CVE-2026-104028

The Anton Extensions WordPress plugin, in versions up to and including 1.2.2 , is vulnerable to an unauthenticated arbitrary file upload. The flaw exists because the plugin fails to perform capability checks , nonce verification , or file-type validation when writing attacker-supplied content to ...

Dagon

Dagon - Manipulación Avanzada de Hashes Llamado así por el príncipe del Infierno, Dagon day-gone es un sistema avanzado de cracking y manipulación de hashes, capaz de realizar fuerza bruta en múltiples tipos de hash, crear diccionarios de fuerza bruta, verificación automática de algoritmos de has...

poro

poro Descripción Escanea activos accesibles públicamente en tu entorno de AWS Servicios cubiertos por esta herramienta: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro también verifica si una etiqueta que especifiques está aplicada en los recursos públicos...

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

keimpx

Introducción keimpx es una herramienta de código abierto, publicada bajo la Licencia Apache 2.0. Se puede usar para verificar rápidamente credenciales válidas en una red a través de SMB. Las credenciales pueden ser: Combinación de usuario / contraseña en texto plano. Combinación de usuario / hash...

pulledpork

PulledPork Herramienta de gestión de reglas para Snort y Suricata desde Google code Encuéntranos en Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk y el equipo de PulledPork. ¡Gracias por elegir PulledPork! Este archivo proporciona una guía básica sobre el uso de...

cosign

cosign Firma di container OCI e altri artefatti utilizzando Sigstore! Cosign mira a rendere le firme infrastruttura invisibile. Cosign supporta: "Firma senza chiave" con l'autorità di certificazione Fulcio del bene pubblico Sigstore e il registro di trasparenza Rekor predefinito Firma hardware e...

PT-2026-110100

Name of the Vulnerable Software and Affected Versions InstantSoft icms2 versions prior to 2.18.2 Description An issue exists in the Billing Module within the validatePaypalOrder function located in the system/controllers/billing/actions/paypal.php file. A remote attacker can manipulate the bid/si...

CVE-2026-108699: Improper Verification of Cryptographic Signature

hyper-mcp through 0.8.3 contains an improper signature verification vulnerability that allows attackers to load malicious WebAssembly plugins because cosignverifyargs accepts any signer identity and OIDC issuer by default. Attackers controlling a plugin image reference can sign a malicious image...

PT-2026-110166

hyper-mcp through 0.8.3 contains a signature verification bypass vulnerability in load wasm in src/wasm/oci.rs that verifies the Cosign signature of a separately resolved tag rather than the loaded manifest. Attackers controlling registry responses for the tag can serve an unsigned malicious...

PT-2026-110167

🚨 CVE-2026-108699 hyper-mcp through 0.8.3 contains an improper signature verification vulnerability that allows attackers to load malicious WebAssembly plugins because cosign verify args accepts any signer identity and OIDC issuer by default. Attackers controlling a plugin image reference can sig...

CVE-2026-108698: Time-of-check Time-of-use (TOCTOU) Race Condition

hyper-mcp through 0.8.3 contains a signature verification bypass vulnerability in loadwasm in src/wasm/oci.rs that verifies the Cosign signature of a separately resolved tag rather than the loaded manifest. Attackers controlling registry responses for the tag can serve an unsigned malicious...

CVE-2026-108568: Insufficient Verification of Data Authenticity

A vulnerability was determined in InstantSoft icms2 up to 2.18.2. The affected element is the function validatePaypalOrder of the file system/controllers/billing/actions/paypal.php of the component Billing Module. Executing a manipulation of the argument bid/sig can lead to insufficient...

CVE-2026-106610

Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7...

EUVD-2026-96397

Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads allows Exploitation of Trusted Credentials.This issue affects Sell Downloads: from n/a through 1.2.3...

CVE-2026-106610 WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7...

EUVD-2026-96404

Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7...

CVE-2026-106610

The miniOrange OTP Verification WordPress plugin (versions

pocsploit

pocsploit 中文 README pocsploit è un framework di verifica POC open source, leggero, flessibile e innovativo Punti critici del framework POC sul mercato 1. Ci sono troppi parametri, non so da dove iniziare, ma solo alcuni sono comunemente usati. 2. Il framework POC YAML come nuclei e xray non è...

CVE-2026-94257

The SMS Alert WordPress plugin before 4.0.1 does not bind the account whose password is being changed to the phone number that was actually verified during its OTP password reset, allowing unauthenticated attackers to set a new password on an arbitrary account, including an administrator, by...