36829 matches found
CVE-2026-86813
The MetForm WordPress plugin before 4.1.9 does not properly neutralize newline characters in user-submitted values that are placed into notification email headers, allowing unauthenticated attackers to inject additional email headers, such as Bcc, into the emails the site sends when a submitted...
EUVD-2026-76041
The MetForm WordPress plugin before 4.1.9 does not properly neutralize newline characters in user-submitted values that are placed into notification email headers, allowing unauthenticated attackers to inject additional email headers, such as Bcc, into the emails the site sends when a submitted...
EUVD-2026-76038
The Payment Gateway PayPay for WooCommerce WordPress plugin from 0.5 to 0.9.3 does not verify the authenticity of the payment notifications it receives before acting on them, allowing unauthenticated attackers who know the store's merchant identifier to mark arbitrary orders as paid, or to cancel...
ROOT-OS-ALPINE-320-CVE-2026-8932 CVE-2026-8932 in curl - Patched by Root
Root has patched CVE-2026-8932 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...
SureForms <= 1.13.1 - Sensitive Information Exposure
SureForms WordPress plugin = 1.13.1 contains a sensitive information exposure caused by setting 'authcallback' to 'returntrue' in 'srfmemailnotification' post meta registration, letting unauthenticated attackers access sensitive email notification data, exploit requires no authentication. id:...
vajra
An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra...
salt-scanner
salt-scanner A linux vulnerability scanner based on Vulners Audit API and Salt Open, with Slack notifications and JIRA integration. Features Slack notification and report upload JIRA integration OpsGenie integration Requirements Salt Open 2016.11.x salt-master, salt-minionΒΉ Python 2.7 salt you ma...
Oblivion
Oblivion is a tool focused in real time monitoring of new data leaks, notifying if the credentials of the user has been leak out. It's possible too verify if any credential of user has been leak out before. The Oblivion have two modes: Oblivion Client: graphical mode. Oblivion Server: mode with A...
ransomwatch
RansomWatch RansomWatch is a ransomware leak site monitoring tool. It will scrape all of the entries on various ransomware leak sites, store the data in a SQLite database, and send notifications via Slack or Discord when a new victim shows up, or when a victim is removed. Note: RansomWatch isn't...
SubMon
SubMon Some say bug bounty isn't just about finding bugs, but being the "first" to find them. I'm building this tool to notify hunters when new subdomains appear. Features You can add your favorite target: name + domain. Then you can either click scan or schedule a scan. When the scan finishes, y...
toastfix-demo
ToastFix Demo This project demonstrates how convincing Windows toast notifications can be abused in social engineering attacks, specifically using ClickFix-style lures. A live demo is available here more realistic attack: π https://h4lpy.github.io/ A detailed breakdown of the technique can be fou...
cve-search
cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...
CVE-2020-13457
CVE-2020-13457 CVE-2020-13457 Timeline ================ 2020-05-04: Discovered 2020-05-11: Retest issues on researcher's ecosystem 2020-05-20: PoC exploit on windows 2012 x64 tested 2020-05-25: Vendor notification 2020-05-27: PoC exploit on windows 10 x64 tested 2020-06-01: Awaiting vendor...
WordPress BuddyPress plugin <= 14.3.3 - Insecure Direct Object Reference to Notifications Deletion vulnerability
Insecure Direct Object Reference to Notifications Deletion vulnerability discovered by Brian Mungai in WordPress Plugin BuddyPress versions = 14.3.3...
openredirect
Badges License MIT Installation...
DllNotificationInjection
DllNotificationInjection Main Contributors Description DllNotificationInection is a POC of a new βthreadlessβ process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes. An accompanying blog post with more details is available here:...
CVE-2023-34840
CVE-2023-34840 Vulnerability Explanation All versions in angular-ui-notification are vulnerable to XSS due to the library not sanitizing the input provided by the user. In order to safely use this library, sanitizing / encoding the parameters passed to this library is highly recommended, such as...
ServiceCheater
ServiceCheater Poc of CVE-2020-0113 & CVE-2020-0108 Analysis of Android Foreground Service Privilege Escalation Vulnerability Vulnerability Background In the AOSP August 2020 patch, a vulnerability in the framework layer AMS was disclosed, numbered CVE-2020-0108, rated high, and another numbered...
cloud-audit
Project Introduction cloud-audit Cloud Security Audit Assistant is a tool for detecting the exploitation of leaked AK/SK from public cloud vendors. It periodically calls cloud platform APIs to audit logs and identifies suspected intrusions based on abnormal behavior, black features, and baselines...