CVE-2024-5326-Poc

CVE-2024-5326 CVE-2024-5326 إضافة Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX في ووردبريس = 4.1.2 - نقص التفويض لتحديث الخيارات التعسفية وصف إضافة Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX لووردبريس معرضة لتعديل غير مصرح به للبيانات بسبب نقص فحص الإمكانية في...

grafana: grafana: Dashboard modification lockout via forged file-provisioning metadata

A flaw was found in Grafana. An authenticated user with Editor permissions can set file-provisioning metadata when creating a dashboard through the dashboard API due to a missing authorization check. Consequently, the dashboard is treated as externally managed by configuration files, preventing...

CVE-2026-23111

CVE-2026-23111 PoC Linux Kernel nftables Use-After-Free Local Privilege Escalation poc by baba01hacker भेद्यता सारांश CVE : CVE-2026-23111 प्रकार : Use-After-Free CWE-416 CVSS : 7.8 HIGH घटक : net/netfilter/nftablesapi.c — nftmapcatchallactivate मूल कारण : उल्टी genmask जाँच लेन-देन रद्द होने के...

CVE_2024_1086_vulnerability_check

لا يحتوي هذا المستودع على ملف README...

CVE-2023-43208

CVE-2023-43208 Mirth Connect RCE PoC نص بايثون لإثبات المفهوم يستهدف CVE-2023-43208 في Mirth Connect. إخلاء مسؤولية استخدم فقط في بيئات تملكها أو مخول صراحةً لاختبارها. هذا المستودع مخصص لأغراض البحث الأمني والتحقق والاختبار الدفاعي. لا يتحمل المؤلف أي مسؤولية عن أي استخدام خاطئ أو ضرر ناتج عن هذ...

CVE-2026-105688

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, create-team-invitations and the invitation acceptance path allow a non-owner team administrator to assign the owner role because invitation roles are persisted and applied without the role-ceiling check used by...

CVE-2026-100506

Deserialization of Untrusted Data vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Object Injection.This issue affects WP Spell Check: from n/a through 12.1...

CVE-2024-7135

CVE-2024-7135 إن إضافة Tainacan لـ WordPress معرضة للوصول غير المصرح به إلى البيانات بسبب عدم وجود فحص للصلاحية في الدالة 'getfile' في جميع الإصدارات حتى 0.21.7 وما يشملها. كما أن الدالة معرضة أيضًا لثغرة اجتياز الدليل directory traversal. وهذا يتيح للمهاجمين المصادق عليهم، من مستوى Subscriber فم...

CVE-2026-58865

In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-100506

The WP Spell Check WordPress plugin (versions

CVE-2026-100506 WordPress WP Spell Check plugin <= 12.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Object Injection.This issue affects WP Spell Check: from n/a through 12.1...

CVE-2026-100506 WordPress WP Spell Check plugin <= 12.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Object Injection.This issue affects WP Spell Check: from n/a through 12.1...

EUVD-2026-92752

Deserialization of Untrusted Data vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Object Injection.This issue affects WP Spell Check: from n/a through 12.1...

CVE-2021-24155.rb

WordPress-Backup-RCE تتيح وحدة Metasploit هذه لمهاجم يمتلك حساب ووردبريس متميز إطلاق شل عكسية نتيجة لثغرة رفع ملف تعسفي في إضافة Backup Guard الإصدارات قبل 1.6.0. وذلك بسبب التحقق غير الصحيح من امتداد الملف المرفوع الذي يفترض أن يكون من نوع SGBP. يمكن تشغيل الحمولة المرفوعة بعد ذلك عبر استدعاء...

CVE-2026-58865

In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-92618

In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58865

In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58865

A vulnerability exists in multiple functions of PduParser.java due to a missing bounds check . This flaw can lead to a persistent denial of service (DoS) or a remote denial of service without requiring additional execution privileges or user interaction. No specific exploitation details are provi...

CVE-2026-58815

The provided documents identify an out of bounds write vulnerability in multiple locations caused by an incorrect bounds check . This flaw could lead to local escalation of privilege without requiring additional execution privileges or user interaction. While the specific affected software or har...

CVE-2026-58815

In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...