Name-That-Hash

➡️ Discord | 웹사이트 ⬅️ 현대적인 해시 식별 시스템 pip3 install name-that-hash && nth 설치 없이 사용할 수 있는 웹 앱 🤔 이게 뭐죠? 5f4dcc3b5aa765d61d8327deb882cf99 같은 해시를 보고 이게 무슨 해시인지 궁금했던 적이 있나요? 🤔 Name-that-hash가 그 해시의 종류를 알려줄 거예요! 🔥 기능 📺 인기순 표시 - Name-that-hash는 가장 보편적인 해시를 먼저 보여줍니다. 예전 시스템은 Skype Hash를 Active Directory의...

Ch4120N-CVE-Pulse

⚡ Ch4120N CVE Pulse スマート検索と脅威インテリジェンスを備えたライブCVE PoCアグリゲーター CVE Pulse は、GitHubから CVE Proof‑of‑Concepts を自動的に発見、スコアリング、インデックス化します。 EPSSスコア と CISA KEV データでそれらを強化し、日次の スナップショット＆差分 を構築し、高速で検索可能な 静的ウェブサイト を提供します 📋 目次 👨‍💻 プロジェクト作成者 🎯 機能概要 ✨ 主な機能 🧱 アーキテクチャ ⚙️ 仕組み 🚀 クイックスタート 📦 インストール 💻 使用方法 サブコマンド フルパイプライン...

CVE-2026-97637

The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability exists because the required PI-Media/json-api parent plugin caches controller dispatch results in transients keyed sole...

CVE-2026-97637

The JSON API Auth plugin for WordPress (versions up to and including 3.1.2 ) is vulnerable to an Authentication Bypass via cached session cookie disclosure. The root cause is that the required PI-Media/json-api parent plugin caches controller dispatch results using only the URI and query string, ...

CVE-2026-97637 JSON API Auth <= 3.1.2 - Unauthenticated Authentication Bypass via Cached 'generate_auth_cookie' Response

The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability exists because the required PI-Media/json-api parent plugin caches controller dispatch results in transients keyed sole...

EUVD-2026-91259

The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability exists because the required PI-Media/json-api parent plugin caches controller dispatch results in transients keyed sole...

WordPress JSON API Auth plugin <= 3.1.2 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by Chi Trung Huynh in WordPress Plugin JSON API Auth versions = 3.1.2...

novahot

novahot novahot는 침투 테스터를 위한 웹쉘 프레임워크입니다. JSON 기반 API를 구현하여 모든 언어로 작성된 트로이 목마와 통신할 수 있습니다. 기본적으로 PHP, ruby, python으로 작성된 트로이 목마가 포함되어 있습니다. 시스템 명령어 실행 외에도 novahot는 mysql, sqlite3, psql을 포함한 대화형 터미널을 에뮬레이션할 수 있습니다. 또한 선호하는 애플리케이션을 사용하여 원격 파일을 로컬에서 업로드, 다운로드, 편집, 보기 위한 "가상 명령어"를 구현합니다. 설치 npm에서 직접 실...

PT-2026-104152

Name of the Vulnerable Software and Affected Versions JSON API Auth plugin for WordPress versions prior to 3.1.3 Description An authentication bypass exists due to cached session cookie disclosure. The PI-Media/json-api parent plugin caches controller dispatch results in transients based only on...

CVE-2024-6624

CVE-2024-6624 | JSON API User = 3.9.3 - 未认证的权限提升 这是一个 Python 脚本，用于利用 WordPress 的 JSON API User = 3.9.3 插件中的 CVE-2024-6624 漏洞。该工具允许未认证的攻击者注册新用户，并在未经授权的情况下将其权限提升为管理员。 使用方法 准备 1. 确保你的系统上安装了 Python 2.7。 2. 安装 requests 依赖： pip install requests 3. 准备一个包含目标 URL 列表的文本文件（urls.txt）（每行一个 URL）。 使用步骤 1. 运行脚本：...

Mass-Scanner-CVE-2026-1405

⚡ Mass-Scanner-CVE-2026-1405 クリーンなWordPressマススキャナー CVE-2026-1405 対応 🧠 概要 複数のWordPressターゲットにおける CVE-2026-1405 の露出をチェックするために構築された、クリーンで軽量なスキャナーです。 以下の点に重点を置いています: 高速なマルチターゲットスキャン クリーンなターミナル出力 シンプルな結果分類 バルクターゲットファイルの簡単な使用 ✨ 特徴 ⚡ 高速マススキャン 🎯 CVE-2026-1405 チェッカー 🧵 マルチスレッド処理 🌐 自動ターゲット正規化 🔁...

CVE-2024-6624

CVE-2024-6624 JSON API User = 3.9.3 - 認証されていない権限昇格 説明 JSON API User WordPressプラグインは、バージョン3.9.3までの全バージョンにおいて権限昇格の脆弱性があります。これはカスタムユーザーメタフィールドの不適切な制御が原因です。これにより、認証されていない攻撃者がサイト上で管理者として登録することが可能になります。このプラグインを使用するには、JSON APIプラグインもインストールされている必要があります。 State: PUBLISHED Score: 9.8 CVSS:...

REST & JSON API Authentication for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2026-182

This module enables you to add an extra authentication layer to the API. The module does not sufficiently validate authentication requirements for all API requests, which can result in an access bypass vulnerability...

VulnCheck KEV: CVE-2026-54569

SENAITE.CORE is the core framework for the SENAITE laboratory information management system. From 2.0.0 to 2.6.0, the SENAITE.CORE JSON API permits unauthenticated remote code execution through a two-request chain involving missing authorization and unsafe evaluation. The state-changing routes in...

CVE-2026-61534 Yayson: Prototype pollution in the Store/LegacyStore deserialization

Yayson is a library for serializing and reading JSON API data in JavaScript. Prior to 4.3.0, Store and LegacyStore use attacker-controlled JSON:API type, id, and relationship names as keys in plain-object lookup tables in src/yayson/store.ts and src/yayson/legacy-store.ts. A document whose type i...

senaite.core Vulnerable to Eval Injection and Missing Authorization

SummaryAn unauthenticated remote code execution vulnerability in the SENAITE JSON API allows any network-reachable attacker to execute arbitrary Python on the Zope worker process via a two-request anonymous chain. The /@@API/update route is reachable to anonymous callers and runs eval on...

PYSEC-2026-3919 senaite.core Vulnerable to Eval Injection and Missing Authorization

Summary An unauthenticated remote code execution vulnerability in the SENAITE JSON API allows any network-reachable attacker to execute arbitrary Python on the Zope worker process via a two-request anonymous chain. The /@@API/update route is reachable to anonymous callers and runs eval on...

CVE-2026-75162

An information disclosure vulnerability in the opcua-configuration method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V60005 allows any remote authenticated user, including users with the low-privileged Standard role, to retrieve the configured OPC-UA authentication credentia...

EUVD-2026-71452

An information disclosure vulnerability in the opcua-configuration method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V60005 allows any remote authenticated user, including users with the low-privileged Standard role, to retrieve the configured OPC-UA authentication credentia...

CVE-2026-75162

An information disclosure vulnerability in the opcua-configuration method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V60005 allows any remote authenticated user, including users with the low-privileged Standard role, to retrieve the configured OPC-UA authentication credentia...