sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

ShunyaNet-Sentinel

ShunyaNet Sentinel UPDATED: 03/02/2026 ShunyaNet Sentinel is a lightweight, cyberpunk-themed program that ingests RSS feeds e.g., breaking news, social media, sends them to an LLM for analysis, and delivers alerts and summary reports directly to the GUI and Slack at regular intervals. The project...

CVE-2025-24893

Exploit SSTI de XWiki Un exploit en Python para la vulnerabilidad de Inyección de Plantillas del Lado del Servidor SSTI en XWiki a través de la inyección de plantillas Groovy en el endpoint SolrSearch. Vulnerabilidad Tipo : Inyección de Plantillas del Lado del Servidor SSTI Componente : feed RSS ...

peer-tweet

PeerTweet Feeds descentralizados usando el DHT de BitTorrent. Idea de Arvid y The8472 "DHT RSS feeds" http://libtorrent.org/dhtrss.html Captura de pantalla Enlaces rápidos Descarga los últimos binarios desde la página de lanzamientos. Encuentra y comparte direcciones de PeerTweet desde la página ...

CVE-2025-24893_Analysis

CVE-2025-24893 - SSTI en SolrSearch de XWiki que permite ejecución remota de código sin autenticación Un laboratorio Docker autónomo que reproduce CVE-2025-24893, una inyección de plantillas del lado del servidor en el feed RSS de SolrSearch de XWiki que conduce a la ejecución remota de código no...

CVE-2023-5612

Divulgación del correo electrónico público en el feed RSS de etiquetas https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was...

WordPress WPeMatico RSS Feed Fetcher plugin < 2.8.27 - Contributor+ Post Publication and Author Spoofing vulnerability

Contributor+ Post Publication and Author Spoofing vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin WPeMatico RSS Feed Fetcher versions 2.8.27...

exploit-CVE-2023-38490

Kirby XML External Entity XXE - CVE-2023-38490 exploit Kirby 3.9.6 XML External Entity Exploit for CVE-2023-38490 / GHSA-q386-w6fg-gmgp. Exploitation demonstration Build and run the vulnerable demo app: cd docker docker buildx build -t kirby-starterkit-3.9.5 . docker run -d --rm -p...

CVE-2026-89006

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not sanitize imported feed content before storing it as post content, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2026-89003

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check before fetching a user-supplied URL and rendering the response, allowing users with contributor-level access and above to force the server to issue requests to internal-only hosts and read the...

CVE-2026-89001

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not verify that a user running a feed campaign is permitted to publish content or to attribute posts to another account, allowing users with contributor-level access and above to publish posts live and set any registered user,...

CVE-2026-89000

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check or validate the destination of a user-supplied feed URL before fetching it server-side, allowing users with contributor-level access and above to make the server issue requests to internal-only...

EUVD-2026-87894

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check before fetching a user-supplied URL and rendering the response, allowing users with contributor-level access and above to force the server to issue requests to internal-only hosts and read the...

EUVD-2026-87895

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not sanitize imported feed content before storing it as post content, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2026-89006 WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Stored XSS via Feed Import

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not sanitize imported feed content before storing it as post content, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2026-89001 WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Post Publication and Author Spoofing via Campaign Settings

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not verify that a user running a feed campaign is permitted to publish content or to attribute posts to another account, allowing users with contributor-level access and above to publish posts live and set any registered user,...

CVE-2026-89003 WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign Preview

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check before fetching a user-supplied URL and rendering the response, allowing users with contributor-level access and above to force the server to issue requests to internal-only hosts and read the...

CVE-2026-89001

The WPeMatico RSS Feed Fetcher WordPress plugin, in versions before 2.8.27 , contains a vulnerability where it fails to verify if a user running a feed campaign has permission to publish content or attribute posts to other accounts. This allows users with contributor-level access and above to pub...

EUVD-2026-87893

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not verify that a user running a feed campaign is permitted to publish content or to attribute posts to another account, allowing users with contributor-level access and above to publish posts live and set any registered user,...

WordPress WPeMatico RSS Feed Fetcher plugin < 2.8.27 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Philipp Doblhofer in WordPress Plugin WPeMatico RSS Feed Fetcher versions 2.8.27...