CVE-2026-8809

CVE-2026-8809 Advanced Custom Fields: Extended = 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to 'acfpostid' Parameter This critical security vulnerability CVSS 9.8 affects all versions of the popular WordPress plugin Advanced Custom Fields: Extended ACF Extended from...

CVE-2024-13184

CVE-2024-13184 The Ultimate WordPress Toolkit – WP Extended = 3.0.12 - Unauthenticated SQL Injection via Login Attempts Module Description The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to time-based SQL Injection via the Login Attempts module in all versions ...

badecparams

BADECPARAMS CVE-2020-0601에 대한 개념 증명Proof of Concept. badecparams.py는 취약점을 악용하는 중간 인증 기관intermediate certificate authority을 생성한 다음 Authenticode 및 TLS 인증서를 발급합니다. TLS 인증서는 Microsoft Edge와 Internet Explorer에서 확장 유효성 검사Extended Validation를 갖습니다. httpd.py는 명령줄에서 제공된 PEM 인코딩 인증서 체인을 사용하여 www 하위 폴더의 내용을...

extended-ssrf-search

Extended ssrf search This tool search for SSRF using predefined settings in different parts of a request path, host, headers, post and get parameters. First step Rename example.app-settings.conf to app-settings.conf and adjust settings. The most important setting is the callback url. I recommend ...

physical-analyzer-scripts

physical-analyzer-scripts Cellebrite Physical Analyzer Python 脚本，用于为分析人员提供扩展功能...

extended-xss-search

Extended XSS Searcher and Finder This is the extended version based on the initial idea already published as "xssfinder". This private version allows an attacker to perform not only GET but also POST requests. Additionally its possible to proxy every request through Burp or another tunnel. First...

LAPSToolkit

LAPSToolkit Functions written in PowerShell that leverage PowerView to audit and attack Active Directory environments that have deployed Microsoft's Local Administrator Password Solution LAPS. It includes finding groups specifically delegated by sysadmins, finding users with "All Extended Rights"...

pysqli

PySQLi - Python SQL injection framework 1. Overview PySQLi is a python framework designed to exploit complex SQL injection vulnerabilities. It provides dedicated bricks that can be used to build advanced exploits or easily extended/improved to fit the case. 2. Why another SQLi framework ? Simple...

CVE-2023-2640-32629

Ubuntu 권한 상승: CVE-2023-2640 및 CVE-2023-32629 이 취약점은 특정 Ubuntu 커널에 영향을 미치는 로컬 권한 상승 취약점입니다. 비특권 사용자가 마운트된 파일에 특권 확장 속성을 설정하여 보안 검사를 우회하고 잠재적으로 상승된 권한을 얻을 수 있게 합니다. 이 취약점과 관련된 CVE는 CVE-2023-2640 및 CVE-2023-32629입니다. 영향을 받는 커널에는 다양한 Ubuntu 릴리스에 걸쳐 6.2.0, 5.19.0 및 5.4.0 버전이 포함됩니다. 이러한 취약점을 완화하려면...

cve-2025-13486-vuln-setup

CVE-2025-13486 Уязвимая тестовая среда Одноразовая настройка Docker для тестирования уязвимости ACF Extended RCE. Быстрый старт root@kitploit: 1. Download plugins run once ./download-plugins.sh 2. Start environment docker-compose up -d --build 3. Wait 30 seconds for setup, then test nuclei -t...

CVE-2026-81789

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Studio Wombat Advanced Product Fields Extended for WooCommerce allows Path Traversal. This issue affects Advanced Product Fields Extended for WooCommerce: from n/a through 3.1.6...

Fedora 43 : perl-Net-DNS (2026-1237afef8a)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1237afef8a advisory. Update to Net-DNS 1.56 from 1.53. Security fixes: - CVE-worthy: Remote code injection via EDNS EXTENDED ERROR rt.cpan 179945 - Denial of Service via...

firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...

CVE-2021-3493-Exploit

CVE-2021-3493-Exploit CVE-2021-3493 の概念実証ローカル権限昇格エクスプロイト（C言語で記述）。 📌 説明 このリポジトリには、CVE-2021-3493 のエクスプロイトのC言語実装が含まれています。 これは、Linuxカーネルの OverlayFS 実装におけるローカル権限昇格（LPE） の脆弱性です。オーバーレイマウントでファイルが設定される際に、拡張属性（xattrs）の検証が不正確であるため、ローカルユーザーがrootアクセスを取得できるようになります。 🎯 影響を受けるバージョン Ubuntu 20.10 Ubuntu 20.04 LTS...

KLA91266 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user...

CVE-2026-62911

CVE-2026-62911 Microsoft Exchange Server 사전 인증Pre-auth RCE. 자격 증명이 필요 없습니다. Orange TsaiDEVCORE가 Pwn2Own Berlin 2026에서 3-버그 체인의 일부로 이 취약점을 사용했습니다. $200,000 상금, 완전한 SYSTEM 탈취. 기능 Exchange는 MailboxReplicationProxyServiceMRSProxy를 두 개의 경로로 노출합니다. 그중 하나는 Extended Protection 없이 HTTP.sys에 있습니다:...

macOSTriageCollectionScript

macOSTriageCollectionScript macOS用のトリアージデータ収集スクリプトです。sysdiagnoseを利用し、いくつかの追加機能を加えて、調査に役立つトリアージデータを収集します。 このスクリプトは何を収集するのか？ 収集されるデータには以下が含まれます： sysdiagnose ：macOS/iOSオペレーティングシステムの各種バージョンに搭載されているユーティリティで、「システム全体の診断情報」を収集します。ここでは主に、収集されるログファイルとライブデータに使用されます。...

CVE-2026-64705

CVE-2026-64705 — HFS xattr 커널 힙 오버플로우 macOS CVE-2026-64705에 대한 근본 원인 분석 및 개념 증명PoC입니다. 이는 macOS Sonoma 14.8.7HT127117에서 수정된 HFS 커널 확장의 버퍼 오버플로우입니다: HFS — 영향: 앱이 예기치 않은 시스템 종료를 유발하거나 커널 메모리를 쓸 수 있습니다. 향상된 경계 검사를 통해 버퍼 오버플로우가 해결되었습니다. PoC는 무기화된 HFS+ 디스크 이미지입니다. 이를 마운트하고 조작된 확장 속성extended attribute을...

CVE-2025-13486

CVE-2025-13486 익스플로잇 ACF Extended WordPress 플러그인 — 원격 코드 실행 및 권한 상승 Marcin Dudek dudekmar가 발견한 CVE-2025-13486 익스플로잇 ⚠️ 면책 조항 이 저장소는 연구 및 방어적 보안 목적으로만 제공됩니다. 작성자는 이 정보의 오용에 대해 책임을 지지 않습니다. 📌 개요 WordPress용 Advanced Custom Fields: Extended ACFE 플러그인은 0.9.0.5부터 0.9.1.1까지의 버전 에서 원격 코드 실행RCE 취약점에 노출됩니다...

CVE-2026-71222

A heap out-of-bounds read vulnerability was found in gfs2-utils. The eanumptrs field from on-disk extended attribute metadata is consumed without bounds validation, causing a heap buffer over-read that may disclose sensitive memory contents or cause a crash when processing crafted GFS2 filesystem...