CVE-2024-53027-WIP

CVE-2024-53027-WIP POC 正在进行中 CVE-2024-53027：高通蓝牙/Wi-Fi 漏洞 📄 概述 CVE-2024-53027 是一个中等级别的漏洞（CVSS 未评级），影响 Android 设备中的高通 WLAN 和蓝牙芯片组 。在处理无线数据包中的畸形国家信息元素（IE）时，可能导致 瞬时拒绝服务（DoS）。 🧩 受影响组件 高通 WLAN 固件 骁龙芯片组中的蓝牙协议栈 （具体型号尚未确认） ⚠️ 影响 利用方式 ：处于 Wi-Fi/蓝牙范围内的远程攻击者可以使芯片组固件崩溃 ，中断连接直至设备重启。 局限性...

CVE-2024-3495-Poc

CVE-2024-3495-Poc CVE-2024-3495 Country State City Dropdown CF7 Accept-Encoding: gzip, deflate Accept: / Accept-Language: en-US;q=0.9,en;q=0.8 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/108.0.5359.125 Safari/537.36 Connection: close...

CVE-2023-1389

描述 CVE-2023–1389 是 TP-Link Archer AX21 WiFi 路由器中的一个无需身份验证的命令注入漏洞。country 参数中的一个回调使用了 popen 函数，该函数以 root 权限运行，从而允许攻击者通过向管理界面发送 GET 或 POST 请求注入任意值，而无需身份验证。有关该漏洞的更多详细信息，请参见此处。 这些是我在探索该命令注入时创建的几个概念验证（PoC）脚本。Archer-file-transfer.py 是第一个迭代版本，其实现交互的方式相当复杂。Archer-rev-shell.py 为你提供了一个简单的 netcat 反向...

username-anarchy

Username Anarchy Version: 0.6 20 September 2024 Author: urbanadventurer Andrew Horton Homepage: https://www.morningstarsecurity.com/research/username-anarchy Source: https://github.com/urbanadventurer/username-anarchy/ License: MIT Description Tools for generating usernames when penetration...

WordPress iQ Block Country <=1.2.11 - Cross-Site Scripting

WordPress iQ Block Country plugin 1.2.11 and prior contains a cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and...

IP2Location Country Blocker < 2.38.9 - Unauthenticated Information Disclosure

IP2Location Country Blocker plugin for WordPress up to version 2.38.8 contains a regular information exposure caused by missing capability checks on admininit, letting unauthenticated attackers view plugin settings, exploit requires no special conditions. id: CVE-2025-1361 info: name: IP2Location...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

email-header-analyzer

Analizzatore di Intestazioni Email MHA Cos'è l'Analizzatore di Intestazioni Email MHA: L'Analizzatore di Intestazioni Email è uno strumento scritto in flask per analizzare le intestazioni email e convertirle in un formato leggibile dall'uomo; può anche: Identificare i ritardi dei salti...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

CVE-2026-38468

A SQL injection vulnerability in the country-code lookup endpoint in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users with usersviewips privileges to execute arbitrary SQL commands via the ip parameter in a crafted request to...

CVE-2026-38468

This is a SQL injection vulnerability in GazellePW (GazellePosterWall) , a private music tracker application, specifically in the country-code lookup endpoint (tools.php?action=get_cc). The ip parameter is not properly sanitized, allowing remote authenticated users holding the users_view_ips priv...

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

The operators of the DevMan ransomware-as-a-service RaaS scheme are maintaining a dedicated web platform that offers affiliates the ability to build payloads, oversee earnings, and manage various aspects related to victims. Swiss cybersecurity company PRODAFT is tracking the centrally administere...

EUVD-2026-47252

Vulnerability in the Oracle Financials Common Country product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-61031

Vulnerability in the Oracle Financials Common Country product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-12592

CVE-2026-12592 affects the SlimStat Analytics WordPress plugin prior to v5.5.0. The vulnerability stems from not escaping a visitor-controlled geolocation value before rendering in admin analytics reports, enabling unauthenticated visitors to inject a stored XSS payload that executes in an admini...

CVE-2026-53227

creationtimestamp| type| source ---|---|--- 2026-07-01 02:48:57+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-03 16:07:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqwk6bpuc2f 2026-07-06 06:51:16+00:00| seen|...

WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool

Direct messages sent via WhatsApp are being used to distribute malicious Visual Basic Script VBScript files that lead to the installation of legitimate Remote Monitoring and Management RMM software. Per findings from Kaspersky, the active campaign is targeting users of WhatsApp Desktop and WhatsA...

PT-2026-49413

Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi Save Entries, File Upload & Country Code Field = 1.0.6 versions...

CVE-2026-12186

A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function replacecountry in the library /usr/lib/oui-httpd/rpc/tor of the component Tor Proxy Service Configuration Handler. This manipulation causes command injection. The attack can be initiated remotely. The exploi...