CVE-2026-40807

Unauthenticated Cross Site Scripting XSS in CF7 Views Complete Entry Management for Contact Form 7 = 3.2.6 versions...

RedTeam-Physical-Tools

Red Team – Seguridad Física – Entrada Encubierta – EDC Una lista seleccionada de herramientas disponibles comercialmente comúnmente referenciadas en evaluaciones de seguridad física autorizadas , red teaming y entrenamiento de entrada encubierta. Legal y Ética: Úselas solo con autorización por...

CVE-2026-98338

The Linux kernel contains a race condition in the cfg80211 wireless subsystem when joining an IBSS . The issue occurs because the system previously recorded only the BSSID/channel and performed a lookup later; however, a new scan with NL80211_SCAN_FLAG_FLUSH could remove the BSS entry before proc...

EUVD-2026-93324

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't filter by BSS type when removing stale entries When an assoc AP switches to a channel that already has a BSS entry, cfg80211updateassocbssentry removes that entry before rehashing the real one, since the two...

CVE-2026-40807 WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in CF7 Views Complete Entry Management for Contact Form 7 = 3.2.6 versions...

CVE-2026-40807

The CF7 Views – Complete Entry Management for Contact Form 7 plugin for WordPress, version 3.2.6 and below , is vulnerable to an unauthenticated Cross Site Scripting (XSS) vulnerability. The issue is rooted in the improper neutralization of input during web page generation (CWE-79). Successful ex...

scenester

Scenester Scenester - a tool to visually snapshot a website by supplying multiple user-agent. Designed to aid in discovery of different entry points into an application. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Sharique Shaikh, sharique dot shaikh at nccgro...

spybrowse

BrowseSpy Be sure to change the ftp variables throughout the code, these variables contain the username, password, & IP address of the FTP server which receives the files. This code will do the following: 1. Copy itself into the %TMP% directory & name itself ursakta.exe 2. Add a registry entry to...

CVE-2021-40444-Sample

CVE-2021-40444-Sample CVE-2021-40444 Sample...

CVE-2026-46588

camel-couchdb CouchDb Header Injection Reproducer CVE-2026-46588 This project demonstrates a message-header injection in Apache Camel's camel-couchdb component, tracked as CVE-2026-46588. The component reads several Exchange headers to control its behaviour — CouchDbDatabase, CouchDbSeq, CouchDbI...

Everest Forms WordPress Plugin <= 3.4.3 - PHP Object Injection

The Everest Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.4.3 via deserialization of untrusted input from form entry metadata. This is due to the html-admin-page-entries-view.php file calling PHP's native unserialize on stored entry meta...

CVE-2023-3640

SCTF2023kernelpwn SCTF 2023 kernel pwn Off-topic: A little advertisement — the author is a 2024 undergraduate graduate student, participating in this year's autumn recruitment. Feel free to contact me sycrop This problem aims to test two points. 1. The starting points of the cpu entry area mappin...

patchkit

patchkit Parchea un binario ELF usando uno o más scripts simples de Python. Uso: patch patchdir|file... patchdir Contiene uno o más archivos de parche Python, que se ejecutarán en orden alfabético contra un binario. Ejemplos de Parche Nopeando una dirección, inyectando una función en ensamblador,...

DOCxNGINxFX

WORDLISTxGENERATORxFX Versión 1.0 Versión 2.0 WORDLISTxGENERATORxFX renombrado a DOCxNGINxFX Versión 3.0 DOCxNGINxFX Escribí esto para devolver algo a la gran y poderosa comunidad de código abierto que comparte su conocimiento o frameworks y de quienes he aprendido tanto. La función principal de ...

PageTableInjection

PageTableInjection Inyección de código, inyecta payload malicioso a través de las tablas de páginas PML4. Introducción Esto es solo una prueba de concepto de la técnica de inyección de tablas de páginas para inyectar código malicioso en procesos de usuario arbitrarios. En Windows y algunos sistem...

drow

drow Descripción TL;DR drow es una utilidad de línea de comandos que se utiliza para inyectar código y enganchar el punto de entrada de ejecutables ELF post-compilación. Toma ejecutables ELF sin modificar como entrada y exporta un ELF modificado que contiene un payload suministrado por el usuario...

tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

CVE-2023-4966

CVE-2023-4966 just to test!...

blanket

blanket Blanket is a sandbox escape targeting iOS 11.2.6, although the main vulnerability was only patched in iOS 11.4.1. It exploits a Mach port replacement vulnerability in launchd CVE-2018-4280, as well as several smaller vulnerabilities in other services, to execute code inside the ReportCras...

CVE-2025-48384

CVE-2025-48384 for CVE-2025-48384 test...