EUVD-2025-210822

The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's before-label value before its bundled client-side script re-injects it into the DOM, allowing users with the Author role and above to store a payload that executes in the browser ...

CVE-2025-15664 BEAF < 4.7.19 - Author+ Stored XSS via Before Label

The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's before-label value before its bundled client-side script re-injects it into the DOM, allowing users with the Author role and above to store a payload that executes in the browser ...

CVE-2025-15663

The Ultimate Before After Image Slider & Gallery (BEAF) WordPress plugin, in versions before 4.7.19 , suffers from a Stored XSS due to improper escaping of the slider's after-label value before the bundled client-side script re-injects it into the DOM. Users with the Author role or above can stor...

CVE-2025-15663 BEAF < 4.7.19 - Author+ Stored XSS via After Label

The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's after-label value before its bundled client-side script re-injects it into the DOM, allowing users with the Author role and above to store a payload that executes in the browser o...

CVE-2025-15663 BEAF < 4.7.19 - Author+ Stored XSS via After Label

The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's after-label value before its bundled client-side script re-injects it into the DOM, allowing users with the Author role and above to store a payload that executes in the browser o...

EUVD-2025-210823

The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's after-label value before its bundled client-side script re-injects it into the DOM, allowing users with the Author role and above to store a payload that executes in the browser o...

CVE-2026-5524-PoC

CVE-2026-5524 — تنفيذ أوامر عن بُعد RCE غير مصادَق عليه في Divi Form Builder مجموعة أدوات استغلال جماعي لـ CVE-2026-5524 ، وهي ثغرة رفع ملفات تعسفي غير مصادَق عليها في إضافة ووردبريس Divi Form Builder = 5.1.8 تؤدي إلى تنفيذ أوامر عن بُعد. الحقل| القيمة ---|--- CVE| 2026-5524 CVSS| 9.8 Critical...

dotdotslash

dotdotslash An tool to help you search for Directory Traversal Vulnerabilities Benchmarks Platforms that I tested to validate tool efficiency: DVWA low/medium/high bWAPP low/medium/high Screenshots Instalation You can download the last version cloning this repository root@kitploit: git clone...

ServiceCheater

CVE-2020-0108 फ्रंटग्राउंड सेवा विशेषाधिकार वृद्धि भेद्यता विश्लेषण 1. भेद्यता पृष्ठभूमि AOSP के 2020-08 पैच में, फ्रेमवर्क स्तर पर AMS में एक भेद्यता का खुलासा किया गया, जिसका नंबर CVE-2020-0108 है और रेटिंग High है। AMS में फ्रंटग्राउंड सेवाओं के प्रबंधन में एक तार्किक भेद्यता है, जिसका...

secretlint v13.0.5

Secretlint Secretlint is a Pluggable linting tool to prevent committing credentials. Features Scanner : Find credentials in a project and report these Project Friendly: Easy to set up your project and integrate CI services Pre-Commit Hook : Prevent committing credential files Pluggable : Allow...

CVE-2025-25706

CVE-2025-25706 विवरण आइटम: root@kitploit: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix भेद्यता प्रकार: दूरस्थ कोड निष्पादन...

CVE-2025-25705

CVE-2025-25705 विवरण आइटम: root@kitploit: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix भेद्यता प्रकार: रिमोट कोड निष्पादन...

Security Bulletin: IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent are vulnerable to improper encoding in Apache Log4j [CVE-2026-49844]

Summary IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent are vulnerable to Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API, which produces output that is not valid JSON CVE-2026-49844. This...

BadBlue

BadBlue Windows CVE-2024-21306 Реализация BadBlue с использованием DuckyScript Неаутентифицированное пирингование, приводящее к выполнению кода с использованием клавиатуры HID Это реализация CVE, обнаруженного marcnewlin И некоторый код из BlueDucky Введение BadBlue — это мощный инструмент для...

CVE-2025-57529

CPAS-bug CPAS审计管理信息系统存在SQL注入漏洞 北京优达数聚科技有限公司 域名: http://youdatasum.com 信息 root@kitploit: CVE-ID: CVE-2025-57529 受影响版本: findArchiveReportByDah@RequestParamvalue = "pageNum", defaultValue = "0" int pageNum, @RequestParamvalue = "pageSize", defaultValue = "10" int pageSize, @RequestParamvalue =...

obridge

OBridge OBridge fournit un générateur de code source Java simple pour appeler des procédures de package Oracle PL/SQL. Les paramètres d'entrée, de sortie et les valeurs de retour pris en charge sont : BINARYINTEGER BOOLEAN CHAR CLOB BLOB DATE NCHAR NUMBER NVARCHAR2 OBJECT - Oracle Object Type...

CVE-2026-64640

CVE-2026-64640 — Apache Polaris: emisión de credenciales antes de la validación de ubicación en register Un reproductor autónomo de un solo comando para CVE-2026-64640 : los endpoints register de Iceberg REST en Apache Polaris generan credenciales de almacenamiento en la nube para una ruta...

Asyncrat-Venom-Dcrat-Config-Extractor

Asyncrat-Venom-Dcrat-Config-Extractor Extractor de Config estático para Asyncrat/Dcrat/VenomRat Utiliza dnlib para localizar los datos de Config cifrados y los valores de cifrado asociados. Los valores se descifran en el script sin emular ni ejecutar código de malware Asume que la configuración s...

exploit-writing-for-oswe

Escritura de Exploits para OSWE Antecedentes Qué Este repositorio contiene una lista de fragmentos de código snippets y consejos útiles relacionados con la escritura de scripts de exploits en los laboratorios y el examen de certificación OSWE. Algunos ejemplos aquí pueden ir en contra de ciertas...

tactical-exploitation

tactical-exploitation "The Other Way to Pen-Test" -- HD Moore & Valsmith Siempre he sido un gran defensor de un enfoque táctico para las pruebas de penetración que no se centra en explotar vulnerabilidades de software conocidas, sino que se basa en técnicas de la vieja escuela como la recopilació...