CVE-2026-57777 WordPress WooCommerce plugin < 11.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Automattic WooCommerce allows Blind SQL Injection. This issue affects WooCommerce: from n/a before 11.0...

CVE-2026-57777

Automattic WooCommerce (WordPress plugin) versions prior to 11.0 are affected by a Blind SQL Injection vulnerability in the plugin's handling of special elements in SQL commands. The vulnerability is rated CVSS 3.1: 7.6 (HIGH) , with an attack vector of network , low complexity , and high privile...

EUVD-2026-70971

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Automattic WooCommerce allows Blind SQL Injection. This issue affects WooCommerce: from n/a before 11.0...

CVE-2026-57777 WordPress WooCommerce plugin < 11.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Automattic WooCommerce allows Blind SQL Injection. This issue affects WooCommerce: from n/a before 11.0...

CVE-2026-57777 WordPress WooCommerce plugin < 11.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Automattic WooCommerce allows Blind SQL Injection. This issue affects WooCommerce: from n/a before 11.0...

Exploit for CVE-2026-85046

CVE-2026-85046 Chrome Zero-Day Vulnerability Exploited in the...

nomore403

NoMore403 nomore403 is a command-line tool for testing HTTP access-control bypasses and parser inconsistencies around 401, 403, and related responses. The tool is designed for practical web security work: bug bounty, penetration testing, security reviews, and regression testing of access-control...

flightsim

Network Flight Simulator flightsim is a lightweight utility used to generate malicious network traffic and help security teams to evaluate security controls and network visibility. The tool performs tests to simulate DNS tunneling, DGA traffic, requests to known active C2 destinations, and other...

retryabledns

Retryable dns resolver Based on miekg/dns and freely inspired by bogdanovich/dnsresolver. Features Supports both system default DNS resolvers and user-provided ones Retries DNS requests in case of I/O errors, timeouts, or network failures Allows arbitrary query types Resolution with random...

wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

GoTEE-example

Introduction Le framework GoTEE implémente l'instanciation concurrente d'unikernels basés sur TamaGo en modes privilégié et non privilégié, interagissant entre eux via le mode moniteur et des appels système personnalisés. Grâce à ces capacités, GoTEE implémente un environnement d'exécution de...

ddoor

ddoor cross platform backdoor using dns txt records What is ddor? ddor is a cross platform light weight backdoor that uses txt records to execute commands on infected machines. Features Allows a single txt record to have seperate commands for both linux and windows machines List of around 10 publ...

QuantumLock

QuantumLock غير قابل للكسر، جاهز للحوسبة الكمومية، إلى الأبد. QuantumLock هو بروتوكول بيتكوين مفتوح المصدر ومقاوم للحوسبة الكمومية مصمم لحماية الأصول الرقمية من التهديد الناشئ للحوسبة الكمومية. يجمع بين التشفير المتقدم والخصوصية وقابلية التوسع وميزات المرونة لضمان بقاء بيتكوين آمنًا وجاهزًا...

CVE-2026-41940

CVE-2026-41940 - تجاوز المصادقة في cPanel/WHM يحتوي هذا المستودع على تقرير منقح باللغة الإنجليزية وأداة تحقق مكتوبة بلغة Go لثغرة CVE-2026-41940، وهي تجاوز للمصادقة في cPanel/WHM ناتج عن حقن CRLF في معالجة المصادقة الأساسية Basic Authentication. جميع قوائم الأهداف الحية، وصادرات الأصول، وملفات...

hate_crack v2.36.1

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...

CVE-2026-47423-dompurify-xss-detector

DOMPurify . Au lieu de se fier aux commentaires source facilement supprimés ou aux variables de version, cet outil effectue une empreinte logique sur les bundles JavaScript minifiés de production pour identifier les configurations de balises autorisées non corrigées. Résumé de la vulnérabilité Da...

osint-scraper

Social Recon This application locates and compiles information about online personalities, given a username and/or email address. Use this to investigate your own online presence, summarize the digital footprint of someone you know, or uncover the person behind a specific username. Getting Starte...

espoofer

espoofer espoofer is an open-source testing tool to bypass SPF, DKIM, and DMARC authentication in email systems. It helps mail server administrators and penetration testers to check whether the target email server and client are vulnerable to email spoofing attacks or can be abused to send spoofi...

CVE-2026-33718

CVE-2026-33718 OpenHands معرّضة لثغرة حقن الأوامر عبر معالج Git Diff الخاص بها تبرع ادعم صيانة هذا المشروع عبر PayPal أو بمسح رمز QR أدناه. ⚡ الاستخدام البسيط استخدم هذا المشروع فقط في بيئات آمنة ومصرح بها، مثل: الأجهزة الافتراضية المحلية حاويات Docker إعدادات المختبرات المعزولة بيئات اختبار...

instarecon

InstaRecon Automated basic digital reconnaissance. Great for getting an initial footprint of your targets and discovering additional subdomains. InstaRecon will do: DNS lookups A, PTR, MX, NS DNS lookups recursively on all hosts discovered Whois on domain and IP lookups Google dorks looking for...