2243 matches found
CVE-2017-3000
CVE-2017-3000 Flash Player Constant Blinding PRNG に対する CVE-2017-3000 の完全なエクスプロイト 最後に動的に生成されたコードヒープに WANG と wang を挿入します。...
LeakManager
LeakManager インストール sudo apt-get install mongodb-org screen pip3 install -r requeriments.txt 使い方 screen -S leakManager hug -f index.py -p 1337 OR gunicorn index:hugwsgi -b 0.0.0.0:1337 OR uwsgi --http 0.0.0.0:1337 --wsgi-file index.py --callable hugwsgi ctrl + a + d ユーザー/パスワードの変更 edit...
HopLa
HopLa - Burp copilot 💥 拥有 PayloadsAllTheThings 的全部能力，却没有那些额外开销。 此扩展为 Burp Suite 增强了智能自动补全和内置有效载荷，以简化渗透测试。 它支持与 Ollama、OpenAI 和 Gemini 等 AI 提供商集成，以提供聊天和内容生成/转换等高级功能。 您还可以添加自己的有效载荷，使其更贴合您的需求！ 由 Alexis Danizan 开发 由 Synacktiv 🥷 以开源形式发布 功能特性 : 集成 AI 驱动的自动补全（Copilot 风格） 启用基于 AI 的聊天，用于交互和指导 使用 AI 指令快速转换...
notionterm
notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR ➕: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...
CVE-2026-62058
Insertion of Sensitive Information Into Sent Data vulnerability in WPExperts CF7 Apps contact-form-7-honeypot allows Retrieve Embedded Sensitive Data.This issue affects CF7 Apps: from n/a through 3.7.2...
CVE-2026-103345
Insertion of Sensitive Information Into Sent Data vulnerability in Shamim Rajani Pie Register pie-register allows Retrieve Embedded Sensitive Data.This issue affects Pie Register: from n/a through 3.8.4.13...
CVE-2025-13380
WordPress用AI Engine: ChatGPT, GPT Content Generator = 1.0.1 - 認証済み（Contributor以上）任意ファイル読み取り このWordPress用AI Engineプラグインには、画像挿入機能に脆弱性があり、投稿編集権限を持つ認証済みユーザー （Contributor、Author、Editor、Administrator）がサーバーから任意のファイルをダウンロードできるようになります。この脆弱性は、lqdaiupdatepost...
CVE-2026-86450
Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects DetaWix Mobile Web Portal: before v1.0.19...
EUVD-2026-88959
Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects DetaWix Mobile Web Portal: before v1.0.19...
CVE-2026-89300
The WP Verify API WordPress plugin through 1.0.0 does not have any authorisation check in one of its REST routes, allowing unauthenticated users to insert arbitrary data into its own database table, as well as to make the site send templated verification emails to arbitrary email addresses. The...
EUVD-2026-88096
The WP Verify API WordPress plugin through 1.0.0 does not have any authorisation check in one of its REST routes, allowing unauthenticated users to insert arbitrary data into its own database table, as well as to make the site send templated verification emails to arbitrary email addresses. The...
CVE-2026-89300 WP Verify API <= 1.0.0 - Unauthenticated Verification Code Email Sending to Arbitrary Recipients
The WP Verify API WordPress plugin through 1.0.0 does not have any authorisation check in one of its REST routes, allowing unauthenticated users to insert arbitrary data into its own database table, as well as to make the site send templated verification emails to arbitrary email addresses. The...
CVE-2026-89300: Missing Authorization
The WP Verify API WordPress plugin through 1.0.0 does not have any authorisation check in one of its REST routes, allowing unauthenticated users to insert arbitrary data into its own database table, as well as to make the site send templated verification emails to arbitrary email addresses. The...
PT-2026-99776
Name of the Vulnerable Software and Affected Versions WP Verify API WordPress plugin version 1.0.0 Description An authorization check is missing in a REST route, which allows unauthenticated users to insert arbitrary data into the plugin database table. Additionally, this flaw enables the site to...
DEBIAN-CVE-2026-98083
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction use-after-free in raid stripe insertion If allocation of a RAID stripe extent fails, btrfsinsertoneraidextent aborts and ends the transaction before returning -ENOMEM. btrfsfinishoneordered, the production...
UBUNTU-CVE-2026-98083
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction use-after-free in raid stripe insertion If allocation of a RAID stripe extent fails, btrfsinsertoneraidextent aborts and ends the transaction before returning -ENOMEM. btrfsfinishoneordered, the production...
CVE-2026-98141
The Linux kernel contains a vulnerability in the ntfs component where the update_reparse_data() function incorrectly ignores the return value of set_reparse_index(). When an index insertion fails, the system removes the written reparse data as cleanup but still returns 0, causing symlink(2) and W...
CVE-2026-98141
In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure updatereparsedata ignores the return value of setreparseindex. When index insertion fails, the code removes the just-written reparse data as cleanup but still returns 0, so symlink2...
CVE-2026-98083 btrfs: fix transaction use-after-free in raid stripe insertion
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction use-after-free in raid stripe insertion If allocation of a RAID stripe extent fails, btrfsinsertoneraidextent aborts and ends the transaction before returning -ENOMEM. btrfsfinishoneordered, the production...
EUVD-2026-86913
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction use-after-free in raid stripe insertion If allocation of a RAID stripe extent fails, btrfsinsertoneraidextent aborts and ends the transaction before returning -ENOMEM. btrfsfinishoneordered, the production...