330991 matches found
CVE-2024-55972
CVE-2024-55972 eTemplates = 0.2.1 - InyecciΓ³n SQL no autenticada DescripciΓ³n El plugin eTemplates para WordPress es vulnerable a la inyecciΓ³n SQL en versiones hasta la 0.2.1 inclusive, debido a un escape insuficiente en el parΓ‘metro proporcionado por el usuario y a la falta de preparaciΓ³n...
CVE-2026-11613
The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the 'customlooptemplate' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing th...
CVE-2026-79675
A flaw was found in NLTK. When processing untrusted input for its per-call options parameter in the java function, NLTK fails to validate Java Virtual Machine JVM options. A remote attacker could exploit this by injecting dangerous JVM flags, such as -agentpath or -javaagent, to achieve arbitrary...
invoker
Invoker Penetration testing utility and antivirus assessment tool. Built with Visual Studio Community 2022 v17.5.4 64-bit and tested on Windows 10 Enterprise OS 64-bit. Made for educational purposes. I hope it will help! This repository started to have known signatures and I don't have time to...
LAST
L.A.S.T. Linux Automated Security scanning Tool the LAST tool you will ever use! This tool is used to automate the recon proces of Red Team Excercises. It gathers all the information and reports it back in an easy to read format. The script is made so it is possible for everyone to include his ow...
jeopardize
Introduction Jeopardize tool is developed to provide basic threat intelligence&response capabilities against phishing domains at the minimum cost as possible. It detects registered phishing domain candidates typosquatting, homograph etc., analyzes them and assigns a risk score to them. After then...
wwwgrep
WWWGrep OWASP Foundation Web Respository Author: Mark Deen & Aditi Mohan Introduction WWWGrep is a rapid search βgreppingβ mechanism that examines HTML elements by type and permits focused single, multiple file based URLs and recursive with respect to root domain or not searches to be performed...
XSpear
XSpear XSpear is XSS Scanner on ruby gems !IMPORTANT XSpear Repository Archived This repository has been archived and is now read-only. XSpear is no longer actively maintained. Try Dalfox instead ππ¦ A faster, more powerful XSS scanner with advanced features. β https://github.com/hahwul/dalfox Key...
HRShell
HRShell: An advanced HTTPS Reverse Shell built with Flask HRShell is an HTTPS/HTTP reverse shell built with flask and is compatible with python 3.x. The client.py has been successfully tested on: Linux ubuntu 18.04 LTS, Kali Linux 2019.3 macOS Mojave/Catalina Windows 7/10 while the server.py is...
Cmulator
Cmulator - Scriptable x86 RE Sandbox Emulator v0.3 Beta Cmulator is x86 - x64 Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries Based on Unicorn & Capstone Engine & javascript . π¬ This is the last supported Pascal version and new code base C/C++ will be in here Cmulato...
StegCracker
StegCracker Steganography brute-force utility to uncover hidden data inside files. Looking for the Docker repository? You can find it here Deprecation Stop wasting time and CPU, use stegseek instead! Not convinced? Look at these benchmarks stolen with love: password| Line| Stegseek v0.4|...
EGESPLOIT
EGESPLOIT EGESPLOIT is a golang library for malware development, it has few unique functions for meterpreter integration. DOCUMENTATION root@kitploit: CalculateChecksumx : Function calculates x digit 8 bit checksum for reverse HTTP/HTTPS meterpreter connections, returns the calculated checksum as...
CVE-2026-11613 Divi Ajax Filter <= 5.1.2 - Unauthenticated Local File Inclusion via 'custom_loop_template' Parameter
The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the 'customlooptemplate' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing th...
CVE-2026-11613
The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to and including 5.1.2 , via the custom_loop_template parameter. Unauthenticated attackers can include and execute arbitrary .php files on the server, potentially bypassing access controls, obtainin...
EUVD-2026-70888
The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the 'customlooptemplate' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing th...
CVE-2026-11613 Divi Ajax Filter <= 5.1.2 - Unauthenticated Local File Inclusion via 'custom_loop_template' Parameter
The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the 'customlooptemplate' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing th...
CVE-2021-22205
CVE-2021-22205 GitLab CE/EE Preauth RCE using ExifTool This project is for learning only, if someone's rights have been violated, please contact me to remove the project, and the lastDO NOT USE IT ILLEGALLY If you have any illegal behavior in the process of using this tool, you will bear all the...
arachni
Notice Arachni has become obsolete, try out its next-gen successor Ecsypno Spectre Scan! Arachni - Web Application Security Scanner Framework Synopsis Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the...
WiFi-Pumpkin-deprecated
This repository is βοΈ DEPRECATED, wifipumpkin3 is Released, checkout! WiFi-Pumpkin - Framework for Rogue Wi-Fi Access Point Attack Description The WiFi-Pumpkin is a rogue AP framework to easily create these fake networks, all while forwarding legitimate traffic to and from the unsuspecting target...
manticore
β οΈ Project is archived β οΈ This project is no longer internally developed and maintained. Manticore Manticore is a symbolic execution tool for the analysis of smart contracts and binaries. Features Program Exploration : Manticore can execute a program with symbolic inputs and explore all the...