Exploit for CVE-2026-101767

CVE-2026-101767 — Oracle E-Business Suite TCF SQL Injection...

Exploit for CVE-2026-100105

CVE-2026-100105 — Grafana Alerting Contact Point Authorization...

DOMPurify

DOMPurify DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's also very simple to use and get started with. DOMPurify was started in February 2014 and, meanwhile, has reached version v3.4.17. DOMPurify runs as JavaScript and works in all modern browsers...

CVE-2026-120070

The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.3.13 via the postcontent parameter of the submitpost function. The...

CVE-2026-111592

The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name maps to displayname' parameter in all versions up to, and including, 4.17.0 due to insufficient input sanitization and outp...

EUVD-2026-114657

The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.3.13 via the postcontent parameter of the submitpost function. The...

CVE-2026-120070 User Frontend <= 4.3.13 - Authenticated (Subscriber+) Privilege Escalation via post_content Parameter

The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.3.13 via the postcontent parameter of the submitpost function. The...

CVE-2026-120070

The User Frontend WordPress plugin (versions up to and including 4.3.13 ) is vulnerable to Privilege Escalation via the post_content parameter of the submit_post() function. The flaw arises because the security blocklist checks a sanitize_textarea_field() copy of the content, while the version ac...

EUVD-2026-114646

The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name maps to displayname' parameter in all versions up to, and including, 4.17.0 due to insufficient input sanitization and outp...

CVE-2026-111592 Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.17.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via display_name profile-sync into author term name

The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name maps to displayname' parameter in all versions up to, and including, 4.17.0 due to insufficient input sanitization and outp...

CVE-2026-111592

The PublishPress Authors plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 4.17.0 . The flaw exists in the Co-Authors, Multiple Authors, and Guest Authors components due to insufficient input sanitization and output escaping of the 'name (...

Exploit for CVE-2026-116244

CVE-2026-116244 — pgAdmin 4 service-account Kerberos credentia...

CVE-2026-119980

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerable to unauthorized account access via Use of Predictable Password in all versions up to, and including, 1.2.78 The vulnerability exists because getdummyuserpassowrd derives the...

NetAlertX

NetAlertX - Network Visibility & Asset Intelligence Framework !mainmain 📷 Click for more screenshots !Main screenmain| !devicedetails 1devicedetails| !Screen networknetwork ---|---|--- !presencepresence| !maintenancemaintenance| !settingssettings !synchubsynchub| !report1report1|...

opennhp

Make the Internet Invisible to Attackers OpenNHP hides your servers, ports, and domains from the public internet. Nothing answers until a client proves who it is with a single encrypted packet, so scanners, bots, and AI-driven attackers find nothing to attack. OpenNHP is a lightweight,...

INE-Web-Application-Penetration-Testing-CTF-1

INE – Web Application Penetration Testing CTF 1 Overview...

Nmap-API

Nmap API Uses python3.10, Debian, python-Nmap, and flask framework to create an Nmap API that can do scans with a good speed online and is easy to deploy. This is an implementation for our college PCL project which is still under development and constantly updating. API Reference Get all items GE...

CVE-2026-119980

The UsersWP plugin for WordPress (versions up to and including 1.2.78 ) is vulnerable to unauthorized account access due to the use of predictable passwords. The get_dummy_user_passowrd() function derives a shared password for 25 built-in dummy accounts from a hash that is simultaneously leaked i...

CVE-2026-119980 UsersWP <= 1.2.78 - Unauthenticated Account Access via Predictable Dummy User Password Disclosed through Registration Form Hash

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerable to unauthorized account access via Use of Predictable Password in all versions up to, and including, 1.2.78 The vulnerability exists because getdummyuserpassowrd derives the...

EUVD-2026-114605

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerable to unauthorized account access via Use of Predictable Password in all versions up to, and including, 1.2.78 The vulnerability exists because getdummyuserpassowrd derives the...