CVE-2026-70553-PoC

CVE-2026-70553 - MaxSite CMS 認証なしRCE CVE-2026-70553のProof-of-Concept: インストールエンドポイントを介してdatabase.phpに持続的なPHPコードインジェクションを行う、MaxSite CMSにおける認証なしリモートコード実行。 免責事項 このPoCは教育および許可されたセキュリティ研究目的のみ を意図しています。著者は、このコードによって引き起こされる誤用や損害について一切責任を負いません。所有するシステム、または明示的な書面による許可を得たシステムに対してのみテストしてください。 脆弱性の概要 MaxSite...

chromebackdoor

Chrome browser backdoor VIDEO Install Text V 3.0 Install Video OLD Binder guide Module guide Form grabber plugins Facebook MessengerSpy plugins Jabber Notifier/ Hide Panel Windows infection Rubber Ducky Payload Require: pip install crxmake wine32 Let's go python chromebackdoor.py user: root pass:...

lscript

The lazy script has not been updated for a while due to me being very busy with my life. I will try my best to upload an update when I find the time Welcome to the LAZY script v2.1.4 A video Hackersploit made : https://www.youtube.com/watch?v=oBpo5sElrMY A video sstec made:...

volatility

This project is archived. See Volatility 3 for modern investigations: https://github.com/volatilityfoundation/volatility3 ============================================================================ Volatility Framework - Volatile memory extraction utility framework The Volatility Framework is a...

ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...

columbus-server

Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Subdomain Lookup Columbus returned 638...

CVE-2026-21140

Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications...

CVE-2026-21140

Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications...

CVE-2026-21140

Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications...

EUVD-2026-91157

Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications...

CVE-2026-21140

A vulnerability exists in ManagedProvisioning prior to SMR Sep-2026 Release 1 due to improper access control . This flaw allows local attackers to install arbitrary applications on the affected system. Specific exploit details are not provided in the documents.

PT-2026-104138

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output...

PT-2026-104067

Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications...

CVE-2025-69604

CVE-2025-69604 Description This vulnerability is similar to the one that is described in CVE-2025-61229 – an attacker can edit the task template to get SuperDuper backup tasks to install an arbitrary package. The package can then run shell scripts as the root user and with the highest level of...

GO-2026-6588 podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

podman quadlet install --replace does not fully replace the old file in github.com/containers/podman...

passera

Note: I no longer have the time to continue development of Passera, but pull requests are more than welcome! The number one requested item would be an updated Firefox extension, since the latest API change broke the current release. Passera A simple tool that allows users to have strong unique...

CVE-2026-0848-Scanner---Herramienta-de-Detecci-n

🔍 CVE-2026-0848 Scanner NLTK の CVE-2026-0848 脆弱性（StanfordSegmenter における任意コード実行）を検出するためのツールです。 ⚡ インストール git clone https://github.com/tu-usuario/CVE-2026-0848-Scanner.git cd CVE-2026-0848-Scanner pip install -r requirements.txt...

CVE-2026-21016-Malicious-PyPI-Package-Install-Hook-setup.py-Execution-

CVE-2026-21016 – 悪意のあるPyPIパッケージインストールフック setup.py の実行 プログラムコード Python setup.py - Malicious package that executes during install from setuptools import setup import os This runs on pip install os.system'id /tmp/pwnedbypackage' setup name='harmless-pkg', version='1.0', packages=, CVE-2026-21016 –...

CVE-2023-6985

CVE-2023-6985 10Web AI Assistant – AI 콘텐츠 작성 도우미 = 1.0.18 - 인증된 사용자Subscriber+에 의한 임의 플러그인 설치/활성화 권한 누락 설명 설명 WordPress용 10Web AI Assistant – AI 콘텐츠 작성 도우미 플러그인은 1.0.18 이하의 모든 버전에서 installplugin AJAX 액션에 대한 기능 검사 누락으로 인해 데이터 무단 수정에 취약합니다. 이로 인해 구독자 수준 이상의 인증된 공격자가 임의의 플러그인을 설치할 수 있으며, 이를 통해 손상된...

CVE-2025-32641

🛡️ Anant Addons for Elementor Anant Addons for Elementor body background-color: 111; color: 0f0; font-family: monospace; padding: 40px; h1 color: ff0055; font-size: 24px; border-bottom: 1px solid 555; padding-bottom: 10px; .box background-color: 222; border: 1px solid 444; padding: 20px;...