NPM: Ghost: Path Traversal via Locale Setting

NPM: Ghost: Path Traversal via Locale Setting vulnerability discovered by ? in WordPress Npm ghost versions = 1.20.0, 6.64.0...

archerysec

Support. Your generous donations will keep us motivated. Paypal: Archery Overview of the tool Note Requirements OpenVAS OWASP Zap Burp Scanner SSLScan Nikto NMAP Vulners Installation Windows Installation Note on installation for developers and contributors Note on manual and automated installatio...

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a Selenium server $ docker run -d -...

surf

Surf - Escalate your SSRF vulnerabilities on Modern Cloud Environments surf allows you to filter a list of hosts, returning a list of viable SSRF candidates. It does this by sending a HTTP request from your machine to each host, collecting all the hosts that did not respond, and then filtering th...

Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

The Uncanny Automator - Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.0.2. This is due to addrole and userrole functions missing proper capability checks performed through the...

CVE-2026-103007

Elasticsearch versions 8.x (8.16.0 to 8.19.21) and 9.x (9.0.0 to 9.4.6, 9.5.0 to 9.5.3) are vulnerable to Incorrect Authorization (CWE-863) . The flaw exists in a configurable, non-default privilege that allows administrators to delegate limited role-management capabilities. Specifically, the aut...

CVE-2026-103007 Incorrect Authorization in Elasticsearch Leading to Privilege Escalation

Incorrect Authorization CWE-863 in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fully enforced during authorization checks. Elasticsearch contains an incorrect authorization weakness in a configurable, non-default privilege that lets a...

CVE-2025-64446-Exploit

CVE-2025-64446-Эксплойт Эксплойт CVE-2025-64446 для FortiWeb WAF. С помощью этого эксплойта вы можете создать пользователя и пароль. Как запускать? python3 exploitforti.py targets.txt python3 exploitforti.py 192.168.1.1 python3 exploitforti.py 192.168.1.1:8443 python3 exploitforti.py...

EUVD-2026-45272

Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass...

CVE-2026-102776

The Joomla Extension - svenbluege.de 's Event Gallery extension (versions

CVE-2018-8414-POC

CVE-2018-8414 POC Windows Shell Package Setting Remote Code Execution Vulnerability Уязвимость удаленного выполнения кода в настройках пакета оболочки Windows Затронутые версии: Windows 10 Версия 1703 – 1803 / Windows Server Версия 1709 – 1803 Примечание: Иногда эксплойт не срабатывает в...

CVE-2022-24734

CVE-2022-24734 PoC Une RCE peut être obtenue dans le panneau d'administration de MyBB sous Configuration - Ajouter un nouveau paramètre. L'utilisateur doit avoir les droits d'ajouter ou de mettre à jour un paramètre. Ceci a été testé sur MyBB 1.8.29. Sources: https://github.com/mybb/mybb/...

tapodate

tapodate Использует эксплойт https://github.com/hacefresko/CVE-2021-4045 для установки даты и выполнения других команд на автономной камере Tapo C200...

CVE-2026-91022

The Motors WordPress plugin (versions before 1.4.124 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The issue occurs because the plugin fails to properly sanitize and escape a listing badge setting before rendering it within an HTML attribute. This allows users with a custom, admini...

PT-2026-104080

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'lang' parameter in all versions up to, and including, 7.16.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

PT-2026-104089

The Motors WordPress plugin before 1.4.124 does not sanitise and escape a listing badge setting before outputting it inside an HTML attribute, allowing users with a custom, administrator-assigned listing-management role to inject arbitrary web scripts that execute when a listing is viewed by any...

CVE-2026-47100-Analysis-Lab

CVE-2026-47100 — FunnelKit / Funnel Builder for WooCommerce Checkout Stored XSS Lab Локальная Docker-лаборатория для воспроизведения CVE-2026-47100 безопасным способом с минимальным вредом. Эта лаборатория сравнивает уязвимую версию FunnelKit с исправленной и проверяет поведение с помощью...

CVE-2026-86610

The Download Manager WordPress plugin before 3.3.71 does not sufficiently sanitise and escape a package setting before outputting it back in a page, which could allow users with the Author role and above to perform Stored Cross-Site Scripting attacks against any visitor who opens the package's...

CVE-2026-86610 Download Manager < 3.3.71 - Author+ Stored XSS via Package Icon

The Download Manager WordPress plugin before 3.3.71 does not sufficiently sanitise and escape a package setting before outputting it back in a page, which could allow users with the Author role and above to perform Stored Cross-Site Scripting attacks against any visitor who opens the package's...

EUVD-2026-90511

The Download Manager WordPress plugin before 3.3.71 does not sufficiently sanitise and escape a package setting before outputting it back in a page, which could allow users with the Author role and above to perform Stored Cross-Site Scripting attacks against any visitor who opens the package's...