WordPress Workeera plugin < 1.0.6 - Subscriber+ Arbitrary File Upload vulnerability

Subscriber+ Arbitrary File Upload vulnerability discovered by Erwan LR WPScan in WordPress Plugin Workeera versions 1.0.6...

WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin WpEvently versions = 5.5.0...

CVE-2026-81761

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

CVE-2026-81759

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin WpEvently versions = 5.5.0...

CVE-2026-81299

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

WordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Md Mehedi Hasan in WordPress Plugin WP Job Portal versions = 2.5.9...

WordPress RestrictMate plugin < 1.3.0 - Unauthenticated Privilege Escalation to Administrator vulnerability

Unauthenticated Privilege Escalation to Administrator vulnerability discovered by João Ramos Maciel in WordPress Plugin RestrictMate versions 1.3.0...

CVE-2018-7600-Drupalgeddon2-RCE

CVE-2018-7600 Drupalgeddon2 — 红队项目 ITSOLERA 网络安全部门 | 攻防安全实习 2026 概述 本项目研究、复现并记录了 CVE-2018-7600 Drupalgeddon2 —— Drupal CMS 中的一个严重（CVSS 9.8）未认证远程代码执行漏洞， 影响 7.58 和 8.5.1（2018 年 3 月发布）之前的版本。 该漏洞存在于 Drupal 的 Form API 中，它在将用户提供的输入合并到表单元素渲染属性之前未能对其进行清理——从而允许攻击者注入 PHP 可调用对象，Render API 随后会执行这些对象。 ⚠️...

WordPress WPCargo Track & Trace plugin < 8.0.4 - Unauthenticated SQL Injection via wpcargo_tracking_number vulnerability

Unauthenticated SQL Injection via wpcargotrackingnumber vulnerability discovered by Shivamani Vastrala in WordPress Plugin WPCargo Track & Trace versions 8.0.4...

CVE-2026-21007-GPU-Driver-ioctl-Race-Condition-Kernel-Memory-Mapping-

CVE-2026-21007 – GPU 驱动 ioctl 竞态条件（内核内存映射） 程序代码（C 模拟） root@kitploit: // gpudriversim.c - Simulated GPU driver ioctl with race condition include include include include void gpummap = NULL; sizet mapsize = 0; int locked = 0; void ioctlmapsizet size // Allocate GPU memory and map to user gpummap =...

CVE-2026-33017-Langflop

CVE-2026-33017 Langflow "Langflop" 未认证 RCE PoC 该 PoC 针对 Langflow 中未认证的 buildpublictmp 代码执行漏洞。它通过向公共流程上传恶意组件，触发构建，并捕获反弹 shell。 仅限授权安全测试。 只对您拥有或获得明确测试许可的系统使用。 环境要求 Python 3 requests pip install requests 使用方法 运行内置监听器并一次性触发漏洞利用： root@kitploit: python3 poc.py \ --url https://target:7860 \ --flow-id ...

CVE-2026-19023

A flaw was found in HDF5. The h5dump tool, used for dumping HDF5 file contents, is vulnerable to an untrusted pointer dereference. An attacker could craft a malicious HDF5 file containing a variable-length string dataset. When this file is processed in binary output mode, it can lead to a denial ...

ForgottenButNotGone

被遗忘但并未消失 本仓库包含在 Black Hat USA 2026 和 DEF CON 34 演讲“被遗忘但并未消失：遗留 Linux 服务中的未认证 RCE 与 LPE”中所述漏洞的概念验证脚本。 CVE-2026-28372 TelnetD 中的本地权限提升：无特权攻击者可利用 TelnetD 的环境变量功能为其授予 root 权限的 shell。按照设计和 RFC，Telnet 协议允许其客户端为 shell 会话设置环境变量。该功能从安全角度来看设计得很差。该服务允许未认证客户端为 telnetd 进程本身及其所有子进程设置环境变量。其子进程之一是...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerabilities in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel allow a hacker to cause a service failure.

The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems allows a hacker to cause a service failure.

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the lack of a mechanism for verifying input data during backup scenarios. This allows a malicious actor to execute arbitrary code with SYSTEM privileges.

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...