The vulnerability of the R7-Officer corporate server’s document editor, related to the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary code.

The vulnerability of the R7-Officer corporate server’s document editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow for the execution of arbitrary code...

simplewall

simplewall Definitely for advanced users. Description: Simple tool to configure Windows Filtering Platform WFP which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows 7 SP1 and higher operating systems. You can...

CVE-2026-18937

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-18937 CVE-2026-18937 Broken Link Checker 2.4.11 - wordpress.org I am @abraxasnull. Loopback lab. The client is CVE-2026-18937-Abraxas-Labs.py. Query vars become globals. On plain permalinks,...

Rabbit Hole

概述 Rabbit Hole 提供了 Maltego 的非常有限的功能子集，专注于为渗透测试创建信息的可视化表示。它支持创建各种类型的节点（如 IP 地址、端口、服务等）以及它们之间的链接，并且拥有更直观的界面，无需任何注册。 这是作为个人工具创建的，用于帮助我在处理 Hack The Box 中的各种机器时组织信息，并希望它能让其他人的工作更轻松。 从源代码构建 Linux Rabbit Hole 已在 Linux Mint 和 Parrot 上测试过。您可能需要以下依赖项： sudo apt install xorg-dev libglu1-mesa-dev 要构建，请运行以下命令：...

Fermion

Fermion Fermion es una aplicación de electron que envuelve frida-node y monaco-editor. Ofrece un entorno totalmente integrado para prototipar, probar y refinar scripts de Frida a través de una única interfaz. Con la integración de Monaco vienen todas las funciones que esperarías de Visual Studio...

EUVD-2026-91933

The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and copying that file into a publicly accessible uploads folder. This makes it possible for users with the Editor role an...

Joomla-JCK-Editor-6.4.4-SQL-Injection

Joomla-JCK-Editor-6.4.4-SQL-Injection El plugin Jtreelink del JCK Editor para Joomla! no analiza correctamente las entradas del usuario, lo que permite inyección SQL. Este exploit aprovecha esta falla de seguridad y extrae las credenciales de los administradores y, posiblemente, sube un shell RCE...

sops

SOPS: Operaciones de Secretos SOPS es un editor de archivos cifrados que soporta los formatos YAML, JSON, ENV, INI y BINARY, y cifra con AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age y PGP. demostración .. image:: https://i.imgur.com/X0TM5NI.gif .. image::...

EUVA

🌌 EUVA IDE Plataforma abierta para ingeniería inversa. 🔍 Acerca de EUVA EUVA no es solo un editor hexadecimal y un descompilador; es más bien una plataforma de ingeniería inversa que tú personalizas, en lugar de que ella te personalice a ti. Es una plataforma a la que puedes conectar cualquier co...

rehex

逆向工程师的十六进制编辑器 一款跨平台（Windows、Linux、macOS、BSD）的十六进制编辑器，适用于逆向工程及其他一切用途。 手册的在线版本可在此访问：solemnwarning.net/rehex/manual/。 功能特性 支持大文件（1TB以上） 解码整数/浮点数值类型 内联反汇编机器码 高亮和注释字节范围 并排比较整个文件或选定区域 Lua脚本支持（API参考） 虚拟地址映射支持 支持常见文本编码（ASCII、Unicode、ISO-8859-X等） 导入和导出Intel HEX文件 位图数据可视化 二进制模板，用于自动注释数据（类似于010 Editor） 位编辑/...

rehex

Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...

CVE-2025-50754-PoC

CVE-2025-50754 Stored XSS to Remote Code Execution in a PHP-Based CMS Platform Summary A PHP-based CMS platform version 5 contains a stored Cross-Site Scripting XSS vulnerability in the "Report" feature. When an administrator views a user-submitted report, malicious JavaScript is executed within...

masta-cve-2026-48907

MASTA CVE-2026-48907 Scanner Single-file, self-contained scanner for Joomla! JCE Editor Author: Hussein Mohamed masta ghimau !CAUTION 🚨 DISCLAIMER — READ BEFORE USE THIS IS AN INTRUSIVE SECURITY TESTING TOOL. THIS TOOL IS FOR AUTHORIZED SECURITY ASSESSMENTS ONLY. Scanning systems you do NOT own o...

wxHexEditor

wxHexEditor wxHexEditor official GIT repo For info : http://www.wxhexeditor.org Compilation instructions Just launch make! Compilation dependencies on Linux wxgtk;...

ImHex

Un Editor Hexadecimal para Ingenieros Inversos, Programadores y personas que valoran sus retinas cuando trabajan a las 3 AM. /ˈɪmhɛks/ Apoyo Si te gusta mi trabajo, por favor considera apoyarme en GitHub Sponsors, Ko-Fi o PayPal. ¡Muchas gracias! Patrocinadores notables | ---|--- | JetBrains,...

Moodle LTI module Reflected - Cross-Site Scripting

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...

MaxSite CMS <=109.1 - Remote Code Execution

MaxSite CMS through 109.1 allows unauthenticated remote attackers to execute arbitrary code via the MarkItUp editor preview AJAX endpoint, preview-ajax.php. The endpoint insufficiently authenticates the request, failing to ensure the user is logged in, and processes the attacker's input via unsaf...

WordPress Admin Font Editor <=1.8 - Cross-Site Scripting

WordPress Admin Font Editor 1.8 and before contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

Joomla! JCE extension < 2.9.99.5 unauthenticated RCE

Joomla JCE editor extension contains an unrestricted file upload vulnerability caused by allowing unauthenticated users to create new editor profiles, letting attackers upload and execute PHP code remotely, exploit requires no authentication. id: CVE-2026-48907 info: name: Joomla! JCE extension...

CVE-2023-46818

Metasploit-module Módulo de Metasploit use exploit/linux/http/ispconfiglanguageedit set RHOSTS target.com set USERNAME admin set PASSWORD password123 set LHOST 127.0.0.1 set LPORT 4444 exploit Se descubrió un problema en ISPConfig anterior a 3.2.11p1. Se puede lograr una inyección de código PHP e...