CVE-2026-86552

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime. With the acquired SmartLife application authentication credentials, an attacker can directly complete registration using any arbitrary email address via the backend interface...

no-gdid

no-gdid Read, understand, and silence the Windows Global Device Identifier GDID — the hidden per-account device ID that helped the FBI locate a suspect who was using a VPN. ⚠️ Honest disclaimer up front: this tool does not erase your GDID and does not make you anonymous. The GDID lives on...

webvulscan

WebVulScan Synopsis WebVulScan is a web application vulnerability scanner. It is a web application itself written in PHP and can be used to test remote, or local, web applications for security vulnerabilities. As a scan is running, details of the scan are dynamically updated to the user. These...

OutOfTune

OutOfTune Inspirado por el Pytune original, OutOfTune registra un dispositivo rogue en Entra ID, lo inscribe en Intune MDM y verifica el estado de cumplimiento resultante. Solo es compatible con dispositivos Windows, ya que ese era mi objetivo principal; posiblemente agregue otros en el futuro...

CVE-2024-50485

CVE-2024-50485 Exam Matrix = 1.5 - Unauthenticated Privilege Escalation Description: The Exam Matrix plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.5. This is due to the plugin not properly restricting functionality that makes it possible for...

CVE-2024-24809-Proof-of-concept

CVE-2024-24809 Detail Description Traccar is an open source GPS tracking system. Versions prior to 6.0 are vulnerable to path traversal and unrestricted upload of file with dangerous type. Since the system allows registration by default, attackers can acquire ordinary user permissions by...

archivo-syxe05-snat

SyXe'05 / Snat Reverse Engineering Archive Archivo histórico de tutoriales de reverse engineering y unpacking escritos originalmente bajo los alias SyXe'05 y posteriormente Snat. Los textos fueron publicados originalmente en diferentes comunidades técnicas de la época, principalmente dentro de...

bunitu_tests

bunitutests Scripts para comunicación con el troyano Bunitu y sus C&C ¡Úselo bajo su propio riesgo! Autores: : hasherezade Malwarebytes : Sergei Frankoff Sentrant Archivos: cnc1test.py - registra tu host como un bot proxy en la botnet Bunitu comunica con C&C1 cnc2test.py - verifica si el host dad...

CVE-2026-13610

CVE-2026-13610 KiviCare – Clinic & Patient Management System CWE-269 Improper Privilege Management | Unauthenticated registration with attacker-chosen staff role → patient PHI disclosure Overview Critical vulnerability in the KiviCare – Clinic & Patient Management System WordPress plugin versions...

SharpSCOM

SharpSCOM A C tool for interacting with Microsoft System Center Operations Manager SCOM. This tool has been tested against SCOM Server version 10.22.10118.0. SSPI integration is provided via the nsspi library from Kevin Thompson antiduh released under the BSD-2 license. Command Line Usage...

CVE-2023-3460

Ultimate Member - Descripción general ¡Bienvenido al repositorio de GitHub de Ultimate Member! Ultimate Member es un potente y flexible plugin de perfiles de usuario y membresía para WordPress, pero a veces los plugins tienen alguna vulnerabilidad y pueden llevar a la compromisión del sitio web...

CVE-2025-2594

CVE-2025-2594 User Registration & Membership = 4.1.2 - Authentication Bypass Disclaimer! The information presented in this CVE Common Vulnerabilities and Exposures writeup is for educational and informational purposes only. The details provided are based on publicly available resources, research,...

poastal

Poastal - the Email OSINT tool Poastal is an email OSINT tool that provides valuable information on any email address. With Poastal, you can easily input an email address and it will quickly answer several questions, providing you with crucial information. ✨ Features Determine the name of the...

PoC-CVE-2022-4939-

PoC-CVE-2022-4939 El atacante envía una solicitud especialmente manipulada a la acción AJAX wpajaxnoprivwcfmajaxcontroller para modificar el formulario de registro de membresía y establecer el rol de registro al de administrador. Luego, el plugin procesa la solicitud y modifica el formulario de...

CVE-2021-22911

CVE-2021-22911 Si ya has registrado un usuario, esto solo restablecerá la contraseña del administrador, y no ambas. Haciendo que el exploit se ejecute mucho más rápido. python3 exploit.py -u test -a [email protected] -t http://chat.rocket.thm -i 10.10.4.24 -p 80...

CVE-2026-2631

CVE-2026-2631 Datalogics Ecommerce Delivery – Datalogics PoC / Exploit Script: CVE-2026-2631.py Author: Khaled Alenazi Nxploited – Nxploited ZeroDay Hub Contact: Telegram: @Kxploit 🧬 Vulnerability Overview Plugin: Datalogics Ecommerce Delivery – Datalogics WordPress Affected Versions: 2.6.60...

OSINT-Framework

OSINT Framework http://osintframework.com Notes OSINT framework focused on gathering information from free tools or resources. The intention is to help people find free OSINT resources. Some of the sites included might require registration or offer more data for $$$, but you should be able to get...

CVE-2025-13342

CVE-2025-13342 PoC El plugin Frontend Admin de DynamiApps para WordPress es vulnerable a la modificación no autorizada de opciones arbitrarias de WordPress en todas las versiones hasta la 3.28.20 inclusive. Esto permite a los atacantes registrar usuarios y establecer el rol predeterminado como...

CVE-2024-34469

CVE-2024-34469 La versión Rukovoditel hasta la 3.5.3 se ve afectada por un ataque de cross-site scripting XSS El payload puede incrustarse en dos lugares: en la página de registro y en la cuenta personal del usuario con cualquier privilegio. La vulnerabilidad está en el parámetro userphoto. 1...

SecretsStalker

secretstalker root@kitploit: / / / / / / / / / / / \ / - / - -/ / \ \ / / // / '/ - / ////// / // /,////\// ╔╦╦╬╬╬╬╬╬╦╦╗ ╔╬╬╬╝╝┘ ╚╝╝╬╬╬┐ ╬╬╝╚╩╬╗╔ ╚╬╬╬ ╬╝ ╚╬╬╗╗ ╔ ╚╬╗ ╬╬ ╔╗ ╚╬╬╬╬╬╬╦ ╬╬ we found your secret... ╔╬┤ ╬╬╬ ╬╬╬╬╬╬╬╬╝╝╝╬╬╗ ...now let's see what it ╬╬┤ ╚╩┘ ╚╬╬╬╬╬╩ ╠╬╬ can REALLY...