raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

wpscvn

wpscvn es una herramienta para pentesters y propietarios de sitios web para probar si sus sitios tienen algunos plugins o temas vulnerables. El autor no se hace responsable del mal uso de esta herramienta, recuerda que atacar objetivos sin consentimiento previo es ilegal y castigado por la ley...

ShunyaNet-Sentinel

ShunyaNet Sentinel ACTUALIZADO: 03/02/2026 ShunyaNet Sentinel es un programa ligero con temática cyberpunk que ingiere fuentes RSS por ejemplo, noticias de última hora, redes sociales, las envía a un LLM para su análisis y entrega alertas e informes resumidos directamente a la interfaz gráfica y ...

CVE-2025-5394

CVE-2025-5394 CVE‑2025‑5394 Tema WP Alone ≤ 7.8.3...

CVE-2026-103389

MISP versions prior to 2.5.48 are vulnerable to a stored cross-site scripting (XSS) vulnerability in the galaxy icon handling path. The root cause is the lack of server-side validation on the icon field of a galaxy object during add, edit, and sync/import capture operations. The D3-based correlat...

CVE-2026-27085

Shop manager Content Injection in Astra WordPress Theme = 4.13.12 versions...

CVE-2026-27085 WordPress Astra WordPress theme theme <= 4.13.12 - Content Injection vulnerability

Shop manager Content Injection in Astra WordPress Theme = 4.13.12 versions...

CVE-2026-27085

The Astra WordPress Theme versions

CVE-2026-27085 WordPress Astra WordPress theme theme <= 4.13.12 - Content Injection vulnerability

Shop manager Content Injection in Astra WordPress Theme = 4.13.12 versions...

EUVD-2026-89815

Shop manager Content Injection in Astra WordPress Theme = 4.13.12 versions...

CVE-2023-41425-RCE-WonderCMS-4.3.2

🚨 Herramienta de Explotación RCE de WonderCMS CVE-2023-41425 Esta herramienta ofensiva de seguridad basada en Python automatiza la explotación de una vulnerabilidad de Ejecución Remota de Código RCE en WonderCMS 4.3.2 , específicamente CVE-2023-41425. Simplifica el proceso de crear un módulo de...

WordPress-XStore-theme-SQL-Injection

WordPress-XStore-tema-SQL-Injection CVE-2024-33559 XStore tema-SQL Injection CVE-2024-33551 es una vulnerabilidad de inyección SQL encontrada en 8theme XStore, una plataforma de comercio electrónico construida sobre WordPress. Esta vulnerabilidad permite a los atacantes ejecutar comandos SQL...

WordPress Astra WordPress theme theme <= 4.13.12 - Content Injection vulnerability

Content Injection vulnerability discovered by savphill in WordPress Theme Astra WordPress Theme versions = 4.13.12...

ngrev

ngrev Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run you...

CVE-2026-88797

The Vayu X WordPress theme before 1.0.6 does not perform any capability check on one of its AJAX actions and exposes the nonce guarding it to every logged-in user, allowing any authenticated user, such as a subscriber, to install and activate any hosted on the WordPress.org repository...

CVE-2026-75873

The Zella Theme WordPress theme before 2.6.3 does not perform any capability or nonce check on one of its font upload actions, which is available to unauthenticated users, allowing them to upload arbitrary files, including PHP ones, and achieve remote code execution...

CVE-2026-88797

The Vayu X WordPress theme (versions prior to 1.0.6 ) is vulnerable to unauthorized plugin manipulation. The flaw exists because the theme fails to perform a capability check on a specific AJAX action and exposes the required nonce to all logged-in users. Consequently, any authenticated user, suc...

CVE-2026-88797 Vayu X < 1.0.6 - Subscriber+ Arbitrary WordPress.org Plugin Installation and Activation

The Vayu X WordPress theme before 1.0.6 does not perform any capability check on one of its AJAX actions and exposes the nonce guarding it to every logged-in user, allowing any authenticated user, such as a subscriber, to install and activate any hosted on the WordPress.org repository...

CVE-2026-88797 Vayu X < 1.0.6 - Subscriber+ Arbitrary WordPress.org Plugin Installation and Activation

The Vayu X WordPress theme before 1.0.6 does not perform any capability check on one of its AJAX actions and exposes the nonce guarding it to every logged-in user, allowing any authenticated user, such as a subscriber, to install and activate any hosted on the WordPress.org repository...

EUVD-2026-89614

The Vayu X WordPress theme before 1.0.6 does not perform any capability check on one of its AJAX actions and exposes the nonce guarding it to every logged-in user, allowing any authenticated user, such as a subscriber, to install and activate any hosted on the WordPress.org repository...