what-you-reveal

╦ ╦╦ ╦╔═╗╔╦╗ ╦ ╦╔═╗╦ ╦ ╦═╗╔═╗╦ ╦╔═╗╔═╗╦ ║║║╠═╣╠═╣ ║ ╚╦╝║ ║║ ║ ╠╦╝║╣ ╚╗╔╝║╣ ╠═╣║ ╚╩╝╩ ╩╩ ╩ ╩ ╩ ╚═╝╚═╝ ╩╚═╚═╝ ╚╝ ╚═╝╩ ╩╩═╝ SYSTEM ANALYSIS TOOL // BROWSER FINGERPRINT DEMO What You Reveal is a privacy analysis tool designed to show exactly what information your browser exposes to websites. It...

I-See-You

I-See-You ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks. Note: This to...

even-you-brutus

Even You, Brutus? Even You, Brutus? is a simple proof of concept dictionary brute forcing tool targeting the MikroTik RouterOS 6.x web interface. RouterOS notiously lacks brute force protections on the web and winbox interfaces. They've largely coasted off their custom authentication/encryption...

Malware in do-wnload-available-61075-you-think-you-really-know-me-1-c368u-jspcon

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in file-alb-um-zip-new-mp3-32338-think-before-you-speak-9znpc-akvcbt

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in alb-um-availa-ble-zip-mp3-file-someone-to-drive-you-home-vbwzp-koufrz

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview file-alb-um-zip-new-mp3-32338-think-before-you-speak-9znpc-akvcbt is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connectio...

Malicious Package

Overview alb-um-availa-ble-zip-mp3-file-someone-to-drive-you-home-vbwzp-koufrz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

Malicious Package

Overview do-wnload-available-61075-you-think-you-really-know-me-1-c368u-jspcon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

CVE-2026-103071

Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Code Injection.This issue affects Thank You Page Customizer for WooCommerce: from n/a through 1.2.3...

CVE-2026-103071 WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Code Injection.This issue affects Thank You Page Customizer for WooCommerce: from n/a through 1.2.3...

EUVD-2026-96379

Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Code Injection.This issue affects Thank You Page Customizer for WooCommerce: from n/a through 1.2.3...

CVE-2026-103071

The VillaTheme Thank You Page Customizer for WooCommerce (woo-thank-you-page-customizer) plugin is vulnerable to an Improper Control of Generation of Code (Code Injection) vulnerability. This issue affects versions through 1.2.3 . An attacker could exploit this flaw to perform Code Injection , po...

CVE-2026-103071: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Code Injection.This issue affects Thank You Page Customizer for WooCommerce: from n/a through 1.2.3...

PT-2026-109697

Name of the Vulnerable Software and Affected Versions Thank You Page Customizer for WooCommerce versions prior to 1.2.4 Description Improper Control of Generation of Code allows Code Injection within the VillaTheme Thank You Page Customizer for WooCommerce plugin. Code Injection is a flaw that...

WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.3 - Content Injection vulnerability

Content Injection vulnerability discovered by cazy in WordPress Plugin Thank You Page Customizer for WooCommerce versions = 1.2.3...

WordPress Business Essentials for Contact Form 7 plugin <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Adrien Brunner in WordPress Plugin Contact Form 7 Redirect & Thank You Page versions = 1.2.1...

CVE-2026-4806

The Custom Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized access and loss of data due to a missing capability check on the saveoption function in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to to export or...

CVE-2026-4806 Custom Thank You Page for WooCommerce <= 1.1.2 - Missing Authorization to Unauthenticated Settings Export and Settings Reset

The Custom Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized access and loss of data due to a missing capability check on the saveoption function in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to to export or...

CVE-2026-4806

The Custom Thank You Page for WooCommerce plugin for WordPress is vulnerable in all versions up to and including 1.1.2 . The root cause is a missing capability check on the save_option() function, which allows unauthenticated attackers to perform unauthorized settings export or settings reset (de...