security-skills

Навыки безопасности для Claude Code Плагин-маркетплейс навыков Claude Code, которые автоматизируют операции безопасности. Устанавливайте отдельные навыки для автоматизации конкретных платформ или комбинируйте несколько для сквозной интеграции в вашем стеке безопасности. Доступные навыки...

cve-lite-cli

대부분의 도구는 무엇이 잘못되었는지 알려줍니다. CVE Lite CLI는 무엇을 실행해야 하는지 알려줍니다...

community-scripts

커뮤니티 스크립트 커뮤니티, 즉 여러분이 제공한 ZAP 스크립트 모음입니다 : ZAP에서 이 저장소를 사용하는 가장 쉬운 방법은 ZAP 마켓플레이스에서 'Community Scripts' 애드온을 설치하는 것입니다. !CAUTION 모든 스크립트가 명백히 악의적인 행위를 하지 않는지 검토하지만, 여전히 직접 검토하고 주의해서 사용해야 합니다. 저장소에 기여하고 싶다면 저장소를 로컬 디렉터리에 클론한 다음 Options / Scripts 화면을 사용하여 ZAP에 추가할 수도 있습니다. 풀 리퀘스트를 통해 스크립트를 업로드해 주세...

skills

Маркетплейс навыков Trail of Bits Маркетплейс плагинов Claude Code от Trail of Bits, предоставляющий навыки для улучшения безопасности анализа, тестирования и процессов разработки с помощью ИИ. Codex может загрузить этот маркетплейс через свою совместимость с маркетплейсом Claude. Также см.:...

fastfuz-chrome-ext

FastFuzz Chrome Extension Fast fuzzing websites with chrome extension Screenshot Install Add Your Custom Files Open files.txt Paste your file or directory name in line by line Happy Hunting TODO Add response size foundings Add new specific file and directory names Add Extension to chrome extensio...

CVE-2026-81286

Unauthenticated SQL Injection in WCFM Marketplace = 3.8.1 versions...

CVE-2026-83562 WordPress WCFM Marketplace plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in WCFM Marketplace = 3.8.2 versions...

CVE-2026-83562

CVE-2026-83562 is a Contributor Cross Site Scripting (XSS) vulnerability in the WordPress plugin WCFM Marketplace (versions ≤ 3.8.2 ). Discovered by Ananda Dhakal via Patchstack, the flaw requires an authenticated contributor-level user and user interaction to exploit, but results in a changed sc...

EUVD-2026-69934

Contributor Cross Site Scripting XSS in WCFM Marketplace = 3.8.2 versions...

CVE-2026-81286 WordPress WCFM Marketplace plugin <= 3.8.1 - SQL Injection vulnerability

Unauthenticated SQL Injection in WCFM Marketplace = 3.8.1 versions...

CVE-2026-81286

CVE-2026-81286 is an unauthenticated SQL Injection in the WCFM Marketplace WordPress plugin, affecting versions 3.8.1 and earlier . The CNA (Patchstack) assigns a CVSS 3.1 score of 9.3 (CRITICAL) with a changed scope, indicating high confidentiality impact and low availability impact with no requ...

EUVD-2026-69923

Unauthenticated SQL Injection in WCFM Marketplace = 3.8.1 versions...

Liferay Portal - Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 GA through update 92 allows an remote non-authenticated...

WCFM WooCommerce Multivendor Marketplace < 3.4.12 - SQL Injection

The wcfmajaxcontroller AJAX action of the WCFM Marketplace WordPress plugin before 3.4.12, available to unauthenticated and authenticated user, does not properly sanitise multiple parameters before using them in SQL statements, leading to SQL injections. id: CVE-2021-24849 info: name: WCFM...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...

WordPress WC Vendors plugin < 2.7.2.1 - Vendor+ Cross-Vendor Order Shipment Status Change vulnerability

Vendor+ Cross-Vendor Order Shipment Status Change vulnerability discovered by Bhaveshkumar Parmar in WordPress Plugin WC Vendors Marketplace versions 2.7.2.1...

WordPress WC Vendors plugin < 2.7.2.1 - Vendor+ Cross-Vendor Product and Arbitrary Post Modification vulnerability

Vendor+ Cross-Vendor Product and Arbitrary Post Modification vulnerability discovered by Usama Arshad in WordPress Plugin WC Vendors Marketplace versions 2.7.2.1...

WordPress WC Vendors plugin < 2.7.2.1 - Order Shipment Status Change vulnerability

Order Shipment Status Change vulnerability discovered by Usama Arshad in WordPress Plugin WC Vendors Marketplace versions 2.7.2.1...

PT-2026-84684

Unauthenticated SQL Injection in WCFM Marketplace = 3.8.1 versions...

CVE-2024-58290-Xhibiter-SQLi

CVE-2024-58290-Xhibiter-SQLi Xhibiter NFT Marketplace 1.10.2 Collections Endpoint의 SQL 인젝션에 대한 개념 증명PoC. 발견자: Sohel Yousef. CVE-2024-58290: Xhibiter NFT Marketplace SQL 인젝션 익스플로잇 제목: Xhibiter NFT Marketplace 1.10.2 - SQL 인젝션 인증되지 않음 날짜: 2024-12-11 익스플로잇 작성자: Sohel Yousef 공급업체 홈페이지:...