raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

dnSpy

dnSpy - 最新版本 dnSpy 是一个调试器和 .NET 程序集编辑器。即使没有源代码，你也可以使用它来编辑和调试程序集。主要功能： 调试 .NET 和 Unity 程序集 编辑 .NET 和 Unity 程序集 浅色和深色主题 更多功能请见下方 二进制文件 https://github.com/dnSpy/dnSpy/releases 构建 git clone --recursive https://github.com/dnSpy/dnSpy.git cd dnSpy 或 dotnet build ./build.ps1 -NoMsbuild 要调试 Unity...

WordPress Site Editor <=1.1.1 - Local File Inclusion

WordPress Site Editor through 1.1.1 allows remote attackers to retrieve arbitrary files via the ajaxpath parameter to editor/extensions/pagebuilder/includes/ajaxshortcodepattern.php. id: CVE-2018-7422 info: name: WordPress Site Editor =1.1.1 - Local File Inclusion author: LuskaBol,0x240x23elu...

PT-2026-104080

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'lang' parameter in all versions up to, and including, 7.16.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

PT-2026-104117

The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor in all versions up to, and including, 5.2.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

PT-2026-104118

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.6 via the 'otter form widget filter' parameter. This makes it possible for authenticated attackers, with...

rubygem-hammer_cli: command injection via insecure editor invocation

A flaw was found in rubygem-hammercli. A command injection vulnerability exists in Hammer CLI and the Railties Ruby on Rails component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system method. By passing a single interpolated...

rubygem-hammer_cli: command injection via insecure editor invocation

A flaw was found in rubygem-hammercli. A command injection vulnerability exists in Hammer CLI and the Railties Ruby on Rails component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system method. By passing a single interpolated...

0-click-RCE-Exploit-for-CVE-2024-9932

CVE-2024-9932 / 0-Click RCE 漏洞利用 作者：Joshua Provoste https://x.com/JoshuaProvoste/status/1858329238153072668 此仓库包含针对 CVE-2024-9932 的概念验证利用代码，该漏洞是 Wux Blog Editor WordPress 插件中的一个未经身份验证的任意文件上传漏洞，可导致远程命令执行（RCE）。 脚本功能 该脚本利用一个易受攻击的 REST 端点，无需身份验证即可上传远程 PHP 负载。上传后，它会重构最终文件位置、检测目标操作系统，并提供用于命令执行的交互式远程...

Decoder-Improved

Decoder Improved tl;dr Within extender load Decoder-Improved.jar latest release For a walkthrough on how to extend Decoder Improved visit ourblog post. The link to the original description seems to be broken. While there's no up-to-date walkthrough about how to extend Decoder Improved at the...

CVE-2024-44625-Gogs-RCE-0.13.0

CVE-2024-44625 y Gogs-RCE-0.13.0 Validado contra una versión de Gogs de la era 0.13.0 detrás de un proxy inverso. Primitiva: el editor web sigue enlaces simbólicos hacia un archivo AUSENTE .git/hooks/pre-receive y crea ese archivo ejecutable. Cada push posterior al repositorio lo ejecuta. Uso:...

PoC-Simulator_CVE-2026-27778

PoC-SimulatorCVE-2026-27778 Editar en el editor de próxima generación de StackBlitz ⚡️...

CVE-2026-55232 Vvveb: Server-side request forgery in Vvveb via IPv6 bypass of validateUrl() in editor oEmbed proxy

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb's SSRF guard resolves a host with an IPv4-only function and never inspects IPv6, so any host that lacks an A record passes a private-range check. Editor oEmbed...

CVE-2026-12545

A flaw was found in rubygem-hammercli. A command injection vulnerability exists in Hammer CLI and the Railties Ruby on Rails component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system method. By passing a single interpolated...

EUVD-2026-90968

A flaw was found in rubygem-hammercli. A command injection vulnerability exists in Hammer CLI and the Railties Ruby on Rails component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system method. By passing a single interpolated...

CVE-2026-12545 Rubygem-hammer_cli: command injection via insecure editor invocation

A flaw was found in rubygem-hammercli. A command injection vulnerability exists in Hammer CLI and the Railties Ruby on Rails component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system method. By passing a single interpolated...

CVE-2026-12545 Rubygem-hammer_cli: command injection via insecure editor invocation

A flaw was found in rubygem-hammercli. A command injection vulnerability exists in Hammer CLI and the Railties Ruby on Rails component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system method. By passing a single interpolated...

CVE-2026-12545

A command injection vulnerability exists in rubygem-hammer_cli , affecting the Hammer CLI and the Railties (Ruby on Rails) component distributed with Red Hat Satellite . The flaw is caused by the insecure interpolation of the $EDITOR environment variable into the Ruby system() method. Because the...

CVE-2026-12545

A flaw was found in rubygem-hammercli. A command injection vulnerability exists in Hammer CLI and the Railties Ruby on Rails component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system method. By passing a single interpolated...

Exploit-LPE-CVE-2026-21721

💥 Exploit CVE-2026-21721 Escribí un exploit para CVE-2026-21721 y lo probé en un entorno de pruebas. 🎯 Qué contiene Escalador de combate: inicia sesión, lee los permisos, escribe Admin permission=4 en todos los paneles. Para la explotación se necesita una cuenta válida con permisos de Editor. 🧪...