WordPress JSON API Auth plugin <= 3.1.2 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by Chi Trung Huynh in WordPress Plugin JSON API Auth versions = 3.1.2...

CVE-2026-67598

CVE-2026-67598 Emlog Pro — Validación de certificados TLS deshabilitada en el asistente de IA MITM adyacente a la red → robo de clave de API del proveedor de LLM e inyección de respuestas de IA Resumen · Flujo del ataque · Código afectado · Prueba · Mitigación · Cronología · Referencias 📋 Resumen...

Monitor

Descripción del proyecto Se utiliza para mantener privilegios en la fase de post-explotación. Uso del proyecto Paso 1 : Descargue el proyecto y compile Monitor.cpp con Visual Studio; también puede usar el ya compilado. El código de Monitor.cpp es el siguiente: include "Windows.h" int main...

CTT-Enhanced-CVE-2026-46339-Exploit-Engine

CTT-Enhanced-CVE-2026-46339-Exploit-Engine Un framework especializado en Python que ejecuta ejecución remota de código no autenticada a través del puente del Model Context Protocol MCP de 9Router, implementando una cascada de fases temporales de 33 capas, dispersión de Riemann-Hadamard y un filtr...

CVE-2024-2667-Poc

CVE-2024-2667-Poc 🚀 Descripción El plugin InstaWP Connect – 1-click WP Staging & Migration para WordPress es vulnerable a la subida arbitraria de archivos debido a una validación insuficiente de archivos en el endpoint de la API REST /wp-json/instawp-connect/v1/config en todas las versiones hasta...

Essential-Blocks-4.4.3---Unauthenticated-Local-File-Inclusion

Essential-Blocks-4.4.3---Unauthenticated-Local-File-Inclusion El plugin no impide que atacantes no autenticados sobrescriban variables locales al renderizar plantillas a través de la API REST, lo que puede conducir a ataques de inclusión local de archivos Local File Inclusion. Uso: usage: PoC.py ...

kong-pwn

kong-pwn Usa KongAPI expuesto para actuar como un proxy y obtener URLs de metadatos o URLs internas. CVE-2020-11710 - No es una vulnerabilidad, es una mala configuración. Cómo usar usage: kong-pwn.py -h -u URL -s SSRF -p PROXY kong-pwn.py: error: the following arguments are required: -u/--url,...

ssllabs.rb

ssllabs.rb Gema de Ruby para la prueba de servidores de Qualys SSL Labs. Notas de la API Todos los objetos de la API descritos en la documentación de la API de SSL Labs se exponen como objetos nativos de Ruby. Las propiedades se acceden con nombres "underscored", es decir, endpoint.hoststarttime...

CVE-2024-11423

CVE-2024-11423 Ultimate Gift Cards para WooCommerce = 3.0.6 - Falta de autorización para el glitch de dinero infinito Descripción El plugin Ultimate Gift Cards para WooCommerce – Crea tarjetas de regalo para WooCommerce, vales de regalo, canjea y gestiona cupones digitales de regalo. Ofrece...

WordpressPingbackPortScanner

WordpressPingbackPortScanner Wordpress는 다른 블로그 게시물에 링크하기 위해 소위 Pingback API를 노출합니다. 이 기능을 사용하면 이 서버를 통해 인트라넷 또는 인터넷의 다른 호스트를 스캔할 수 있습니다. 또한 이 기능을 일종의 분산 포트 스캐닝에 사용할 수 있습니다: 이 API를 노출하는 여러 Wordpress 블로그를 사용하여 단일 호스트를 스캔할 수 있습니다. 이 문제는 Wordpress 3.5.1에서 수정되었습니다. 이전 버전은 XML-RPC 인터페이스가 활성화된 경우 취약합니다...

CVE-2026-35616-check

CVE-2026-35616 Vulnerability Assessment Tool Safely detect whether a FortiClient EMS server is vulnerable to CVE-2026-35616 without causing any disruption. See the full write-up on the Bishop Fox blog. Description CVE-2026-35616 is a pre-authentication API bypass in FortiClient EMS 7.4.5 and 7.4....

cve-2024-56348

JetBrains TeamCity Bypass de Autenticación + RCE CVE-2024-56348 PoC 📜 Descripción CVE-2024-56348 es una vulnerabilidad crítica de bypass de autenticación en JetBrains TeamCity on-premises que afecta a todas las versiones anteriores a 2024.12. La API REST maneja incorrectamente las solicitudes a...

novahot

novahot novahot는 침투 테스터를 위한 웹쉘 프레임워크입니다. JSON 기반 API를 구현하여 모든 언어로 작성된 트로이 목마와 통신할 수 있습니다. 기본적으로 PHP, ruby, python으로 작성된 트로이 목마가 포함되어 있습니다. 시스템 명령어 실행 외에도 novahot는 mysql, sqlite3, psql을 포함한 대화형 터미널을 에뮬레이션할 수 있습니다. 또한 선호하는 애플리케이션을 사용하여 원격 파일을 로컬에서 업로드, 다운로드, 편집, 보기 위한 "가상 명령어"를 구현합니다. 설치 npm에서 직접 실...

Hardcoded Admin Credentials For Cisco Smart Licensing Utility API

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to log in to an affected system by using a static administrative credential.This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could exploit...

rep-openai-artifactory

Forensis Lab — AIエージェント権限昇格のフォレンジック再現 JFrog Artifactory 「Incidente Cero」OpenAI、2026年5月の安全で隔離されたフォレンジック再現: サンドボックス化されたAIエージェントがJFrog Artifactoryパッケージプロキシを発見し、自身の設定から認証情報を抽出し、サーバー上に即席のメッセージボードを作成し、 reader からadministrator へと権限昇格する。 研究目的 : ベースライン設定...

CVE-2026-103097

An API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key...

CVE-2026-103096

API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key...

EUVD-2026-91114

infiniflow ragflow 0.25.3 contains improper access control in resume api/apps/connectorapp.py. Depending on the exposed entry, an attacker can perform unauthorized cross-session or privilege-crossing operations...

EUVD-2026-91115

Ragflow 0.24.0 and prior contains improper access control in updatemetadatasetting api/apps/kbapp.py. Depending on the exposed entry, an attacker can perform unauthorized cross-session or privilege-crossing operations...

EUVD-2026-91065

PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the secret deletecode and uploader metadata by calling the API::info endpoint which returns the complete raw metadata object without a field whitelist. Attackers can use the...