mapsdumper

root@kitploit: ▒█▀▄▀█ ░█▀▀█ ▒█▀▀█ ▒█▀▀▀█ ▒█▀▀▄ ▒█░▒█ ▒█▀▄▀█ ▒█▀▀█ ▒█▀▀▀ ▒█▀▀█ ▒█▒█▒█ ▒█▄▄█ ▒█▄▄█ ░▀▀▀▄▄ ▒█░▒█ ▒█░▒█ ▒█▒█▒█ ▒█▄▄█ ▒█▀▀▀ ▒█▄▄▀ ▒█░░▒█ ▒█░▒█ ▒█░░░ ▒█▄▄▄█ ▒█▄▄▀ ░▀▄▄▀ ▒█░░▒█ ▒█░░░ ▒█▄▄▄ ▒█░▒█ by: @Tegal1337 MAPSDUMPER Demo • Installation • Feature • Credits A tool for dumping place...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

longfellow-zk

Longfellow ZK Overview The Longfellow library enables the construction of zero-knowledge protocols concerning legacy identity verification standards such as the ISO MDOC standard, the JWT standard, and W3 Verifiable Credentials. This implementation is described in: Anonymous credentials from ECDS...

CVE-2021-39475

CVE-2021-39475 管理者レビューページのXSS https://www.warcloudsecurity.com/ecommerce/admin/reviews.php?action=preview&rID=1&page=0...

publications

Publications from Trail of Bits Publications from Trail of Bits Academic Papers White Papers Guides and Handbooks Conference Presentations Automated bug finding and exploitation Blockchain Compilers Cryptography Engineering Education Infrastructure Machine Learning Mobile security Programming Sid...

rcno-reviews

Recencio Book Reviews 一个用于管理和展示图书评论的 WordPress 插件。自定义文章类型、7 个分类法、13 个短代码、7 个小工具、6 个模板、5 个扩展。所有数据均存储在标准的 WordPress post meta 中——没有自定义数据表。 背景 Recencio Book Reviews 由 Kemory Grubb （w33zy）创建并发布在 WordPress 插件目录中。Kemory 于 2024 年去世。该插件长期无人维护，存在一个已知的存储型 XSS 漏洞（CVE-2024-33648），并且没有任何修复途径。 2026 年，Tom Stayt...

Mintinstall-object-injection

Linux mint 软件管理器（v 7.9.5/9）由于配置错误，导致我们能够执行对象注入和任意代码。 root@kitploit: mintinsall 当我们运行 Mint 软件管理器时，它会检查是否有新的评论。如果有新的评论，它会从 new-reviews.list 下载并写入文件。 root@kitploit: code mintinstall.py 软件管理器首次启动时，它会从 reviews 模块调用 ReviewCache 类。 它是如何处理数据的？ 它是如何处理数据的？ root@kitploit: code reviews.py 当 ReviewCache...

Site Reviews < 7.2.5 - Unauthenticated Stored XSS

Site Reviews WordPress plugin before 7.2.5 contains a stored cross-site scripting caused by improper sanitization and escaping of review fields, letting unauthenticated users execute malicious scripts, exploit requires no authentication. id: CVE-2025-1232 info: name: Site Reviews 7.2.5 -...

CVE-2026-11608 WP Customer Reviews <= 3.7.8 - Reflected Cross-Site Scripting via 'wpcr3_fname' Parameter

The WP Customer Reviews plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpcr3fname' parameter in all versions up to, and including, 3.7.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-11608

The WP Customer Reviews plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the wpcr3_fname parameter in all versions up to and including 3.7.8 , caused by insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web scripts that exe...

EUVD-2026-83575

The WP Customer Reviews plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpcr3fname' parameter in all versions up to, and including, 3.7.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

CVE-2024-50945

CVE-2024-50945 描述 SimplCommerce 在评论系统中存在一个被破坏的访问控制漏洞，允许未授权用户为他们未购买的商品发布评论。 检测方法 攻击者可以通过向评论提交端点发送请求，并将 EntityId 更改为他们未购买的产品的 ID 来检测此漏洞。如果评论成功发布，则确认该网站存在被破坏的访问控制漏洞。 测试于 230310c8d7a0408569b292c5a805c459d47a1d8f 提交 链接 https://www.simplcommerce.com/ https://github.com/simplcommerce/SimplCommerce...

CVE-2026-81800

Unauthenticated SQL Injection in Verified Reviews Avis Vérifiés = 2.4.6 versions...

CVE-2026-81800

CVE-2026-81800 affects the WordPress plugin Verified Reviews (Avis Vérifiés) in versions ≤ 2.4.6 , where an unauthenticated SQL injection vulnerability is present. The flaw allows a remote attacker with no prior access to execute crafted SQL queries, resulting in a high confidentiality impact and...

EUVD-2026-75529

Unauthenticated SQL Injection in Verified Reviews Avis Vérifiés = 2.4.6 versions...

CVE-2026-81800 WordPress Verified Reviews (Avis Vérifiés) plugin <= 2.4.6 - SQL Injection vulnerability

Unauthenticated SQL Injection in Verified Reviews Avis Vérifiés = 2.4.6 versions...

CVE-2026-82925

The Site Reviews WordPress plugin before 8.3.0 does not prevent request data from being deserialized, and derives the key protecting that data by padding out the site's WordPress nonce key, which makes the key publicly computable on installs where that key is absent, left at its sample value, or...

CVE-2026-82925

Site Reviews WordPress plugin versions 7.2.2 through 8.2.2 (before 8.3.0) allow unauthenticated PHP object injection via a deserialization flaw in its form-signature handling. The plugin derives its protection key by padding the site's WordPress nonce key , making it publicly computable when that...

CVE-2026-82925 Site Reviews 7.2.2 - 8.2.2 - Unauthenticated PHP Object Injection via Form Signature

The Site Reviews WordPress plugin before 8.3.0 does not prevent request data from being deserialized, and derives the key protecting that data by padding out the site's WordPress nonce key, which makes the key publicly computable on installs where that key is absent, left at its sample value, or...