CVE-2026-8181

CVE-2026-8181 Burst Statistics | Bypass dell'autenticazione per il takeover dell'account amministratore Descrizione: Burst Statistics 3.4.0 - 3.4.1.1 - Bypass dell'autenticazione per il takeover dell'account amministratore Il plugin Burst Statistics – Privacy-Friendly WordPress Analytics...

CVE-2026-8181

CVE-2026-8181 - Burst Statistics Authentication Bypass CVSS 9.8 Critical — Authentication Bypass to Admin Account Takeover Descrizione CVE-2026-8181 è una vulnerabilità di Bypass di Autenticazione nel plugin WordPress Burst Statistics versione 3.4.0 fino a 3.4.1.1. Questo plugin è utilizzato da...

kbd-audio

kbd-audio Dies ist eine Sammlung von Kommandozeilen- und GUI-Werkzeugen zum Erfassen und Analysieren von Audiodaten. Keytap Das interessanteste Werkzeug heißt keytap - es kann gedrückte Tastaturtasten erraten, indem es nur das über das Mikrofon des Computers aufgenommene Audio analysiert. Weitere...

CVE-2025-9816

CVE-2025-9816 XSS Memorizzato sul Plugin WP-Statistics Scanner Rilevamento e PoC "Il plugin WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin per WordPress è vulnerabile a Stored Cross-Site Scripting tramite l'header User-Agent in tutte le versioni fino alla 14.5.4 inclusa, a cau...

CVE-2026-8181

CVE-2026-8181 - Exploração de Bypass de Autenticação do Burst Statistics Python 2.7 exploit para a vulnerabilidade do plugin Burst Statistics CVE-2026-8181 que permite a atacantes não autenticados contornar a autenticação da API REST, recuperar senhas de aplicativos e criar novos usuários...

CVE-2026-8181

EN: PoC controllato e brevi note tecniche per test di sicurezza autorizzati del bypass dell'autenticazione in Burst Statistics. TR:...

network-monitor

Monitor di Rete Uno strumento di monitoraggio delle connessioni di rete in tempo reale costruito con Rust e GTK4, che mostra le connessioni attive con statistiche I/O in tempo reale in un'interfaccia grafica moderna. Caratteristiche Monitoraggio in tempo reale : Monitora continuamente le...

Goreport

Goreport v3.0, uno strumento di reportistica per Gophish Questo script accetta uno o più ID delle campagne Gophish come parametro e poi raccoglie i risultati della campagna per presentare le statistiche, eseguire il parsing dello user-agent e le ricerche di geolocalizzazione per gli indirizzi IP...

mtr

WHAT IS MTR? mtr combines the functionality of the 'traceroute' and 'ping' programs in a single network diagnostic tool. As mtr starts, it investigates the network connection between the host mtr runs on and a user-specified destination host. It sends probes to the destination with successively...

web

अपने स्वयं के Linux हार्डवेयर के माध्यम से नेटवर्क-व्यापी विज्ञापन अवरोधन पाई-होल वेबसाइट | दस्तावेज़ीकरण | डिस्कोर्स फ़ोरम | दान करें पाई-होल वेब इंटरफ़ेस पाई-होल® का वेब इंटरफ़ेस AdminLTE पर आधारित आपके पाई-होल को प्रबंधित करने और FTLDNS™ द्वारा उत्पन्न आँकड़ों की समीक्षा करने के लिए एक केंद्री...

httpstat

httpstat httpstat visualizes curl1 statistics in a way of beauty and clarity. It is a single file🌟 Python script that has no dependency👏 and is compatible with Python 3🍻. Features Beautiful terminal output — timing breakdown of DNS, TCP, TLS, server processing, and content transfer Structured JSO...

httpstat

httpstat httpstat visualizza le statistiche di curl1 in modo bello e chiaro. È uno script Python a file unico🌟 che non ha dipendenze👏 ed è compatibile con Python 3🍻. Caratteristiche Bell'output nel terminale — suddivisione dei tempi di DNS, TCP, TLS, elaborazione del server e trasferimento del...

CVE-2026-8181

CVE-2026-8181 — Burst Statistics 3.4.0 – 3.4.1.1 — प्रमाणीकरण बाईपास से व्यवस्थापक खाता अधिग्रहण भेद्यता सारांश वर्डप्रेस प्लगइन Burst Statistics संस्करण 3.4.0 से 3.4.1.1 एक अप्रमाणित प्रमाणीकरण बाईपास भेद्यता के लिए संवेदनशील है जो पूर्ण व्यवस्थापक खाता अधिग्रहण की ओर ले जाता है। यह गंभीर दोष एक...

sdnpwn

What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git root@kitploit: git clone...

ntopng

ntopng Introduction ntopng® is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. While you can read more about ntopng on the ntop web site...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

nginx_log_check

nginxlogcheck Nginx log security analysis script Features Top 20 address statistics SQL injection analysis Scanner alert analysis Vulnerability exploitation detection Sensitive path access File inclusion attack Webshell Find Top 20 URLs by response length Find rare script file access Find 302...

jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...

WordPress Visitor Statistics (Real Time Traffic) <4.8 -SQL Injection

WordPress Visitor Statistics Real Time Traffic plugin before 4.8 does not properly sanitize and escape the refUrl in the refDetails AJAX action, which is available to any authenticated user. This could allow users with a role as low as subscriber to perform SQL injection attacks. id: CVE-2021-247...

WordPress Plugin WP Statistics <= 13.1.5 - SQL Injection

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the currentpagetype parameter found in the /includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain...