autoenum

/ / / // / / // // \ / \ / \ / / / // \ / // // // // / / // // // / / // // // / / / / / ,/ ,/ / / /// // ,/// // // Краткое описание Autoenum — это инструмент разведки, который выполняет автоматическое перечисление обнаруженных сервисов. Я создал его, чтобы сэкономить время во время CTF и...

cve-2020-0688

cve-2020-0688 사용법: usage: cve-2020-0688.py -h -s SERVER -u USER -p PASSWORD -c CMD optional arguments: -h, --help show this help message and exit -s SERVER, --server SERVER ECP Server URL Example: http://ip/owa -u USER, --user USER login account Example: domain\user -p PASSWORD, --password PASSWO...

web-traffic-generator

web-traffic-generator Быстрый и грязный генератор "органического" HTTP/S трафика. О программе Простой плохо написанный скрипт на Python, который бесцельно "бродит" по интернету, начиная с предопределённых ROOTURLS и случайным образом "кликая" по ссылкам на страницах, пока не будет достигнута...

web-traffic-generator

web-traffic-generator A quick and dirty HTTP/S "organic" traffic generator. About Just a simple poorly written Python script that aimlessly "browses" the internet by starting at pre-defined ROOTURLS and randomly "clicking" links on pages until the pre-defined MAXDEPTH is met. I created this as a...

Issabel-PBX-4.0.0-RCE-Authenticated

Issabel PBX 4.0.0 원격 코드 실행 인증됨 - CVE-2024-0986 설명/요약 Issabel PBX 4.0.0은 로그인한 사용자가 asteriskcli 콘솔을 사용하여 xmldoc 및 dump 명령으로 파일을 생성할 수 있게 합니다. 이는 restore.php 파일을 악용하여 업로드된 파일의 이름에 기반한 원격 명령 실행을 가능하게 합니다. 이 PoC 스크립트는 이 PoC 비디오를 기반으로 합니다. 사용법 $ python3 IssabelPBXAuthenticatedRCE.py -u -p -t -c 예를 들어: ...

letsploit

letsploit letsploit — это инструмент, который определяет уровень обновлений локальной или другой системы Windows 10, сравнивает его с последними доступными исправлениями и находит потенциальные уязвимости CVE, а также публично доступный эксплойт-код. Вдохновлено следующими проектами 1. bitsadmin'...

HTMLy 3.1.1 Authenticated Server-Side Request Forgery

HTMLy version 3.1.1 contains an authenticated server-side request forgery vulnerability in its feed-import function. A user-controlled URL reaches filegetcontents without scheme validation, allowing requests to internal services and local-file disclosure through PHP stream wrappers and error...

vsftpd 2.3.4 Backdoor Command Execution

vsftpd version 2.3.4 contains a backdoor that opens a shell on TCP port 6200 after a specially crafted FTP USER command. This proof of concept triggers the backdoor and connects to the resulting shell. https://packetstorm.news/download/235094...

PT-2026-109487

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Feedzy Loop Block Feed URL / RSS in all versions up to, and including, 5.2.10 due to insufficient input sanitization and output...

Linux Distros Unpatched Vulnerability : CVE-2026-98379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ip6trpfilter: reject routes without inet6dev ip6routelookup can return an error-free route whose rt6iidev is NULL. Lowering an external nexthop...

PT-2026-109479

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'any attacker-chosen name matching the get.NAME placeholder PoC uses 'proof'' parameter in all versions up to, and including,...

PT-2026-109360

The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible fo...

PT-2026-109361

The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phone' parameter in all versions up to, and including, 3.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

PT-2026-109478

The Table Field Add-on for ACF and SCF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Field Value in all versions up to, and including, 1.4.1-RC2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

PT-2026-109475

The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.58 This is due to the implement user registration AJAX handler explicitly disabling Dokan's vendor-registration nonce check via add filter'dokan register nonce check', ' return...

PT-2026-109359

The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3. This is due to the add child function calling add role'academy student' on any existing account resolved from the...

PT-2026-109483

The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the 'first name' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the administrator's full...

PT-2026-109484

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'inputs array key' parameter in all versions up to, and including, 1.15.48 due to insufficient input sanitization and output escaping. This makes...

PT-2026-109488

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email Contact Email custom field htmlvar name' parameter in all versions up to, and including, 2.8.188 due to insufficient input sanitizatio...

PT-2026-109474

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 28.4 via the 'id, wp user id' parameter due to missing validation on a user controlled key. This makes it possible for...