pocsuite3

pocsuite3 Legal Disclaimer Usage of pocsuite3 for attacking targets without prior mutual consent is illegal. pocsuite3 is for security testing purposes only 法律免责声明 未经事先双方同意，使用 pocsuite3 攻击目标是非法的。 pocsuite3 仅用于安全测试目的 Overview pocsuite3 is an open-sourced remote vulnerability testing and...

Cve-2026-39676

Cve-2026-39676 Wordpress Версия: Download Manager 3.3.5.2 Название: Отсутствие авторизации - Неаутентифицированная эксплуатация IDOR...

CVE-2023-36144

CVE-2023-36144 CVE-2023-36144 PoC - Intelbras Switch SG 2404 MR L2+ 펌웨어 1.00.54 인증 없이 백업 파일 다운로드 재현 단계: 1. 다음 링크로 이동: http://127.0.0.1/cgi-bin/exportCfgwithpasswd 127.0.0.1을 장치 IP로 교체 2. 백업 파일이 자동으로 다운로드되며, 여기에는 장치 구성과 사용자 및 해시된 비밀번호가 포함되어 있습니다...

Exploit for CVE-2026-21589

CVE-2026-21589 Pre-auth arbitrary file read in Atlassian DC p...

jwt-key-id-injector

JWT Key ID Injector Simple python script to check against hypothetical JWT vulnerability. Let's say there is an application that uses JWT tokens signed HS256 algorithm. An example token looks like the follow:...

zizzania

zizzania zizzania sniffs wireless traffic listening for WPA handshakes and dumping only those frames suitable to be decrypted one beacon + EAPOL frames + data. In order to speed up the process, zizzania sends IEEE 802.11 DeAuth frames to the stations whose handshake is needed, properly handling...

wordlistctl

Описание Скрипт для получения, установки, обновления и поиска архивов со списками слов с веб-сайтов, предлагающих более 6400 списков слов. В последней версии Blackarch Linux он был добавлен в каталог /usr/share/wordlists/. Установка pacman -S wordlistctl Использование $ wordlistctl -h -v...

kalitorify

Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...

fprobe

FProbe FProbe - Fast HTTP Probe Installation GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format with some...

day04-nexus-4956

День 4 – Nexus Repository 3 Path Traversal CVE-2024-4956 Что: Неаутентифицированный обход пути path traversal позволяет любому загружать произвольные файлы с помощью специально созданного URL. Уязвимость: Затрагивает Nexus Repo 3 версии ≤ 3.68.0. Исправлено в 3.68.1. Источник: Консультация Sonaty...

CVE-2022-45354

Download Monitor = 4.7.60 — Раскрытие конфиденциальной информации через REST API CVE-2022-45354:version обнаружено на http://wordpress.lan Детали : CVE-2022-45354:version сопоставлен с http://wordpress.lan Протокол : HTTP Полный URL :...

CVE-2025-9215

StoreEngine — мощный плагин электронной коммерции для WordPress для платежей, членств, партнёрских программ, продаж и многого другого = 1.4.0 — Аутентифицированная Подписчик+ произвольная загрузка файлов Плагин StoreEngine содержит уязвимость в функции CSV-импорта/экспорта, которая позволяет любо...

CVE-2026-39754

Contributor Arbitrary File Download in Piotnet Addons For Elementor = 7.1.71 versions...

CVE-2026-39754 WordPress Piotnet Addons For Elementor plugin <= 7.1.71 - Arbitrary File Download vulnerability

Contributor Arbitrary File Download in Piotnet Addons For Elementor = 7.1.71 versions...

CVE-2026-39754

The Piotnet Addons For Elementor plugin for WordPress (versions

EUVD-2026-93263

Contributor Arbitrary File Download in Piotnet Addons For Elementor = 7.1.71 versions...

kbd-audio

kbd-audio This is a collection of command-line and GUI tools for capturing and analyzing audio data. Keytap The most interesting tool is called keytap - it can guess pressed keyboard keys only by analyzing the audio captured from the computer's microphone. Check this blog post for more details:...

WordPress Automatic Plugin <3.92.1 - Arbitrary File Download and SSRF

WordPress Automatic plugin 3.92.1 is vulnerable to unauthenticated Arbitrary File Download and SSRF Located in the downloader.php file, could permit attackers to download any file from a site. Sensitive data, including login credentials and backup files, could fall into the wrong hands. This...

EUVD-2026-92874

There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoint...

CVE-2026-82988

There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK installation via serving a malicious APK URL through an unauthenticated download endpoint...