Name-That-Hash

➡️ Discord | Website ⬅️ The Modern Hash Identification System pip3 install name-that-hash && nth Web App with no install needed 🤔 What is this? Have you ever come across a hash such as 5f4dcc3b5aa765d61d8327deb882cf99 and wondered what type of hash that is? 🤔 Name-that-hash will name that hash...

Ch4120N-CVE-Pulse

⚡ Ch4120N CVE Pulse 스마트 검색 및 위협 인텔리전스를 갖춘 실시간 CVE PoC 수집기 CVE Pulse 는 GitHub에서 CVE 개념 증명Proof‑of‑Concept을 자동으로 발견, 점수화, 색인합니다. EPSS 점수 와 CISA KEV 데이터로 강화하고, 일일 스냅샷 및 차이점 을 생성하며, 빠르고 검색 가능한 정적 웹사이트 를 제공합니다 📋 목차 👨‍💻 프로젝트 제작자 🎯 주요 기능 ✨ 핵심 특징 🧱 아키텍처 ⚙️ 작동 방식 🚀 빠른 시작 📦 설치 💻 사용법 하위 명령어 전체 파이프라인 📊 출력 및...

CVE-2026-97637

The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability exists because the required PI-Media/json-api parent plugin caches controller dispatch results in transients keyed sole...

CVE-2026-97637

The JSON API Auth plugin for WordPress (versions up to and including 3.1.2 ) is vulnerable to an Authentication Bypass via cached session cookie disclosure. The root cause is that the required PI-Media/json-api parent plugin caches controller dispatch results using only the URI and query string, ...

CVE-2026-97637 JSON API Auth <= 3.1.2 - Unauthenticated Authentication Bypass via Cached 'generate_auth_cookie' Response

The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability exists because the required PI-Media/json-api parent plugin caches controller dispatch results in transients keyed sole...

EUVD-2026-91259

The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability exists because the required PI-Media/json-api parent plugin caches controller dispatch results in transients keyed sole...

WordPress JSON API Auth plugin <= 3.1.2 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by Chi Trung Huynh in WordPress Plugin JSON API Auth versions = 3.1.2...

novahot

novahot novahot는 침투 테스터를 위한 웹쉘 프레임워크입니다. JSON 기반 API를 구현하여 모든 언어로 작성된 트로이 목마와 통신할 수 있습니다. 기본적으로 PHP, ruby, python으로 작성된 트로이 목마가 포함되어 있습니다. 시스템 명령어 실행 외에도 novahot는 mysql, sqlite3, psql을 포함한 대화형 터미널을 에뮬레이션할 수 있습니다. 또한 선호하는 애플리케이션을 사용하여 원격 파일을 로컬에서 업로드, 다운로드, 편집, 보기 위한 "가상 명령어"를 구현합니다. 설치 npm에서 직접 실...

PT-2026-104152

Name of the Vulnerable Software and Affected Versions JSON API Auth plugin for WordPress versions prior to 3.1.3 Description An authentication bypass exists due to cached session cookie disclosure. The PI-Media/json-api parent plugin caches controller dispatch results in transients based only on...

CVE-2024-6624

CVE-2024-6624 | JSON API User = 3.9.3 - 인증되지 않은 권한 상승 이것은 WordPress용 JSON API User = 3.9.3 플러그인의 CVE-2024-6624 취약점을 악용하는 Python 스크립트입니다. 이 도구는 인증되지 않은 공격자가 승인 없이 새 사용자를 등록하고 권한을 관리자로 상승시킬 수 있게 합니다. 사용 방법 준비 사항 1. 시스템에 Python 2.7이 설치되어 있는지 확인하십시오. 2. requests 종속성을 설치하십시오: pip install requests 3. 대...

Mass-Scanner-CVE-2026-1405

⚡ Mass-Scanner-CVE-2026-1405 クリーンなWordPressマススキャナー CVE-2026-1405 対応 🧠 概要 複数のWordPressターゲットにおける CVE-2026-1405 の露出をチェックするために構築された、クリーンで軽量なスキャナーです。 以下の点に重点を置いています: 高速なマルチターゲットスキャン クリーンなターミナル出力 シンプルな結果分類 バルクターゲットファイルの簡単な使用 ✨ 特徴 ⚡ 高速マススキャン 🎯 CVE-2026-1405 チェッカー 🧵 マルチスレッド処理 🌐 自動ターゲット正規化 🔁...

CVE-2024-6624

CVE-2024-6624 JSON API User = 3.9.3 - 認証されていない権限昇格 説明 JSON API User WordPressプラグインは、バージョン3.9.3までの全バージョンにおいて権限昇格の脆弱性があります。これはカスタムユーザーメタフィールドの不適切な制御が原因です。これにより、認証されていない攻撃者がサイト上で管理者として登録することが可能になります。このプラグインを使用するには、JSON APIプラグインもインストールされている必要があります。 State: PUBLISHED Score: 9.8 CVSS:...

REST & JSON API Authentication for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2026-182

This module enables you to add an extra authentication layer to the API. The module does not sufficiently validate authentication requirements for all API requests, which can result in an access bypass vulnerability...

VulnCheck KEV: CVE-2026-54569

SENAITE.CORE is the core framework for the SENAITE laboratory information management system. From 2.0.0 to 2.6.0, the SENAITE.CORE JSON API permits unauthenticated remote code execution through a two-request chain involving missing authorization and unsafe evaluation. The state-changing routes in...

CVE-2026-61534 Yayson: Prototype pollution in the Store/LegacyStore deserialization

Yayson is a library for serializing and reading JSON API data in JavaScript. Prior to 4.3.0, Store and LegacyStore use attacker-controlled JSON:API type, id, and relationship names as keys in plain-object lookup tables in src/yayson/store.ts and src/yayson/legacy-store.ts. A document whose type i...

senaite.core Vulnerable to Eval Injection and Missing Authorization

SummaryAn unauthenticated remote code execution vulnerability in the SENAITE JSON API allows any network-reachable attacker to execute arbitrary Python on the Zope worker process via a two-request anonymous chain. The /@@API/update route is reachable to anonymous callers and runs eval on...

PYSEC-2026-3919 senaite.core Vulnerable to Eval Injection and Missing Authorization

Summary An unauthenticated remote code execution vulnerability in the SENAITE JSON API allows any network-reachable attacker to execute arbitrary Python on the Zope worker process via a two-request anonymous chain. The /@@API/update route is reachable to anonymous callers and runs eval on...

CVE-2026-75162

An information disclosure vulnerability in the opcua-configuration method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V60005 allows any remote authenticated user, including users with the low-privileged Standard role, to retrieve the configured OPC-UA authentication credentia...

EUVD-2026-71452

An information disclosure vulnerability in the opcua-configuration method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V60005 allows any remote authenticated user, including users with the low-privileged Standard role, to retrieve the configured OPC-UA authentication credentia...

CVE-2026-75162

An information disclosure vulnerability in the opcua-configuration method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V60005 allows any remote authenticated user, including users with the low-privileged Standard role, to retrieve the configured OPC-UA authentication credentia...