Malware

Malware Коллекция вредоносных программ для macOS ⚠️ Эта страница содержит ссылки на живые вредоносные программы! Загружая вредоносное ПО с этого сайта, вы отказываетесь от всех прав на предъявление претензий о любом ущербе, возникшем в результате неосторожного обращения или самозаражения. 📡 Запуск...

restic

Введение restic — это программа для резервного копирования, которая является быстрой, эффективной и безопасной. Она поддерживает три основные операционные системы Linux, macOS, Windows и несколько менее распространённых FreeBSD, OpenBSD. Подробные инструкции по использованию и установке вы найдёт...

Evasive_Malware_Book_Samples

Примеры из книги «Evasive Malware» Образцы, упомянутые в моей книге «Evasive Malware: A Field Guide to Detecting, Analyzing, and Defeating Advanced Threats» https://nostarch.com/evasive-malware Юридический отказ от ответственности Этот репозиторий предоставляется исключительно в образовательных и...

WordPress Simple Job Board - Unauthorized Data Access

The Simple Job Board plugin for WordPress is vulnerable to unauthorized data access due to insufficient authorization checking in the fetchquickjob function in all versions up to and including 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be...

WordPress 3D FlipBook <= 1.16.17 - Information Disclosure

WordPress 3D FlipBook - PDF Flipbook Viewer, Flipbook Image Gallery plugin versions = 1.16.17 contain a missing authorization vulnerability in multiple AJAX endpoints. The fb3dsendpostsin, fb3dsendpostpages, fb3dsendpostsinpages, fb3dsendpostsinfirstpage, and fb3dsendpostfirstpage handlers are...

ZipExec

ZipExec ZipExec est un outil de preuve de concept POC permettant d'encapsuler des outils binaires dans un fichier zip protégé par mot de passe. Ce fichier zip est ensuite encodé en base64 en une chaîne qui est reconstruite sur le disque. Cette chaîne encodée est ensuite chargée dans un fichier...

wwwolf-php-webshell

wwwolf's PHP web shell Я часто сталкивался с проблемами при использовании других веб-шеллов: Они используют новые возможности синтаксиса PHP, несовместимые со старыми версиями PHP, работающими на некоторых целях. Они делают неверные предположения об удалённом URL, что нарушает внедрение PHP-кода...

CVE-2026-90952

The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthenticated users to read the content of published posts and pages that the site's access mode was configured to hide...

CVE-2026-90952

The WP Edit Password Protected WordPress plugin, versions 2.0.0 through 2.0.6 , contains a vulnerability where it fails to enforce site-wide access restrictions on the WordPress REST API . This flaw allows unauthenticated users to read the content of published posts and pages that were specifical...

CVE-2026-90952 WP Edit Password Protected 2.0.0 - 2.0.6 - Unauthenticated Site-Wide Access Mode Bypass via REST API

The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthenticated users to read the content of published posts and pages that the site's access mode was configured to hide...

EUVD-2026-91212

The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthenticated users to read the content of published posts and pages that the site's access mode was configured to hide...

WordPress WP Edit Password Protected plugin 2.0.0-2.0.6 - Unauthenticated Site-Wide Access Mode Bypass vulnerability

Unauthenticated Site-Wide Access Mode Bypass vulnerability discovered by Artus KG in WordPress Plugin Wp Edit Password Protected – Create Member/User Only Page & Design Password Protected Form versions 2.0.0-2.0.6...

PT-2026-104111

The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthenticated users to read the content of published posts and pages that the site's access mode was configured to hide...

CVE-2022-46484

CVE-2022-46484 Divulgation d'informations dans les enquêtes protégées par mot de passe dans Data Illusion Survey Software Solutions NGSurvey v2.4.28 et versions antérieures permet aux attaquants de voir le mot de passe pour accéder aux enquêtes et les soumettre arbitrairement...

CVE-2002-0347

CVE-2002-0347 Vulnérabilité de traversée de répertoire dans Cobalt RAQ 4 permettant à des attaquants distants de lire des fichiers protégés par mot de passe, et éventuellement des fichiers hors de la racine web, via un « .. » point point dans une requête HTTP. Publication Packetstorm à l'adresse...

CVE-2026-90985

The WPC Smart Compare for WooCommerce WordPress plugin before 6.6.1 does not apply WordPress's post-password protection when returning product content through its comparison handler, allowing unauthenticated users to read the description of password-protected products...

CVE-2026-90985 WPC Smart Compare for WooCommerce < 6.6.1 - Unauthenticated Password-Protected Product Description Disclosure via woosc_load

The WPC Smart Compare for WooCommerce WordPress plugin before 6.6.1 does not apply WordPress's post-password protection when returning product content through its comparison handler, allowing unauthenticated users to read the description of password-protected products...

CVE-2026-90985 WPC Smart Compare for WooCommerce < 6.6.1 - Unauthenticated Password-Protected Product Description Disclosure via woosc_load

The WPC Smart Compare for WooCommerce WordPress plugin before 6.6.1 does not apply WordPress's post-password protection when returning product content through its comparison handler, allowing unauthenticated users to read the description of password-protected products...

EUVD-2026-85055

The WPC Smart Compare for WooCommerce WordPress plugin before 6.6.1 does not apply WordPress's post-password protection when returning product content through its comparison handler, allowing unauthenticated users to read the description of password-protected products...

WordPress WPC Smart Compare for WooCommerce plugin < 6.6.1 - Unauthenticated Password-Protected Product Description Disclosure vulnerability

Unauthenticated Password-Protected Product Description Disclosure vulnerability discovered by Artus KG in WordPress Plugin WPC Smart Compare for WooCommerce versions 6.6.1...