-2026-14382: Insufficient validation of untrusted input in ANGLE. Reported by anonymous on 2026-03-13 La causa raíz de esta vulnerabilidad parece ser similar a la de CVE-2025-6558. Según mi análisis actual, sospecho qu...

CVE-2026-97344

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

EUVD-2026-91919

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

CVE-2026-97344 Wp Social Login and Register Social Counter <= 3.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

pixma

¿Qué es esto? Algunas herramientas pequeñas para desempaquetar el firmware de la serie Canon PIXMA para análisis. Motivación Algunas impresoras Pixma no pueden restablecer el contador de tinta de desecho y se niegan a imprimir, incluso después de haber reemplazado el contenedor de tinta de desech...

SRS Simple Hits Counter 1.0.3-1.0.4 - Unauthenticated Blind SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' in SRS Simple Hits Counter Plugin for WordPress 1.0.3 and 1.0.4 allows a remote, unauthenticated attacker to determine the value of database fields. id: CVE-2020-5766 info: name: SRS Simple Hits Counter 1.0.3-1.0.4...

Umbrella_android

Umbrella Umbrella es una aplicación móvil para Android desarrollada por Security First que proporciona a los defensores de derechos humanos la información sobre qué hacer en cualquier situación de seguridad y las herramientas para hacerlo. Permite al usuario elegir lo que quiere hacer, como:...

CVE-2020-0022

CVE-2020-0022 Muchas gracias a Insinuator por su increíble publicación y código! Resultados Todos los pasos mencionados en la publicación de Insinuator se han completado, y más. Son muchos pasos para incluir en un archivo README.md, así que siéntase libre de consultar la publicación de Insinuator...

CVE-2020-0022

CVE-2020-0022 Muchas gracias a Insinuator por su increíble publicación en el blog y código! Resultados Todos los pasos mencionados en la publicación de Insinuator se han completado, y más. Hay muchos pasos para incluir en un archivo README.md, así que siéntete libre de consultar la publicación de...

twint-utils

twint-utils Estas son utilizaciones de Twint. Consulta nuestras pautas de colaboración para contribuir a ellas. Detector de Seguidores Mutuos Mufos.py usa Twint para detectar los seguidores mutuos de una cuenta semilla determinada. Puede incorporarse en otros pipelines más elaborados para redes...

CVE-2026-103651

MISP (versions

CVE-2026-103651 MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second-Factor Authentication Bypass

MISP contains a vulnerability in its one-time password OTP authentication flow that allows replay of a consumed HOTP paper token and rewinding of the token counter. The HOTP verification logic compared the submitted token against a counter value that was cached in the user's session at the time t...

EUVD-2026-90542

MISP contains a vulnerability in its one-time password OTP authentication flow that allows replay of a consumed HOTP paper token and rewinding of the token counter. The HOTP verification logic compared the submitted token against a counter value that was cached in the user's session at the time t...

CVE-2026-103651 MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second-Factor Authentication Bypass

MISP contains a vulnerability in its one-time password OTP authentication flow that allows replay of a consumed HOTP paper token and rewinding of the token counter. The HOTP verification logic compared the submitted token against a counter value that was cached in the user's session at the time t...

USN-8853-1 opensbi vulnerability

It was discovered that OpenSBI did not properly validate the counter index mask in SBI PMU extension requests. An attacker could use this issue to cause a denial of service...

Exploit for CVE-2026-97347

CVE-2026-97347 — Stored XSS in Post Views Stats Counter WordP...

CVE-2026-97347

The Post Views Stats Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Agent Header in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-97347 Post Views Stats Counter <= 1.1.7 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header

The Post Views Stats Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Agent Header in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

EUVD-2026-89682

The Post Views Stats Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Agent Header in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...