WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCE

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4. id: CVE-2026-49777 info: name: WordPress Product Slider Pro f...

SEH utnserver Pro/ProMAX/INU-100 20.1.22 - Cross-Site Scripting

A vulnerability was found in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, affecting the device description parameter in the web interface. This flaw allows stored cross-site scripting XSS, enabling attackers to inject JavaScript code. The attack can be executed remote...

The Opal Estate Pro – Property Management <= 1.7.5 - Unauthenticated Privilege Escalation

The Opal Estate Pro plugin ≤ 1.7.5 is vulnerable to privilege escalation. Due to missing role restrictions in the onregisteruser function, users can register with any role. This allows unauthenticated attackers to create administrator accounts. id: CVE-2025-6934 info: name: The Opal Estate Pro –...

Dokan Pro <= 3.10.3 - SQL Injection

The Dokan Pro plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter in all versions up to, and including, 3.10.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. id: CVE-2024-3922 info: name: Dokan Pro...

WordPress Custom 404 Pro <= 3.11.1 - Reflected XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kunal Nagar Custom 404 Pro allows Reflected XSS.This issue affects Custom 404 Pro: from n/a through 3.11.1. id: CVE-2024-39646 info: name: WordPress Custom 404 Pro = 3.11.1 - Reflected XSS...

WooCommerce Designer Pro <= 1.9.28 - Arbitrary File Read

WooCommerce Designer Pro theme for WordPress = 1.9.28 contains an arbitrary file read vulnerability caused by improper input validation, letting unauthenticated attackers read arbitrary files including sensitive configuration files, exploit requires no authentication. id: CVE-2025-10897 info: nam...

WordPress BulletProof Security 5.1 Information Disclosure

The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly accessible /dbbackuplog.txt file which grants attackers the full path of the site, in addition to the path of database backup files. This affects versions up t...

Custom 404 Pro < 3.2.8 - Cross-Site Scripting

Custom 404 Pro before 3.2.9 is susceptible to cross-site scripting via the title parameter due to insufficient input sanitization and output escaping. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to...

Tyto Sahi pro 7.x/8.x - Local File Inclusion

Tyto Sahi Pro versions through 7.x.x and 8.0.0 are susceptible to a local file inclusion vulnerability in the web reports module which can allow an outside attacker to view contents of sensitive files. id: CVE-2018-20470 info: name: Tyto Sahi pro 7.x/8.x - Local File Inclusion author: daffainfo...

Ads Pro Plugin <= 4.88 - Unauthenticated SQL Injection

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via the 'aid' parameter in all versions up to, and including, 4.88 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

WordPress ShowBiz Pro <= 1.7.1 - Authenticated Arbitrary File Upload to RCE

The WordPress ShowBiz Pro plugin version = 1.7.1 allows arbitrary PHP file upload via the admin-ajax.php endpoint.This leads to unauthenticated remote code execution. id: CVE-2015-9499 info: name: WordPress ShowBiz Pro = 1.7.1 - Authenticated Arbitrary File Upload to RCE author:...

Everest Forms Pro <= 1.9.12 - Unauthenticated RCE via Calculation Formula Injection

The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12. This is due to the Calculation Addon's processfilter function concatenating user-submitted form field values into a PHP code string without proper...

WordPress Personal Dictionary <1.3.4 - Blind SQL Injection

WordPress Personal Dictionary plugin before 1.3.4 contains a blind SQL injection vulnerability. The plugin fails to properly sanitize user-supplied POST data before being interpolated in an SQL statement and executed. An attacker can possibly obtain sensitive information, modify data, and/or...

