basketcraft

basketcraft este es un script que explota la vulnerabilidad CVE-2023-27163, que es un SSRF en request-baskets versión 1.2.1 SSRF en Request-Baskets CVE-2023–27163 CVE-2023–27163 representa una vulnerabilidad crítica de falsificación de solicitudes del lado del servidor Server-Side Request Forgery...

CVE-2024-47533-PoC

CVE-2024-47533 – Omisión de Autenticación en XMLRPC de Cobbler → Reverse Shell RCE sin Autenticación 📌 Resumen Este repositorio contiene un Exploit de Prueba de Concepto PoC para CVE-2024-47533 , una omisión crítica de autenticación en la API XMLRPC de Cobbler que conduce a ejecución remota de...

CVE-2024-46635

CVE-2024-46635 Antecedentes El sistema GongZhiDao es una plataforma desarrollada por GongZhiDao. Proporciona soluciones empresariales que incluyen gestión de usuarios, análisis de datos y funcionalidades operativas. Sin embargo, se descubrió una vulnerabilidad de seguridad en uno de los endpoints...

CVE-2021-26814

CVE-2021-26814 Un PoC simple en Python para explotar CVE-2021-26814 y obtener RCE en Wazuh Manager v.4.0.0-4.0.3 a través del servicio API. Para ejecutarlo, simplemente haga el script .py ejecutable y ejecútelo con los parámetros requeridos. PoC.py -h -user USERNAME -pwd PASSWORD -lip SRCIP -lpor...

CVE-2024-2782-PoC

CVE-2024-2782-PoC Prueba de concepto de CVE-2024-2782 El complemento Contact Form Plugin by Fluent Forms para Quiz, Survey y Drag & Drop WP Form Builder para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta de verificación de capacidad en el endpoint de la API...

CVE-2024-2771-PoC

CVE-2024-2771-PoC CVE-2024-2771 Prueba de concepto El plugin Contact Form by Fluent Forms para Quiz, Survey y Drag & Drop WP Form Builder para WordPress es vulnerable a la escalada de privilegios debido a la falta de una comprobación de capacidades en el endpoint de la API REST...

CVE-2023-50780

CVE-2023-50780: MBeans peligrosos accesibles a través de la API de Jolokia en Apache ActiveMQ Artemis Al listar e inspeccionar los MBeans expuestos por la API de Jolokia en http://127.0.0.1:8161/console/jolokia se han identificado los siguientes vectores de ataque: Escritura arbitraria de archivo...

CVE-2021-30862

CVE-2021-30862 In 2021, CodeColorist released his writeups on the Mistuned vulnerabilities, a series of vulnerabilities affecting the iTunes Store allowing for one-click remote code execution. Notably, he demonstrated popping calc with no memory corruption at all, but with just a logic bug. Durin...

-CVE-2024-45352

🚨 CVE-2024-45352 – Ejecución Remota de Código RCE en Xiaomi Smarthome 📌 Resumen Se descubrió una vulnerabilidad crítica CVE-2024-45352 en la aplicación Xiaomi Smarthome, que permite la ejecución remota de código RCE sin autenticación mediante un manejo inadecuado de la entrada en el analizador de...

Exploit for Interpretation Conflict in Wordpress

WP2Shell — Unauthenticated SQL Injection Proof of Concept C...

CVE-2026-100869

Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment request actions in the Shop API endpoint, allowing customers to trigger refunds on completed orders. Attackers with order tokens can submit arbitrary payment actions like refunds that payment gateways execute while Sylius maintains...

CVE-2026-100871

Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 fail to include firewall identification in JWT tokens issued by separate Admin and Shop API endpoints. Attackers can register a shop customer account using an administrator's email address and obtain a token that the Admin API...

CVE-2026-100871 Sylius before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 JWT Audience Confusion Allows Admin API Authentication

Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 fail to include firewall identification in JWT tokens issued by separate Admin and Shop API endpoints. Attackers can register a shop customer account using an administrator's email address and obtain a token that the Admin API...

CVE-2026-100871

Sylius versions before 1.12.25 , 1.13.17 , 1.14.20 , 2.1.16 , and 2.2.9 are vulnerable to a JWT audience confusion flaw. The application fails to include firewall identification in JWT tokens issued by the Admin and Shop API endpoints. An attacker can register a shop customer account using an adm...

EUVD-2026-87943

Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 fail to include firewall identification in JWT tokens issued by separate Admin and Shop API endpoints. Attackers can register a shop customer account using an administrator's email address and obtain a token that the Admin API...

CVE-2026-100871 Sylius before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 JWT Audience Confusion Allows Admin API Authentication

Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 fail to include firewall identification in JWT tokens issued by separate Admin and Shop API endpoints. Attackers can register a shop customer account using an administrator's email address and obtain a token that the Admin API...

CVE-2026-100869

Sylius versions before 2.1.16 and 2.2.9 are vulnerable to an arbitrary payment action flaw in the Shop API endpoint . The root cause is a failure to restrict payment request actions, which allows customers possessing order tokens to trigger unauthorized actions, such as refunds , on completed ord...

CVE-2026-100869 Sylius 2.x before 2.1.16 and 2.2.9 Arbitrary Payment Action via Shop API

Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment request actions in the Shop API endpoint, allowing customers to trigger refunds on completed orders. Attackers with order tokens can submit arbitrary payment actions like refunds that payment gateways execute while Sylius maintains...

CVE-2026-100869 Sylius 2.x before 2.1.16 and 2.2.9 Arbitrary Payment Action via Shop API

Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment request actions in the Shop API endpoint, allowing customers to trigger refunds on completed orders. Attackers with order tokens can submit arbitrary payment actions like refunds that payment gateways execute while Sylius maintains...

EUVD-2026-87941

Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment request actions in the Shop API endpoint, allowing customers to trigger refunds on completed orders. Attackers with order tokens can submit arbitrary payment actions like refunds that payment gateways execute while Sylius maintains...