4501 matches found
surf
Surf - Escalate your SSRF vulnerabilities on Modern Cloud Environments surf allows you to filter a list of hosts, returning a list of viable SSRF candidates. It does this by sending a HTTP request from your machine to each host, collecting all the hosts that did not respond, and then filtering th...
Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
The Uncanny Automator - Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.0.2. This is due to addrole and userrole functions missing proper capability checks performed through the...
archerysec
Support. Your generous donations will keep us motivated. Paypal: Archery Overview of the tool Note Requirements OpenVAS OWASP Zap Burp Scanner SSLScan Nikto NMAP Vulners Installation Windows Installation Note on installation for developers and contributors Note on manual and automated installatio...
lk_scraper
LinkedIn Scraper Scrapes Any LinkedIn Data Installation $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a Selenium server $ docker run -d -...
CVE-2026-91022
The Motors WordPress plugin (versions before 1.4.124 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The issue occurs because the plugin fails to properly sanitize and escape a listing badge setting before rendering it within an HTML attribute. This allows users with a custom, admini...
PT-2026-104080
The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'lang' parameter in all versions up to, and including, 7.16.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
PT-2026-104089
The Motors WordPress plugin before 1.4.124 does not sanitise and escape a listing badge setting before outputting it inside an HTML attribute, allowing users with a custom, administrator-assigned listing-management role to inject arbitrary web scripts that execute when a listing is viewed by any...
CVE-2026-47100-Analysis-Lab
CVE-2026-47100 — FunnelKit / Funnel Builder for WooCommerce 체크아웃 저장형 XSS 실습 환경 로컬 Docker 실습 환경으로 CVE-2026-47100을 안전하고 최소 피해 방식으로 재현합니다. 이 실습 환경은 취약한 FunnelKit 버전과 패치된 버전을 비교하고, 무해한 JavaScript 마커/알림을 사용하여 동작을 확인합니다. 1. 개요 CVE-2026-47100은 버전 3.15.0.3 이전의 Funnel Builder / FunnelKit for WooCommerce...
CVE-2026-86610
The Download Manager WordPress plugin before 3.3.71 does not sufficiently sanitise and escape a package setting before outputting it back in a page, which could allow users with the Author role and above to perform Stored Cross-Site Scripting attacks against any visitor who opens the package's...
CVE-2026-86610 Download Manager < 3.3.71 - Author+ Stored XSS via Package Icon
The Download Manager WordPress plugin before 3.3.71 does not sufficiently sanitise and escape a package setting before outputting it back in a page, which could allow users with the Author role and above to perform Stored Cross-Site Scripting attacks against any visitor who opens the package's...
EUVD-2026-90511
The Download Manager WordPress plugin before 3.3.71 does not sufficiently sanitise and escape a package setting before outputting it back in a page, which could allow users with the Author role and above to perform Stored Cross-Site Scripting attacks against any visitor who opens the package's...
CVE-2026-86610
The Download Manager WordPress plugin (versions before 3.3.71 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient sanitization and escaping of a package setting before it is rendered on a page; specifically, the sanitization logic fails to neutralize single quote...
CentOS Linux 8 [TuxCare] Security Update: ctdb / libnetapi / libnetapi-devel / libsmbclient / etc (CENTOS-STREAM8:CLSA-2026:1780503645)
The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1780503645 advisory. - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured...
EUVD-2026-90075
External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43...
CVE-2026-94953
A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formAjaxSet using the topicurl=setting/setWiFiRepeaterConfig branch and the ApCliWEPKey field...
CVE-2026-94953
A stack-based buffer overflow vulnerability exists in the web management interface of the TOTOLINK N150RT (NTR150) router running firmware version V3.4.0-B20201030 . The flaw is reachable via the /boafrm/formAjaxSet route specifically when using the topicurl=setting/setWiFiRepeaterConfig branch a...
CVE-2025-64446-Exploit
CVE-2025-64446-Эксплойт Эксплойт CVE-2025-64446 для FortiWeb WAF. С помощью этого эксплойта вы можете создать пользователя и пароль. Как запускать? python3 exploitforti.py targets.txt python3 exploitforti.py 192.168.1.1 python3 exploitforti.py 192.168.1.1:8443 python3 exploitforti.py...
CVE-2018-8414-POC
CVE-2018-8414 POC Vulnérabilité d'exécution de code à distance dans les paramètres du package Windows Shell Depuis : Windows 10 Version 1703 à 1803 / Windows Server Version 1709 à 1803 Note : Parfois l'exploit échoue en fonction de l'emplacement du fichier paramètres de stratégie par défaut, donc...
CVE-2022-24734
CVE-2022-24734 PoC Une RCE peut être obtenue dans le panneau d'administration de MyBB sous Configuration - Ajouter un nouveau paramètre. L'utilisateur doit avoir les droits d'ajouter ou de mettre à jour un paramètre. Ceci a été testé sur MyBB 1.8.29. Sources: https://github.com/mybb/mybb/...