CVE-2026-15748

CVE-2026-15748 — Forminator Forms Unauthenticated Arbitrary File Upload → RCE CVSS 9.8 Critical · Affected: Forminator = 1.56.1 · Patched: 1.56.2 Researcher: daroo Wordfence Bug Bounty, $2,048 · 600k active installs Writeup:...

CVE-2021-43798

CVE-2021-43798: Grafana Arbitrary File Read Vulnerability Added nuclei template for full-version detection on Windows+Linux List of 52 plugins: live icon loki text logs news stat mssql mixed mysql tempo graph gauge table debug zipkin jaeger geomap canvas grafana welcome xychart heatmap postgres...

CVE-2023-32315

CVE-2023-32315 Openfire Console Authentication Bypass Vulnerability with RCE plugin Setup git clone https://github.com/miko550/CVE-2023-32315.git cd CVE-2023-32315 pip3 install -r requirements.txt Usage python3 CVE-2023-32315.py -t http://127.0.0.1:9090 python3 CVE-2023-32315.py -l lists.txt Step...

CVE-2026-PoCs

💀 Exploit-Index: The Ultimate CVE Proof of Concept PoC & Exploit Database 150,000+ Verified Exploits & PoCs for Cybersecurity Research All In One Place Explore the Interactive Portal • View the JSON Index • Browse CVEs 📖 Abo...

xpfarm

XPFarm An open-source AI-augmented offensive security platform that wraps well-known security tools behind a unified web UI — with distributed scanning, AI-generated reports, a smart scan planner, an interactive attack graph, and a community Plugin SDK. Also check out ObsidianBox Modern on Google...

nox-framework

███╗ ██╗ ██████╗ ██╗ ██╗ ████╗ ██║██╔═══██╗╚██╗██╔╝ ██╔██╗ ██║██║ ██║ ╚███╔╝ ██║╚██╗██║██║ ██║ ██╔██╗ ██║ ╚████║╚██████╔╝██╔╝ ██╗ ╚═╝ ╚═══╝ ╚═════╝ ╚═╝ ╚═╝ Cyber Threat Intelligence Framework OSINT framework for red teaming, digital forensics, and corporate exposure analysis. Introduction NOX is ...

CVE-2023-6421

CVE-2023-6421 Download Manager 3.2.83 - Unauthenticated Protected File Download Password Leak Description The plugin does not protect file download's passwords, leaking it upon receiving an invalid one POC python3 CVE-2023-6421.py https://kubernetes.docker.internal No link generated for ID 1. No...

CVE-2023-4281

CVE ID: CVE-2023-4281 Vulnerability Type: IP Address Spoofing Description: The Activity Log plugin retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic. Steps to reproduce: Run the...

CVE-2026-18366

CVE-2026-18366 — Events Manager 7.4.1: Unauthenticated Privilege Escalation to Administrator | ---|--- Product| Events Manager WordPress plugin Affected versions| 7.1.0 – 7.4.0.x Fixed version| 7.4.1 Weakness| CWE-269: Improper Privilege Management Severity| CVSS 3.1: 9.8 Critical —...

Zphisher-GUI-Back_office

Mi website: https://microjoan.com My YouTube Channel: https://www.youtube.com/c/MicroJoan DISCLAIMER This toolkit contains materials that can be potentially damaging or dangerous for social media. Refer to the laws in your province/country before accessing, using,or in any other way utilizing thi...

CVE-2025-47577

CVE-2025-47577 - WordPress TI WooCommerce Wishlist for uploaded image path 💾 Saves valid uploaded image URLs to result.txt 💾 Saves valid wishlist URLs to resultwishlist.txt 🧠 Researcher Credit: Patchstack Database 🚀 Usage 1. Prepare your list.txt file with a list of target domains one per line,...

CVE-2024-48914

This post is a research article published by EQSTLab. Thanks toRajesh Sharma, who discovered this vulnerability. CVE-2024-48914 ★ CVE-2024-48914 Arbitrary File Read and DoS PoC ★ Description CVE-2024-48914 : vendure-ecommerce Arbitrary file read and DoS Vulnerability description: Vendure is an...

CVE-2024-10673

🔥 Overview This script exploits CVE-2024-10673 , a critical vulnerability found in the Top Store WordPress Theme = 1.5.4. The flaw allows authenticated users with subscriber-level access or higher to install and activate arbitrary plugins via unprotected AJAX requests. ⚠️ Severity & Impact...

CVE-2024-4295-Poc

CVE-2024-4295-Poc CVE-2024-4295 Email Subscribers by Icegram Express editsubscriberstatus \email-subscribers\lite\includes\db\class-es-db-lists-contacts.php:616 EmailSubscribersPublic-esemailsubscribeinit \email-subscribers\lite\public\class-email-subscribers-public.php:178 WPHook-applyfilters...

WordPress-NotificationX-CVE-2024-1698

Set-up docker-compose up --build Clean up docker-compose down Testing Measure-Command curl.exe http://localhost/wp-json/notificationx/v1/analytics -Method Post -Body 'nxid=1337&type=clicks=IFASCIISUBSTRINGselect userpass from wpusers where id=1,1,1=36,SLEEP10,null-- -'...

CVE-2023-32590

CVE-2023-32590 Subscribe to Category = 2.7.4 - Unauthenticated SQL Injection Description The Subscribe to Category plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 2.7.4 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2023-47840

CVE-2023-47840 Qode Essential Addons = 1.5.2 - Missing Authorization to Authenticated Subscriber+ Arbitrary Plugin Installation/Activation Description: The Qode Essential Addons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the...

WordPress-KeepInMind-CVE-2026-9271-Exploit

KIM-Guardian Pro CVE-2026-9271 — WordPress KeepInMind Stored XSS Assessment Authorized security assessment tool for CVE-2026-9271 Author: Sudeepa Wanigarathna · Tool: KIM-Guardian Pro v1.0 Main script: CVE-2026-9271.py !IMPORTANT Authorized use only. This tool is for security research, education,...

skills

Trail of Bits Skills Marketplace Trail of Bits skills and plugins for AI-assisted security analysis, testing, and development. Install this marketplace in Claude Code or Codex, or import it into your ChatGPT workspace marketplace. Also see: claude-code-config · codex-config · skills-curated ·...

rizin-notebook

Rizin Notebook A notebook for binary analysis with rizin. Keep notes, commands, and scripts organized per binary. Requires rizin 0.7.0 or later. What it does Each notebook page is tied to one binary. It stores the binary itself, its SHA-256 hash, and a list of cells : command cells - a rizin...