The vulnerability of the R7-Officer corporate server’s document editor, related to the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary code.

The vulnerability of the R7-Officer corporate server’s document editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow for the execution of arbitrary code...

WordPress WP Coder plugin 4.0-4.5.1 - Editor+ RCE vulnerability

Editor+ RCE vulnerability discovered by Ayush Srivastava in WordPress Plugin WP Coder versions 4.0-4.5.1...

CVE-2026-104677

The WP Coder WordPress plugin before 4.5.2 does not restrict access to its PHP code-execution feature to administrators, gating it on a content capability that the Editor role holds by default, which allows Editor-level users to save and execute arbitrary PHP code on the server and fully compromi...

heappy

🙂 Heappy: un editor de heap feliz Heappy es un editor basado en gdb/gef que te ayuda a manejar el heap durante el desarrollo de tus exploits. El proyecto debe considerarse una herramienta didáctica útil para comprender la evolución del heap durante el ciclo de vida del proceso. Se ha creado para...

heappy

🙂 Heappy: a happy heap editor Heappy is an editor based on gdb/gef that helps you to handle the heap during your exploitation development. The project should be considered a didactic tool useful to understand the evolution of the heap during the process life cycle. It has been created to simplify...

CVE-2023-22809

Escalada de Privilegios en Linux Exploit para CVE-2021-3560 Sudoedit alias -e - Escalada de Privilegios Local Solo con fines educativos y de investigación de seguridad autorizada Autores del Exploit Original n3m1dotsys Descripción de la Vulnerabilidad En Sudo antes de 1.9.12p2, la funcionalidad...

rehex

Editor Hexadecimal para Ingenieros Inversos Un editor hexadecimal multiplataforma Windows, Linux, macOS, BSD para ingeniería inversa y todo lo demás. Se puede acceder a una copia en línea del manual aquí: solemnwarning.net/rehex/manual/. Características Soporte para archivos grandes 1TB+...

rehex

Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...

CVE-2026-97188 String Locator < 2.6.8 - Unauthenticated PHP Object Injection via Database Editor

The String locator WordPress plugin before 2.6.8 does not restrict the classes allowed when deserializing the content of a database row saved through its database editor, allowing unauthenticated attackers to store a serialized PHP object that is instantiated when an administrator later opens and...

CVE-2026-97188

The String locator WordPress plugin before 2.6.8 does not restrict the classes allowed when deserializing the content of a database row saved through its database editor, allowing unauthenticated attackers to store a serialized PHP object that is instantiated when an administrator later opens and...

EUVD-2026-94184

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

CVE-2026-104667

The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...

CVE-2026-104677 WP Coder 4.0 - 4.5.1 - Editor+ RCE via Global PHP

The WP Coder WordPress plugin before 4.5.2 does not restrict access to its PHP code-execution feature to administrators, gating it on a content capability that the Editor role holds by default, which allows Editor-level users to save and execute arbitrary PHP code on the server and fully compromi...

EUVD-2026-94182

The WP Coder WordPress plugin before 4.5.2 does not restrict access to its PHP code-execution feature to administrators, gating it on a content capability that the Editor role holds by default, which allows Editor-level users to save and execute arbitrary PHP code on the server and fully compromi...

CVE-2026-104677

The WP Coder WordPress plugin before 4.5.2 does not restrict access to its PHP code-execution feature to administrators, gating it on a content capability that the Editor role holds by default, which allows Editor-level users to save and execute arbitrary PHP code on the server and fully compromi...

fhex

Fhex - Un Editor Hex Completamente Funcional Este proyecto nace con el objetivo de desarrollar una herramienta ligera pero útil. La razón es que los editores hex existentes tienen algunas limitaciones diferentes por ejemplo, demasiadas dependencias, falta de características de coloreado hex, etc...

fhex

Fhex - A Full-Featured HexEditor This project is born with the aim to develop a lightweight, but useful tool. The reason is that the existing hex editors have some different limitations e.g. too many dependencies, missing hex coloring features, etc.. This project is based on qhexedit2 , capstone...

CVE-2023-46818

Metasploit-module Módulo de Metasploit use exploit/linux/http/ispconfiglanguageedit set RHOSTS target.com set USERNAME admin set PASSWORD password123 set LHOST 127.0.0.1 set LPORT 4444 exploit Se descubrió un problema en ISPConfig anterior a 3.2.11p1. Se puede lograr una inyección de código PHP e...

Joomla-JCK-Editor-6.4.4-SQL-Injection

Joomla-JCK-Editor-6.4.4-SQL-Injection El plugin Jtreelink del JCK Editor para Joomla! no analiza correctamente las entradas del usuario, lo que permite inyección SQL. Este exploit aprovecha esta falla de seguridad y extrae las credenciales de los administradores y, posiblemente, sube un shell RCE...

ImHex

Un Editor Hexadecimal para Ingenieros Inversos, Programadores y personas que valoran sus retinas cuando trabajan a las 3 AM. /ˈɪmhɛks/ Apoyo Si te gusta mi trabajo, por favor considera apoyarme en GitHub Sponsors, Ko-Fi o PayPal. ¡Muchas gracias! Patrocinadores notables | ---|--- | JetBrains,...