PPLorer

PPLorer PPLorer is an IDA plugin that resolves PPL calls to the actual underlying PPL function. Installation 1. install ida-netnode somewhere IDA can import it 2. clone the repository and symlink /.idapro/plugins/pplorer.py to pplorer.py in the cloned repo Usage Preliminary Analysis 1. open an ID...

securenvoy-cve-2024-37393

securenvoy-cve-2024-37393 RESPONSIBLE DISCLOSURE Vulnerability check script for CVE-2024-37393 SecurEnvoy MFA 9.4.513. Proof of concept code for checking LDAP injection. Fix Vulnerability fixed in SecurEnvoy MFA = 9.4.514. Links https://www.optistream.io/blogs/tech/securenvoy-cve-2024-37393 Autho...

CVE-2016-10924

CVE-2016-10924 CVE-2016-10924 - Directory traversal vulnerability in WordPress ebook-download plugin1.2. PoC + PID Bruteforce in Python. Usage git clone https://github.com/rvizx/CVE-2016-10924 cd CVE-2016-10924 python pidbrute.py...

log4j2burpscanner

log4j2burpscanner CVE-2021-44228, log4j2 Burp plugin Java version. DNSlog uses non-dnslog.cn domain names. Effect demonstration: Target range the range is relatively slow, but internet assets are fine. The reason might be that the range handles other request headers poorly, or the headers are too...

CVE-2024-1512

CVE-2024-1512 Proof of Concept Vulnerability Overview CVE-2024-1512 exposes a critical vulnerability in the MasterStudy LMS WordPress Plugin, specifically within the implementation of the /lms/stm-lms/order/items REST route. The issue arises from the plugin's failure to properly escape the 'user'...

CVE-2026-8181-PoC

🚨 CVE-2026-8181 | Burst Statistics Authentication Bypass -brightgreen.svg?style=for-the-badge !CAUTION CRITICAL ALERT: This vulnerability allows an unauthenticated remote attacker to bypass authentication and gain full Administrator privileges on the target WordPress site by simply injecting a...

CVE-2025-5701

CVE-2025-5701 - Unauthenticated Privilege Escalation Exploit Severity: CRITICAL CVSS 9.8 Plugin Affected: HyperComments for WordPress Versions Affected: ≤ 1.2.2 📌 Vulnerability Summary The HyperComments plugin for WordPress is vulnerable to unauthorized modification of WordPress options due to a...

binja_dynamics

Binary Ninja Dynamic Analysis Tools This project adds a PyQt5 frontend to the binjatron plugin for Binary Ninja, that includes highlighting features aimed at making it easier for beginners to learn about reverse engineering. Motivation The ability to reverse engineer x86 binaries is an important...

CVE-2025-2539

CVE-2025-2539 PoC Unauthenticated Arbitrary File Read exploit for WordPress File Away Plugin ≤ 3.9.9.0.1 📖 Description This Python script is a proof-of-concept PoC exploit for CVE-2025-2539 , targeting a vulnerability in the WordPress File Away Plugin ≤ 3.9.9.0.1. The vulnerability allows...

CVE-2024-51793

🛡️ WordPress RepairBuddy Plugin Exploit 📜 CVE Information CVE-ID: CVE-2024-51793 Published: 2024-11-11 Updated: 2024-11-11 Title: WordPress RepairBuddy plugin = 3.8115 - Arbitrary File Upload vulnerability Description: Unrestricted Upload of File with Dangerous Type vulnerability in Webful...

CVE-2022-1598

CVE-2022-1598 WPQA where ID is numeric and can be bruteforced! Nuclei Template: CVE-2022-1598.yaml VIDEO POC: https://www.youtube.com/watch?v=MbhiQKWvivQ References: https://wpscan.com/vulnerability/0416ae2f-5670-4080-a88d-3484bb19d8c8 https://vulners.com/cve/CVE-2022-1598...

CVE-2025-12139-WordPress-Integrate-Google-Drive-Exploit

CVE-2025-12139: Integrate Google Drive WordPress Plugin - Information Disclosure Exploit Description This is a Golang Proof of Concept PoC exploit for CVE-2025-12139. The vulnerability exists in the Integrate Google Drive plugin versions = 1.5.3 for WordPress. It allows unauthenticated attackers ...

cve-2024-41110-checker

CVE-2024-41110 Docker Security Checker This tool is designed to check multiple hosts for vulnerabilities related to CVE-2024-41110 in Docker installations. It specifically looks for vulnerable Docker versions and the use of AuthZ plugins, which can potentially lead to security issues. Features...

Trinity-Audio-CVE-Report2

Trinity-Audio-CVE-Report 2 Disclosure for CVE-2025-9886 and CVE-2025-9952. CVE-2025-9886 and CVE-2025-9952 - Vulnerability in Trinity Audio This repository discloses a vulnerability discovered in Trinity Audio = 5.20.1,WordPress plugin developed by sergiotrinity. 🛠 Affected Version Product :...

CVE-2026-56011-Lab

CVE-2026-56011 - MapPress Maps for WordPress Unauthenticated XSS in iframe map rendering Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-56011, an unauthenticated Cross-Site Scripting vulnerability affecting MapPress Maps for WordPress. MapPre...

simple-file-list-rce

simple-file-list-rce Simple File List 4.2.3 - Unauthenticated Arbitrary File Upload RCE usage: simple.py -h -u URL -f1 FILE1 -f2 FILE2 -p PATH optional arguments: -h, --help show this help message and exit -u URL, --url URL Wordpress Url i.e https://wordpress.lan -f1 FILE1, --file1 FILE1 Harmless...

CVE-2021-43798

usage: grafana-exploit.py -h -H/--host HOST grafana-exploit.py: error: the following arguments are required: -H/--host example: python3 grafana-exploit.py --host if successfuly read arbitary-file situation show the request URL and curl command +RequestURL...

CVE-2019-9978

CVE-2019-9978 CVE-2019-9978 - PoC RCE in Social WarFare Plugin system'cat /etc/passwd' Save it with filename: payload.txt and upload it on a server. The URI should look like: https://yoursite.com/payload.txt. Finally, supply your --target and --payload-uri options: $ python cve-2019-9978.py...

CVE-2025-2011

CVE-2025-2011 - Depicter Plugin SQL Injection Vulnerability CVE Reference: CVE-2025-2011 This repository contains a proof-of-concept environment for testing the SQL injection vulnerability in Depicter Slider & Popup Builder plugin versions 3.6.2. Prerequisites Docker Docker Compose Python 3.x...

CVE-2025-39538

🛡️ CVE-2025-39538 - WordPress WP-Advanced-Search = 3.3.9.3 Arbitrary File Upload CVE-2025-39538 Published: 2025-04-16 Vulnerability Type: Arbitrary File Upload Unrestricted Upload of File with Dangerous Type Affected Plugin: WP-Advanced-Search by Mathieu Chartier Affected Versions: All versions up...