WordPress Panda Pods Repeater Field <1.5.4 - Cross-Site Scripting

WordPress Panda Pods Repeater Field before 1.5.4 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape a parameter before outputting it back in the page. This can be leveraged against a user who has at least Contributor permission. An attacker can also steal...

Acexy Wireless-N WiFi Repeater REV 1.0 - Repeater Password Disclosure

Acexy Wireless-N WiFi Repeater REV 1.0 is vulnerable to password disclosure because the password.html page of the web management interface contains the administrator account password in plaintext. id: CVE-2021-28937 info: name: Acexy Wireless-N WiFi Repeater REV 1.0 - Repeater Password Disclosure...

burpsuiefakeip

https://github.com/TheKingOfDuck/burpFakeIP 에서 전재 BurpFakeIP burpsuite IP 위조, 저는 진지합니다. 네 가지 작은 기능 지정 IP 위조 로컬 IP 위조 랜덤 IP 위조 랜덤 IP 브루트포스 0x01 지정 IP 위조 Repeater 모듈에서 마우스 오른쪽 버튼을 클릭해 fakeIp 메뉴를 선택한 다음 inputIP 기능을 클릭하고 지정된 IP를 입력합니다: 프로그램이 위조 가능한 모든 필드를 요청 헤더에 자동으로 추가합니다. 0x02 로컬 IP 위조 Repeater 모듈에...

CVE-2025-34152

⚠️ CVE-2025-34152 – Ripetitore Wi-Fi Shenzhen Aitemi M300 RCE 🚨 Panoramica Il ripetitore Wi-Fi Shenzhen Aitemi M300 è affetto da esecuzione di codice remoto non autenticata RCE. Nessun login richiesto Non riavvia il dispositivo Può essere sfruttato da remoto 🛠 Versioni Vulnerabili Versione| Stato...

bambdas

Script Bambda Benvenuto nel repository ufficiale degli script Bambda di PortSwigger. Questa repo contiene una raccolta di script sviluppati sia da PortSwigger che dalla community con 🧡 📑 In questa pagina Tipi di script Bambda Contenuto del repository Importare script in Burp Aggiornare gli script...

burp-exporter

Exporter Extension for Burp Suite Community and Pro Follow us to know more about tips and others extensions Description Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions. It also adds a tab called Exporter where you can...

Burp-Recordadora

🧙‍♂️ Recordadora Recordadora è un'estensione per BurpSuite ispirata a Harry Potter. Come la ricordella di Neville, ti aiuta a non dimenticare né perdere il contesto dei tuoi test. ✨ Funzionalità Salvare e ripristinare la cronologia del Proxy Esportare e importare le richieste del Repeater Rendere...

auto-repeater

Auto Repeater Estensione Burp Informazioni Questa è una versione modificata della fantastica estensione Auto Repeater scritta da Justin Moore, NCC Group Il repository originale si trova su https://github.com/nccgroup/AutoRepeater La versione Portswigger si trova su...

CVE-2026-19613 ECS < 4.3.10 - Contributor+ Arbitrary Post Meta Disclosure via Dynamic Repeater ACF Source

The ECS WordPress plugin before 4.3.10 does not perform ownership or post-status checks when one of its dynamic repeater data sources reads custom field values from a user-supplied post identifier, allowing users with a contributor-level account or above to read custom field values and post...

EUVD-2026-59592

The ECS WordPress plugin before 4.3.8 does not have capability or ownership checks on its dynamic repeater actions, relying only on a nonce available to any user who can open the page builder, allowing users with a contributor-level account or above to read, alter and delete the binding...

CVE-2026-18807 ECS < 4.3.8 - Contributor+ Arbitrary Post Binding and Global Preset Modification via Dynamic Repeater Handlers

The ECS WordPress plugin before 4.3.8 does not have capability or ownership checks on its dynamic repeater actions, relying only on a nonce available to any user who can open the page builder, allowing users with a contributor-level account or above to read, alter and delete the binding...

CVE-2026-14230 ECS < 4.3.8 - Contributor+ Stored XSS via Dynamic Repeater Bindings

The ECS WordPress plugin before 4.3.8 does not perform capability or object-ownership checks on its Dynamic Repeater AJAX handlers gated only by a capability-agnostic nonce that any editposts user obtains from the Elementor editor, so a Contributor can write a data-source binding into any post —...

CVE-2026-14230

In ECS (Ele Custom Skin) plugin for Elementor before 4.3.8, Dynamic Repeater AJAX handlers lack capability and object-ownership checks. A low-privileged Contributor can write unsanitized data-source bindings into any post, including admin pages, causing stored XSS that fires in visitor or admin s...

EUVD-2026-59588

The ECS WordPress plugin before 4.3.8 does not perform capability or object-ownership checks on its Dynamic Repeater AJAX handlers gated only by a capability-agnostic nonce that any editposts user obtains from the Elementor editor, so a Contributor can write a data-source binding into any post —...

CVE-2026-73143

A flaw was found in svxlink's RtlTcp component. A malformed rtltcp greeting from a remote source triggers an unconditional exit1 call, causing the entire svxlink daemon to terminate. A remote attacker can exploit this to achieve a complete denial of service of the repeater controller. Mitigation...

CVE-2026-19348

A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?fname=net&opt=smacfilterconf&function=set&act=add&name=test&enable=1. Performing a manipulation of the argument enable/name/mac results in command...

CVE-2026-19348 Shenzhen Aitemi M300 Wi-Fi Repeater protocol.csp sprintf command injection

A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?fname=net&opt=smacfilterconf&function=set&act=add&name=test&enable=1. Performing a manipulation of the argument enable/name/mac results in command...

CVE-2026-19348

The CVE-2026-19348 entry concerns Shenzhen Aitemi M300 Wi‑Fi Repeater. A vulnerability in the sprintf handling within /protocol.csp?fname=net&opt=smacfilter_conf&function=set&act=add&name=test&enable=1 allows remote command injection by manipulating parameters such as enable/name/mac. Impact is h...

EUVD-2026-54917

A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?fname=net&opt=smacfilterconf&function=set&act=add&name=test&enable=1. Performing a manipulation of the argument enable/name/mac results in command...

CVE-2026-19348

A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?fname=net&opt=smacfilterconf&function=set&act=add&name=test&enable=1. Performing a manipulation of the argument enable/name/mac results in command...