58408 matches found
CVE-2026-111106 Mail Mint <= 1.31.4 - Authenticated (Custom+) SQL Injection via 'filters' Parameter
The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL que...
novahot
novahot novahot is a webshell framework for penetration testers. It implements a JSON-based API that can communicate with trojans written in any language. By default, it ships with trojans written in PHP, ruby, and python. Beyond executing system commands, novahot is able to emulate interactive...
melting-cobalt
melting-cobalt 👀 A tool to hunt/mine for Cobalt Strike beacons and "reduce" their beacon configuration for later indexing. Hunts can either be expansive and internet wide using services like SecurityTrails, Shodan, or ZoomEye or a list of IP's. Getting started 1. Install melting-cobalt 2. Configu...
instaloctrack
instaloctrack TL;DR : ascineema, video of the project A tool to scrape geotagged locations on Instagram profiles. Output in JSON & interactive map. requirements sudo apt install chromium-chromedriver && chmod a+x /usr/bin/chromedriver 🛠️ installation git clone...
SilkETW
SilkETW & SilkService SilkETW & SilkService are flexible C wrappers for ETW, they are meant to abstract away the complexities of ETW and give people a simple interface to perform research and introspection. While both projects have obvious defensive and offensive applications they should primaril...
PT-2026-115910
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql json plugin assumed that imported MySQL tables contained valid MySQL binary JSON data. A specially prepared MySQL table containing invalid JSON data...
PT-2026-115922
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql json plugin assumed that imported MySQL tables contained valid MySQL binary JSON data. A specially prepared MySQL table containing invalid JSON data...
PT-2026-115898
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql json plugin assumed that imported MySQL tables contained valid MySQL binary JSON data. A specially prepared MySQL table containing invalid JSON data...
rabl-old
RABL RABL Ruby API Builder Language is a Rails and Padrino ruby templating system for generating JSON, XML, MessagePack, PList and BSON. When using the ActiveRecord 'tojson' method, I find myself wanting a more expressive and powerful solution for generating APIs. This is especially true when the...
CVE-2026-111349
Craftplan versions through 0.7.5 are vulnerable to a missing authorization flaw within the CRM Customer resource. This vulnerability allows unauthenticated attackers to perform unauthorized actions by sending anonymous requests to the POST /api/json/customers endpoint or utilizing the create_cust...
kev-data
Welcome to kev-data This repository is home to the data files that make up the Known Exploited Vulnerabilities KEV catalog. The data is originally sourced from https://www.cisa.gov/known-exploited-vulnerabilities-catalog, which is short linked at https://cisa.gov/kev. Interactive dashboard to...
readable-thrift
Readable Thrift Readable Thrift makes binary Thrift protocol messages easy to work with by converting them to and from a human-friendly format. This makes manual analysis of and tampering with binary format Thrift messages just as easy as working with plaintext protocols like HTTP. The library is...
idalib-cli
️ idalib-cli Agent-native CLI for the IDA Pro IDALib — every command takes one -d/--db flag, every answer is JSON. English · 中文 ✨ Features 🗄️ Stateless — pass -d/--db a binary or an .i64; no daemon, no session bookkeeping. 💾 Persistent IDB state — the IDB file is the state: comments, bookmarks,...
CVE-2026-0915-json-Patch.-V2.0
CVE-2026-0915-json-Patch.-V2.0 Patch the Bug - glibc 🔒 JSON Validator Security Patch Enterprise-grade solution for CVE-2026-0915 - Protects against insecure JSON parsing through strict schema validation. 🚨 Security Notice This patch fixes CVE-2026-0915 - a critical vulnerability in JSON parsing...
burp-jq
Burp JQ This is a Burp Extension to apply jq queries to JSON content from the HTTP message viewer. Build $ gradle fatJar Credits Burp JQ relies on jackson-jq, a Java implementation of jq. jq jackson jackson-jq...
json-interop-vuln-labs
JSON Interoperability Vulnerability Labs Description These are the companion labs to my research article "An Exploration of JSON Interoperability Vulnerabilities". Lab 1: Free purchases in an E-commerce Application Key Collision Attacks: Inconsistent Duplicate Key Precedence Inconsistent Large...
GHSA-X586-XVC8-G7Q6 Qwik: Crashing any Qwik Server via Resource thenable
Summary A Qwik server in the default configuration can be crashed with one unauthenticated HTTP request. During qwik-json body parsing, ResourceSerializer.$fill$ does Promise.resolveresource.resolved. If resolved is a plain object whose .then is a QRL for an unregistered symbol, the async QRL...
EUVD-2026-99978
Qwik: Crashing any Qwik Server via Resource thenable...
Qwik: Crashing any Qwik Server via Resource thenable
Summary A Qwik server in the default configuration can be crashed with one unauthenticated HTTP request. During qwik-json body parsing, ResourceSerializer.$fill$ does Promise.resolveresource.resolved. If resolved is a plain object whose .then is a QRL for an unregistered symbol, the async QRL...