GHOST

GHOST General Hacking & Observation Security Tool Standalone WPA/WPA2 handshake capture firmware for the Adafruit ESP32-S3 Reverse TFT Feather : built-in 240×135 TFT and three buttons — no companion phone app or browser required for normal use. Captures are saved as .pcap on LittleFS; Captures →...

uC_mousejack

μC Mousejack Microcontroller Mousejack is a project to get Mousejack attacks into a small embedded device, with the form factor of a key chain. Prototype Mousejack Device Our first iteration uses an Adafruit Feather 32u4 protoboard and a SPI-based NRF24L01+ module. Building the device is...

BLEBoy

BLEBoy Goal Create a BLE peripheral that supports all BLE pairing methods that can be used for training and testing, including out-of-band OOB pairing. The perpiheral must be configurable and easy to re-create using consumer parts. About BLEBoy is a BLE peripheral implemented using the Adafruit...

CVE-2023-49861

Missing Authorization vulnerability in socialmediafeather Social Media Feather social-media-feather allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Media Feather: from n/a through = 2.1.3...

CVE-2025-62107

Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through = 1.1.7...

CVE-2025-62107

Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through = 1.1.7...

CVE-2025-62107 WordPress Feather Login Page plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through = 1.1.7...

CVE-2025-62107

This CVE concerns a Cross-Site Request Forgery (CSRF) vulnerability in the PluginOps Feather Login Page for WordPress, affecting versions up to 1.1.7. The underlying issue allows an attacker to perform actions on behalf of an authenticated user on Feather Login Page. Concrete affected item: Feath...

CVE-2025-62107 WordPress Feather Login Page plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through = 1.1.7...

EUVD-2025-204705

Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through 1.1.7...

WordPress plugin Feather Login Page 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

PT-2025-52639

Name of the Vulnerable Software and Affected Versions PluginOps Feather Login Page versions through 1.1.7 Description A Cross-Site Request Forgery CSRF issue exists in PluginOps Feather Login Page. This allows attackers to perform actions on behalf of an unsuspecting user. Recommendations Update...

WordPress Feather Login Page plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by daroo in WordPress Plugin Feather Login Page versions = 1.1.7...

EUVD-2021-23424

Malware in sbrugna...

EUVD-2023-34024

Malicious code in bioql PyPI...

EUVD-2023-53769

Malicious code in bioql PyPI...

EUVD-2022-7140

Malicious code in bioql PyPI...

EUVD-2024-29781

Malicious code in bioql PyPI...

CVE-2024-31923

Cross-Site Request Forgery CSRF vulnerability in PluginOps Feather Login Page.This issue affects Feather Login Page: from n/a through 1.1.5...

CVE-2023-2547

The Feather Login Page plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'deleteUser' function in versions starting from 1.0.7 up to, and including, 1.1.1. This makes it possible for authenticated attackers, with subscriber-level permissions...