WordPress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration vulnerability

Missing Authorization to Authenticated Subscriber+ Email Address Enumeration vulnerability discovered by Kuba in WordPress Plugin LearnPress versions = 4.4.10...

EUVD-2026-103255

The PeachPay — Payments & Express Checkout for WooCommerce supports Stripe, PayPal, Square, Authorize.net, NMI WordPress plugin before 1.120.70 does not perform any capability or ownership check before returning an order's secret key in response to an unauthenticated request, allowing anyone to...

CVE-2026-107744 LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX Action

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible...

CVE-2026-107744

The LearnPress – WordPress LMS Plugin is vulnerable to an authorization bypass in all versions up to and including 4.4.10 . The flaw occurs because the plugin fails to properly verify user permissions during the 'search-authors' AJAX action . This allows authenticated attackers with subscriber-le...

Information Disclosure

The vulnerability of the kernel in operating systems such as macOS, iOS, iPadOS, tvOS, watchOS, and visionOS is related to a kernel address leakage. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s security measures...

abdal-anydesk-remote-ip-detector

AnyDesk IP Leak Vulnerability CVE-2024-52940 🎤 README Translation English Deutsch فارسی 📸 Screenshot 🎥 Proof of Concept Videos To see the AnyDesk IP Leak Vulnerability in action, you can download the PoC demonstration videos below: 📥 Download Proof 01 📥 Download Proof 02 Recommended - 📥 Download...

kyocera-cve-2022-1026

kyocera-cve-2022-1026 An unauthenticated data extraction vulnerability in Kyocera printers, which allows for recovery of cleartext address book and domain joined passwords. Vulnerability Overview Back in 2021 while on a pen test, I was tinkering with Kyocera's thick client application used to...

cve-2022-4543-wrapper

cve-2022-4543-wrapper Introduction This is a wrapper of willsroot's CVE-2022-4543 exploit to help you judge and get kernel base address. How to use Compile Base on your demandOptional: gcc dekaslr.c --static -o dekaslr g++ main.cpp --static -o main For some OS, install static libc first. De-KASLR...

Driver-HideKernelThread-IoCancelIrp

Driver-HideKernelThread-IoCancelIrp not my code. only for saving https://bbs.pediy.com/thread-272795.htm Principle Set the thread entry address to IoCancelIrp and the context to the irp you created. Then the thread will call IoCancelIrp. when called, will perform the operation of canlcelling the...

reconspider

Most Advanced Open Source Intelligence OSINT Framework ReconSpider ReconSpider is most Advanced Open Source Intelligence OSINT Framework for scanning IP Address, Emails, Websites, Organizations and find out information from different sources. ReconSpider can be used by Infosec Researchers,...

CVE-2026-67411

A flaw was found in rabbitmq-server. When native Message Queuing Telemetry Transport MQTT or MQTT over WebSockets operates behind a trusted proxy utilizing the PROXY protocol, the broker may drop the client IP address before enforcing user restriction checks. This failure causes external...

copy-as-yara

Copy as YARA Author: alden Copy disassembly nicely formatted for YARA rules. Description: This is a really simple plugin that allows you to copy disassembly in a way that can be used in YARA rules. You have the option to either copy the assembly code as it is or use address wildcarding to create...

EATGuard

EATGuard Implementation of an export address table protection mitigation, like Export Address Filtering EAF How It Works This project is composed of three binaries that, when compiled, can be found in EATGuard\bin. They are: 1. EATGuardApplication.exe - "Malicious" application that loads...

SysWhispers2

SysWhispers2 SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls. All core syscalls are supported and example generated files available in the example-output/ folder. Difference Between SysWhispers 1 and 2 The usage is almost identical to...

Vol3xp

Vol3xp, Volatility 3 Explorer Plugins WinObj - Windows Kernel Objects Explorer an improve of https://github.com/kslgroup/WinObj for volatility 3 winobj.py WinObj very similar to WinObj sysinternals Also supports Struct Analyzer and WinObjGui from VolExp. RAMMap - Physical Address Mapping pfn.py...

EUVD-2026-41876

swoosh has email-derived URL path injection in Microsoft Graph endpoint...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

skitter-creek-bath-salts

skitter-creek-bath-salts Unlockingeverything on the CPU with DRAM scrambling — PSP, C6, microcode, SMM, and anything else the specs left out. &x == &x. Usually. Poke the DRAM controller and an address can be made to land wherever you want in memory. skitter-creek-bath-salts modifies the bottom...

dirty_sock

dirtysock: Linux Privilege Escalation via snapd In January 2019, current versions of Ubuntu Linux were found to be vulnerable to local privilege escalation due to a bug in the snapd API. This repository contains the original exploit POC, which is being made available for research and education. F...

CVE-2026-107929

A flaw was found in curl. When connection pooling is used with forced local interface binding options, curl fails to include the source interface configuration in its connection reuse cache. An attacker able to initiate network requests in an application using pooled connections can cause...