VulFi

VulFi v3.0 Introduzione Lo strumento VulFi Vulnerability Finder è un plugin per IDA Pro che può essere utilizzato per assistere durante la caccia ai bug nei binari. Il suo obiettivo principale è fornire una singola vista con tutti i cross-reference alle funzioni più interessanti come strcpy,...

CVE-2025-4380

CVE-2025-4380 - Plugin Ads Pro = 4.89 - Exploit di Local File Inclusion LFI Descrizione Questo exploit in Python prende di mira il plugin Ads Pro ≤ 4.89 per WordPress, vulnerabile a Local File Inclusion LFI tramite l'azione AJAX bsapreviewcallback. Un attaccante non autenticato può sfruttare ques...

ida_ifl

IFL - Elenco interattivo delle funzioni Licenza: CC-BY https://creativecommons.org/licenses/by/3.0/ Un piccolo plugin con l'obiettivo di fornire un modo intuitivo per navigare tra le funzioni e i loro riferimenti. Inoltre, consente di importare report generati ad esempio da PE-sieve in IDA...

Ads Pro Plugin <= 4.89 - Local File Inclusion

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsatemplate' parameter of the bsapreviewcallback function. This makes it possible for unauthenticated attackers to includ...

Ads Pro Plugin <= 4.88 - Unauthenticated SQL Injection

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the 'aid' parameter in all versions up to, and including, 4.88 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

ParrotNG

ParrotNG ParrotNG è uno strumento in grado di identificare applicazioni Adobe Flex SWF vulnerabili a CVE-2011-2461. Per maggiori dettagli, consulta le slide del nostro talk al Troopers 2015. Scarica l'ultima release da QUI. Funzionalità Scritto in Java, basato su swfdump Un unico JAR, due version...

yarasafe

YARASAFE - Automatic Binary Function Similarity Checks with Yara SAFE is a tool developed to create Binary Functions Embedding developed by Massarelli L., Di Luna G.A., Petroni F., Querzoni L. and Baldoni R. You can use SAFE to create your function embedding to use inside yara rules. If you are...

yarasafe

YARASAFE - Controlli Automatici di Similarità tra Funzioni Binari con Yara SAFE è uno strumento sviluppato per creare embedding di funzioni binarie da Massarelli L., Di Luna G.A., Petroni F., Querzoni L. e Baldoni R. Puoi usare SAFE per creare i tuoi embedding di funzioni da utilizzare all'intern...

IDAssistMCP

IDAssistMCP Eigenständiges MCP Model Context Protocol Server-Plugin für IDA Pro 9.x , das IDAs Analysefähigkeiten für LLM-Clients wie Claude Desktop bereitstellt. Funktionen 41 MCP-Werkzeuge für Binäranalyse, Dekompilierung, Querverweise, Symbolverwaltung, Typsystem, Navigation, Patchen, Export u...

deREferencing

deREferencing deREferencing एक IDA Pro प्लगइन है जो नए रजिस्टर और स्टैक व्यू को लागू करता है। यह डीरेफ़रेंस किए गए पॉइंटर्स, रंग और अन्य उपयोगी जानकारी जोड़ता है, जो कुछ GDB प्लगइन्स जैसे: PEDA, GEF, pwndbg, आदि के समान है। निम्नलिखित आर्किटेक्चर समर्थित हैं: x86, x86-64, ARM, ARM64, MIPS32 और...

WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerability

WordPress ACPT Pro - Custom Post Types Plugin for WordPress plugin = 2.0.63 - SQL Injection vulnerability discovered by VDsec in WordPress Plugin ACPT Pro - Custom Post Types Plugin for WordPress versions = 2.0.63...

CVE-2026-32563 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32563 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32476

Unauthenticated Cross Site Scripting XSS in Brave Conversion Engine PRO = 0.8.6 versions...

BinAIVulHunter

BinAIVulHunter बाइनरी में भेद्यताएँ खोजने में मदद करने के लिए एक IDA PRO प्लगइन। बाइनरी में संभावित भेद्यताएँ खोजने के लिए OpenAIChatGPT के साथ IDA PRO HexRays डीकंपाइलर का उपयोग करें। अस्वीकरण: AI का उपयोग करके बाइनरी भेद्यताएँ खोजने का प्रयास करते समय प्राप्त उत्तर गलत-सकारात्मक false positive ...

CVE-2026-18464

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts...

EUVD-2026-54879

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include...

CVE-2026-18464

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts...

EUVD-2026-54878

The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts...

WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.10 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Visitor Traffic Real Time Statistics Pro versions = 11.10...