lazywarden

Secure, Automated, and Multi-Cloud Bitwarden Backup and Import System Lazywarden is a Python automation tool designed to Backup and Restore data from your vault, including Bitwarden attachments. It allows you to upload backups to multiple cloud storage services and receive notifications across...

Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update

The Easy WP SMTP plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.3.9. This is due to missing capability checks on the admininit function, in addition to insufficient input validation. This makes it possible for unauthenticated attackers to modify the...

WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 - SQL Injection

WordPress Easy Digital Downloads plugin 3.1.0.2 and 3.1.0.3 contains a SQL injection vulnerability in the s parameter of its edddownloadsearch action. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...

Easy Digital Downloads - Privilege Escalation

Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue affects Easy Digital Downloads: from 3.1 through 3.1.1.4.1. id: CVE-2023-30869 info: name: Easy Digital Downloads - Privilege Escalation author: daffainfo severity: critical...

WordPress Easy Pricing Tables <3.2.1 - Cross-Site Scripting

WordPress Easy Pricing Tables plugin before 3.2.1 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter before reflecting it back in a page available to any user both authenticated and unauthenticated when a specific setting is enabled. id:...

WordPress Easy Student Results <=2.2.8 - Improper Authorization

WordPress Easy Student Results plugin through 2.2.8 is susceptible to information disclosure. The plugin lacks authorization in its REST API, which can allow an attacker to retrieve sensitive information related to courses, exams, and departments, as well as student grades and information such as...

EasySpider 0.6.2 - Arbitrary File Read

A vulnerability classified as problematic was found in NaiboWang EasySpider 0.6.2 on Windows. Affected by this vulnerability is an unknown functionality of the file \EasySpider\resources\app\server.js of the component HTTP GET Request Handler. The manipulation with the input...

Easy Appointments <= 3.12.21 - Information Disclosure

Easy Appointments WordPress plugin = 3.12.21 contains a sensitive information exposure caused by an unauthenticated REST API endpoint /wp-json/wp/v2/eablocks/eaappointments/ registered with permissioncallback allowing unrestricted access, letting unauthenticated attackers extract sensitive custom...

Joomla Easy Store - SQL Injection

Joomla Easy Store extension 1.0.0-2.0.1 contains an unauthenticated SQL injection caused by improper validation of order parameters, letting unauthenticated attackers read the full database including credentials and sessions. id: CVE-2026-65761 info: name: Joomla Easy Store - SQL Injection author...

WordPress Easy Social Icons Plugin < 3.0.9 - Cross-Site Scripting

The Easy Social Icons plugin = 3.0.8 for WordPress echoes out the raw value of $SERVER'PHPSELF' in its main file. On certain configurations including Apache+modPHP this makes it possible to use it to perform a reflected cross-site scripting attack by injecting malicious code in the request path...

WordPress Easy Digital Downloads <= 3.2.12 - SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12. id: CVE-2024-5057 info: name: WordPress Easy Digital Downloads = 3.2.12 - SQL Injecti...

CVE-2006-3592

CVE-2006-3952 适用于Win7 32位系统的Easy File Sharing FTP Server 3.5利用程序 基于： pwntools msfvenom / reversetcp payload 脆弱应用下载地址：https://www.exploit-db.com/apps/0efddb6d04f4125d7c1f104c6b1c60a0-efsfs.exe 简单的SEH覆盖 + 几次向后跳转，因为SEH值之后堆栈被破坏。...

CVE-2018-18912

🐞 CVE-2018-18912：Easy File Sharing Web Server 7.2 - 基于栈的缓冲区溢出（SEH） Easy File Sharing Web Server 7.2 中的基于 SEH 的缓冲区溢出，演示经过身份验证的 HTTP POST 参数如何破坏异常处理程序链。 📑 目录 为什么这个仓库存在 为什么这个漏洞有趣 背景和受影响的软件 关于漏洞 触发崩溃 漏洞利用 🎓 为什么这个仓库存在 这个仓库是我在讲授内存损坏漏洞利用时使用的教学材料的一部分（除了日常工作外，我还在不同的网络安全课程中授课，帮助培养下一代逆向工程师）。 CVE-2018-18912...

rainmap-lite

rainmap-lite Rainmap Lite - Responsive web application that allows users to launch Nmap scans from their mobiles/tablets/web browsers! Unlike it's predecessor 1, Rainmap-lite does not require special services RabbitMQ, PostgreSQL, Celery, supervisor, etc to make it easy to install on any server...

die-in-browser

die-in-browser 使用 Detect It Easy 进行静态二进制分析 —— 100% 在浏览器中运行，无需上传。 🔍 这是什么？ 该项目通过 v86 模拟器 在浏览器中完整运行 Detect It Easy DIE —— 一款强大的静态二进制分析工具。 ✅ 无需上传文件 ：二进制文件在本地处理。 ✅ 完整分析 ：包括所有检测、入口点、节区（PE 文件中）、哈希、熵、字符串。 技术栈： Buildroot 2025.11 —— 为客机操作系统提供最小 Linux 系统； v86 —— 基于 JavaScript/WebAssembly 的 x86 模拟器； Detect I...

CVE-2009-1330

CVE-2009-1330 Exploit para desbordamiento de búfer en Easy RM to MP3 Converter 2.7.3.700 CVE-2009-1330 Basado en: pwntools msfvenom / reversetcp payload ropper x64dbg Easy RM to MP3 Converter 2.7.3.700 Aplicación vulnerable disponible en https://www.exploit-db.com/exploits/10374...

easyssh

EasySSH The SSH connection manager to make your life easier. Looking for maintainers! A complete, efficient and easy-to-use manager. Create and edit connections, groups, customize the terminal, with multiple instances of the same connection. Features Manage connections and groups Customize termin...

openvpn

OpenVPN -- Un demonio de tunelización segura Copyright C 2002-2026 OpenVPN Inc. Este programa es software libre; puedes redistribuirlo y/o modificarlo bajo los términos de la GNU General Public License versión 2 publicada por la Free Software Foundation. Para obtener la última versión de OpenVPN,...

easy-exploits

easy-exploits 该仓库包含了我过去发现的不同 CVE ID 的漏洞利用代码（CVE-2021-37910、CVE-2021-40288、CVE-2021-41435、CVE-2021-41436、CVE-2021-41437、CVE-2021-41441、CVE-2021-41442、CVE-2021-41445、CVE-2021-41449、CVE-2021-41450、CVE-2021-41451、CVE-2021-41753、CVE-2021-41788、CVE-2021-46353、CVE-2022-41540、CVE-2022-41541）。 动机...

CVE-2025-50383

CVE-2025-50383 描述 低权限认证用户可通过向易受攻击的端点发送特制的 HTTP POST 请求，并附带恶意 orderby 参数（例如 orderby=IF1=1,SLEEP5,1）来利用此漏洞。这会触发基于时间的盲 SQL 注入，导致在底层 MySQL 数据库上执行未经授权的 SQL 操作，最终实现完整的 SQL 注入利用。 受影响端点 低权限认证用户（角色：客户和提供者）可利用： 1. /index.php/customers/search 2. /index.php/Unavailabilities/search 3...