ShunyaNet-Sentinel

ShunyaNet Sentinel（更新于：2026年3月2日） ShunyaNet Sentinel 是一个轻量级的、赛博朋克主题的程序，它接收 RSS 订阅源（例如突发新闻、社交媒体），将其发送给 LLM 进行分析，并定期将警报和摘要报告直接发送到 GUI 和 Slack。 该项目旨在利用与同一台机器或网络（例如通过 Tailscale）上本地托管的 LLM，使用 LMStudio 或 Ollama（02/23 更新） 。它也适用于 OpenAI API 密钥（02/23 更新） 。 在警报方面，该程序使用 Slack Webhooks，能够将推送通知发送到移动设备。...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

peer-tweet

PeerTweet 使用 BitTorrent DHT 的去中心化信息流。灵感来自 Arvid 和 The8472 的“DHT RSS feeds” http://libtorrent.org/dhtrss.html 截图 快速链接 从发布页面下载最新二进制文件。 从地址问题页面查找和分享 PeerTweet 地址。 什么是 PeerTweet？ BitTorrent 的 DHT 可能是互联网上最具弹性和抗审查能力的网络之一。PeerTweet 利用这个网络允许用户向所有监听者广播 推文 。当你启动 PeerTweet 时，它会生成一个哈希...

CVE-2025-24893_Analysis

CVE-2025-24893 - SSTI en SolrSearch de XWiki que permite ejecución remota de código sin autenticación Un laboratorio Docker autónomo que reproduce CVE-2025-24893, una inyección de plantillas del lado del servidor en el feed RSS de SolrSearch de XWiki que conduce a la ejecución remota de código no...

CVE-2023-5612

Divulgación del correo electrónico público en el feed RSS de etiquetas https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ root@kitploit: An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to...

CVE-2026-89002

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitize and escape content it retrieves from a user-supplied source before rendering it, which could allow users such as contributors to perform Stored Cross-Site Scripting attacks against higher-privileged users who review t...

CVE-2026-89004

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration and run log, allowing users with contributor-level access and above to read the configuration and execution logs of campaigns created by othe...

CVE-2026-89005

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitise and escape one of its campaign configuration fields when a certain feature is enabled, which allows users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the session ...

CVE-2026-89004 WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Campaign Configuration and Log Disclosure via IDOR

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration and run log, allowing users with contributor-level access and above to read the configuration and execution logs of campaigns created by othe...

EUVD-2026-85807

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitise and escape one of its campaign configuration fields when a certain feature is enabled, which allows users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the session ...

EUVD-2026-85806

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration and run log, allowing users with contributor-level access and above to read the configuration and execution logs of campaigns created by othe...

CVE-2026-89005

The WPeMatico RSS Feed Fetcher WordPress plugin, versions before 2.8.26 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to sanitize and escape specific campaign configuration fields when a particular feature is enabled. This allows users with the Contributor rol...

CVE-2026-89005 WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Stored XSS via Word to Category

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitise and escape one of its campaign configuration fields when a certain feature is enabled, which allows users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the session ...

CVE-2026-89004

The WPeMatico RSS Feed Fetcher WordPress plugin, in versions before 2.8.26 , is vulnerable to an Insecure Direct Object Reference (IDOR) . The flaw exists because the plugin fails to verify ownership or authorization before returning a campaign's stored configuration and run logs. Consequently, u...

EUVD-2026-85805

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitize and escape content it retrieves from a user-supplied source before rendering it, which could allow users such as contributors to perform Stored Cross-Site Scripting attacks against higher-privileged users who review t...

CVE-2026-89002

The WPeMatico RSS Feed Fetcher WordPress plugin (versions before 2.8.26 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to properly sanitize and escape content retrieved from a user-supplied source before rendering it. This allows users with lower privileges, su...

CVE-2026-89002 WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Stored XSS via Campaign Item Preview

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitize and escape content it retrieves from a user-supplied source before rendering it, which could allow users such as contributors to perform Stored Cross-Site Scripting attacks against higher-privileged users who review t...

CVE-2025-24893

Exploit SSTI de XWiki Un exploit en Python para la vulnerabilidad de Inyección de Plantillas del Lado del Servidor SSTI en XWiki a través de la inyección de plantillas Groovy en el endpoint SolrSearch. Vulnerabilidad Tipo : Inyección de Plantillas del Lado del Servidor SSTI Componente : feed RSS ...

exploit-CVE-2023-38490

Kirby Entidad Externa XML XXE - exploit CVE-2023-38490 Kirby 3.9.6 Entidad Externa XML Exploit para CVE-2023-38490 / GHSA-q386-w6fg-gmgp. Demostración de explotación Construye y ejecuta la aplicación demo vulnerable: root@kitploit: cd docker docker buildx build -t kirby-starterkit-3.9.5 . docker...

CVE-2026-54339

Glean , a self-hosted RSS reader and personal knowledge management tool, is affected by a non-blind SSRF with full response disclosure in versions prior to 0.2.6 . An attacker who can POST a malicious feed URL to /api/feeds/discover causes the background worker to fetch each item link without net...