WordPress Ad Inserter <2.7.10 - Cross-Site Scripting

WordPress Ad Inserter plugin before 2.7.10 contains a cross-site scripting vulnerability. It does not sanitize and escape the htmlelementselection parameter before outputting it back in the page. id: CVE-2022-0288 info: name: WordPress Ad Inserter 2.7.10 - Cross-Site Scripting author: DhiyaneshDK...

spectrIDA-Reverse_Engineering_Stack

👻 spectrIDA 幽灵般穿梭于二进制文件之间。 一款本地化的、AI赋能的反逆向工程助手：并行的IDA Pro分析、AI函数命名、一款不再难用的终端、一个Neo4j知识图谱，记录它曾推断出的所有信息，以及一个MCP服务器，让Claude能够直接搜索并串联该图谱。 而现在——借助 phantomrt ——它不再只是阅读墙壁。它穿墙而过：模拟、挂钩并模糊测试它所命名的函数，并将 实际发生的情况 写回图谱。 spectrida analyze GameAssembly.dll --workers 16 （用户没有提供输入文本，无法进行翻译。） ◈ spectrIDA ▸...

CVE-2026-49777

CVE-2026-49777 CVE-2026-49777 - ShapedPlugin Product Slider Pro for WooCommerce 后门远程代码执行 RCE 深入技术分析：Product Slider Pro 后门漏洞 漏洞基础与成因 CWE-1284 该漏洞的技术起源被归类为 CWE-1284："对输入中指定数量验证不当"。这意味着软件接收用户输入，预期用户指定数量（例如大小、长度、数量），但未能正确验证该输入。攻击者可以利用此漏洞发送与正常预期不同的恶意输入，导致系统表现出意外行为。 . 受影响版本与补丁状态 受影响版本：3.5.3 之前的所有版本。...

CVE-2026-19660

CVE-2026-14378 — PoC de omisión de autenticación en DevKit Pro Escáner de prueba de concepto y asistente de explotación para CVE-2026-14378 : toma de control de sesión de administrador sin autenticación en el plugin de WordPress DevKit Pro dplugins mediante un flujo defectuoso de "revertir" el...

tenet

Tenet - 逆向工程师的追踪浏览器 概述 Tenet 是一款用于探索执行轨迹的 IDA Pro 插件。该插件的目标是提供更自然、更人性化的控制方式，以便在给定二进制文件中导航执行轨迹。这项工作的基础源于研究新的或创新方法来检查和提炼软件中复杂执行模式的愿望。 关于该项目的更多背景，请阅读其初始发布时的博客文章。 特别感谢 QIRA / geohot 等人带来的灵感。 发布版本 v0.2 -- 映像基址检测、单元格可视化、断点重构、错误修复。 v0.1 -- 初始版本 安装 Tenet 是一个跨平台（Windows、macOS、Linux）的 Python 3...

ParrotNG

ParrotNG ParrotNG 是一款能够识别易受 CVE-2011-2461 攻击的 Adobe Flex 应用程序 SWF 的工具。更多详情请参阅我们的 Troopers 2015 演讲 幻灯片。 从此处下载最新版本。 功能特点 使用 Java 编写，基于 swfdump 一个 JAR 包，两种形态：命令行工具和 Burp Pro 被动扫描器插件 检测使用易受攻击的 Flex SDK 版本编译的 SWF 文件，这些文件可能已通过 Adobe 的工具 修补，也可能未受影响 如何使用 - 命令行 1. 从发布页面下载最新版本的 ParrotNG 2. 只需使用以下命令： $ java...

CVE-2020-7931

CVE-2020-7931：Artifactory Pro 中的 SSTI 利用 CVE-2020-7931 在某种程度上是 Artifactory 中的一种故意错误配置漏洞，攻击者可以利用 FreeMarker 模板 发起服务器端模板注入。 该漏洞由 Atredis 的 Ryan Hanson 发现，并于 2019 年底针对所有受影响版本进行了修复。该漏洞仅适用于 Artifactory 的专业版，因为其他版本不具备模板功能。 本仓库包含一个脚本和一个模板。 Python 脚本是一个封装工具，用于自动化上传、部署和执行模板载荷。...