mapXplore

mapXplore Español mapXplore is a modular application that imports data extracted of the sqlmap to PostgreSQL or SQLite database. Its main features are: Import of information extracted from sqlmap to PostgreSQL or SQLite for subsequent querying. Sanitized information, which means that at the time ...

rapiddns-cli

RapidDNS CLI 中文文档 A powerful command-line interface for interacting with the RapidDNS API. This tool allows you to perform DNS searches, advanced queries, and large-scale data exports directly from your terminal. Features DNS Search : Search by domain, IP, or CIDR. Advanced Query : Use powerful...

CVE-2024-58404

Zipline versions from 3.4.5 before 3.7.10 are affected by a path traversal vulnerability in the user data export endpoint . The root cause is a failure to properly validate the name query parameter , allowing authenticated attackers to bypass user ID checks. By using directory traversal sequences...

EUVD-2024-55850

Zipline versions from 3.4.5 before 3.7.10 contain a path traversal vulnerability in the user data export endpoint via the name query parameter. Authenticated attackers can bypass the user id check and use directory traversal sequences to read arbitrary files on the server host...

Relevanssi (A Better Search) <= 4.22.0 - Query Log Export

The Relevanssi Search plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check in all versions up to, and including, 4.22.0. This makes it possible for unauthenticated attackers to export the query log data. id: CVE-2024-1380 info: name: Relevanssi A...

PT-2026-146566

Zipline versions from 3.4.5 before 3.7.10 contain a path traversal vulnerability in the user data export endpoint via the name query parameter. Authenticated attackers can bypass the user id check and use directory traversal sequences to read arbitrary files on the server host...

CVE-2026-118495

Joomla / WordPress Extension - acymailing.com - Exposure of sensitive information to an unauthorized actor in AcyMailing 6.0.0 - 11.1.1 - Exposure of sensitive information to an unauthorized actor in AcyMailing 6.0.0 through 11.1.1. An unauthenticated attacker who knows a subscriber's email addre...

CVE-2026-118495 Joomla / WordPress Extension - acymailing.com - Exposure of sensitive information to an unauthorized actor in AcyMailing 6.0.0 - 11.1.1

Joomla / WordPress Extension - acymailing.com - Exposure of sensitive information to an unauthorized actor in AcyMailing 6.0.0 - 11.1.1 - Exposure of sensitive information to an unauthorized actor in AcyMailing 6.0.0 through 11.1.1. An unauthenticated attacker who knows a subscriber's email addre...

EUVD-2026-124598

Joomla / WordPress Extension - acymailing.com - Exposure of sensitive information to an unauthorized actor in AcyMailing 6.0.0 - 11.1.1 - Exposure of sensitive information to an unauthorized actor in AcyMailing 6.0.0 through 11.1.1. An unauthenticated attacker who knows a subscriber's email addre...

CVE-2026-118495

The AcyMailing extension for Joomla and WordPress (versions 6.0.0 through 11.1.1 ) contains a vulnerability that allows an unauthenticated attacker to access sensitive information. By knowing a subscriber's email address , an attacker can read the subscriber's record, including a per-subscriber s...

CVE-2024-4879

CVE-2024-4879 CVE-2024-4879.py is a Python script designed to detect specific vulnerabilities in ServiceNow instances and dump database connection details if the vulnerability is found. This tool is particularly useful for security researchers and penetration testers. Features Scans URLs for a...

CVE-2026-118495: Datasolution AcyMailing extension for Joomla and WordPress: Joomla / WordPress Extension - acymailing.com - Exposure of sensitive information to an unauthorized actor in…

Joomla / WordPress Extension - acymailing.com - Exposure of sensitive information to an unauthorized actor in AcyMailing 6.0.0 - 11.1.1 - Exposure of sensitive information to an unauthorized actor in AcyMailing 6.0.0 through 11.1.1. An unauthenticated attacker who knows a subscriber's email addre...

PT-2026-145897

Name of the Vulnerable Software and Affected Versions AcyMailing versions 6.0.0 through 11.1.1 Description An unauthenticated attacker with knowledge of a subscriber's email address can access that subscriber's record. This exposure includes the per-subscriber secret key used to authorize...

CVE-2026-121873 Redirection for Contact Form 7 2.6.0 - 3.2.15 - Unauthenticated Forged Personal Data Request Creation

The Redirection for Contact Form 7 WordPress plugin before 3.2.16 does not verify ownership of the email address supplied through its data request form action and by default records the resulting request as already confirmed, allowing unauthenticated visitors to create verified WordPress personal...

CVE-2026-121873

The Redirection for Contact Form 7 WordPress plugin (versions before 3.2.16 ) is vulnerable to an Unauthenticated Forged Personal Data Request Creation vulnerability. The application fails to verify the ownership of an email address provided via its data request form action. Consequently, it defa...

CVE-2026-125758

The Aptabase platform, in versions prior to commit 61d4c01 , is susceptible to an authentication bypass vulnerability caused by the use of a publicly known example AUTH_SECRET (CWE-1188). This flaw allows unauthenticated attackers to forge sign-in links and generate HS256 JWTs that are accepted b...

EUVD-2026-119399

Vikunja before 2.7.1 contains an improper resource cleanup vulnerability that leaves full-data export archives orphaned on disk after re-exports, failed exports, or account deletion. Authenticated users can repeatedly re-trigger exports containing all their attachments to exhaust disk storage,...

CVE-2026-63664

CloudBeaver is a cloud database manager. In versions up to and including 26.1.1, some server-side export operations do not consistently enforce the global data export restriction. An authenticated non-administrative user with access to a shared database connection can initiate certain server-side...

CVE-2026-63664 CloudBeaver: Authorization Bypass (BFLA) - Data Export Restriction Bypass

CloudBeaver is a cloud database manager. In versions up to and including 26.1.1, some server-side export operations do not consistently enforce the global data export restriction. An authenticated non-administrative user with access to a shared database connection can initiate certain server-side...

CVE-2026-63664 CloudBeaver: Authorization Bypass (BFLA) - Data Export Restriction Bypass

CloudBeaver is a cloud database manager. In versions up to and including 26.1.1, some server-side export operations do not consistently enforce the global data export restriction. An authenticated non-administrative user with access to a shared database connection can initiate certain server-side...