offensive-docker

Offensive Docker is an image with the more used tools to create an pentest environment easily and quickly. ➡️ Note: Check out the next repo to know how to launch offensive docker in a VPS in Google Cloud Platform or Digital Ocean free credit included. Offensive Docker VPS Table of Contents Links...

evilginx2

Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...

pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

overlord

Overlord – Red Teaming Automation Overlord provides a python-based console CLI which is used to build Red Teaming infrastructure in an automated way. The user has to provide inputs by using the tool’s modules e.g. C2, Email Server, HTTP web delivery server, Phishing server etc. and the full infra...

WordPress Ocean Extra <1.9.5 - Cross-Site Scripting

WordPress Ocean Extra plugin before 1.9.5 contains a cross-site scripting vulnerability. The plugin does not escape generated links which are then used when the OceanWP theme is active. id: CVE-2021-25104 info: name: WordPress Ocean Extra 1.9.5 - Cross-Site Scripting author: Akincibor severity:...

Ocean Extra <= 2.4.6 - Unauthenticated Shortcode Execution

The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.6. This is due to the software allowing users to supply arbitrary shortcodes in the contentrechdata parameter that is then executed. This makes it possible for...

EUVD-2025-28862

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's oceanwplibrary shortcode in all versions up to, and including, 2.4.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

ChaseHQ

Pulling apart Chase H.Q. for the ZX Spectrum Reverse engineering by David Thomas, 2023-2024 Project started: March 2023 This is an in-progress disassembly of the ZX Spectrum conversion of Chase H.Q. by Ocean Software. So far this only covers the 48K version and the first stage of the game. The 12...

CVE-2026-86803

The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.6.0 This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

CVE-2026-86803

The Ocean Extra plugin for WordPress is vulnerable to unauthenticated arbitrary shortcode execution in versions up to and including 2.6.0 . The flaw exists because the software allows the execution of an action that fails to properly validate a value before calling the do_shortcode function, spec...

EUVD-2026-101839

The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.6.0 This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

CVE-2026-86803 Ocean Extra <= 2.6.0 - Unauthenticated Arbitrary Shortcode Execution via 'oceanwp_library' Shortcode Template

The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.6.0 This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

WordPress Ocean Extra plugin <= 2.6.0 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by hashiramasenju333 in WordPress Plugin Ocean Extra versions = 2.6.0...

overlord

Overlord – Automatización de Red Teaming Overlord proporciona una CLI de consola basada en Python que se utiliza para construir infraestructura de Red Teaming de manera automatizada. El usuario debe proporcionar entradas utilizando los módulos de la herramienta por ejemplo, C2, Servidor de Correo...

WordPress Ocean Pro Demos plugin <= 1.5.4 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Alex Thomas, Wordfence Argus in WordPress Plugin Ocean Pro Demos versions = 1.5.4...

WordPress Ocean eComm Treasure Box plugin <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Alex Thomas, Wordfence Argus in WordPress Plugin Ocean eComm Treasure Box versions = 1.8.0...

CVE-2026-81929

The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.5.4, and 1.8.0, respectively, due to insufficient authorization, input sanitization, and output escaping in the...

CVE-2026-81929 Ocean Pro Demos <= 1.5.4 and Ocean eComm Treasure Box <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter

The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.5.4, and 1.8.0, respectively, due to insufficient authorization, input sanitization, and output escaping in the...

EUVD-2026-95509

The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.5.4, and 1.8.0, respectively, due to insufficient authorization, input sanitization, and output escaping in the...

CVE-2026-81929

The Ocean Pro Demos (versions up to and including 1.5.4 ) and Ocean eComm Treasure Box (versions up to and including 1.8.0 ) WordPress plugins are vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient authorization, input sanitization, and output escaping within the Pop...