253844 matches found
teatime
Teatime - Un Framework d'Attaque RPC pour Blockchain .. image:: https://img.shields.io/pypi/v/teatime.svg :target: https://pypi.python.org/pypi/teatime .. image:: https://img.shields.io/travis/dmuhs/teatime.svg :target: https://travis-ci.com/dmuhs/teatime .. image::...
WordPress WPC Estimated Delivery Date for WooCommerce plugin <= 4.0.1 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os in WordPress Plugin WPC Estimated Delivery Date for WooCommerce versions = 4.0.1...
CVE-2014-125130
The CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress affects versions through 1.0.11 . It contains an unauthenticated arbitrary file read vulnerability caused by a path-traversal flaw in the file parameter of direct_download.php. Remote attackers can exploit this to ...
CVE-2026-19856
The All in One SEO WordPress plugin versions prior to 5.0.2.1 contains a vulnerability where it fails to correctly identify which shortcodes are present in content derived from user input before stripping them. This flaw allows unauthenticated users to execute arbitrary shortcodes registered on t...
EUVD-2026-91769
The All in One SEO WordPress plugin before 5.0.2.1 does not correctly determine which shortcodes are present in content derived from user input before deciding which ones to strip, allowing unauthenticated users to execute arbitrary shortcodes registered on the site. On sites upgraded from older...
CVE-2023-4596
CVE-2023-4596 PoC Script for CVE-2023-4596, unauthenticated Remote Command Execution through arbitrary file uploads. Video of PoC being used Nuclei Template News article WordFence NVD Nist Summary A critical vulnerability has been discovered in the WordPress plugin Forminator, which enables an...
WonderCMS-CVE-2020-35314
CVE-2020-35314 - Authenticated Remote Code Execution in WonderCMS 3.1.3 This repository was created with the goal of testing Remote Code Execution vulnerability on WonderCMS v3.1.3. This fake plugin includes a backdoor php shell, which is located in the file evil.php. It is recommended avoid usin...
CVE-2026-104854
Nx is a monorepo solution for TypeScript and polyglot codebases. From 14.6.0 until 22.7.9 and 23.1.2, Nx creates Unix domain sockets for its daemon and isolated plugin workers in shared temporary locations without owner-only directory and socket permissions. Another unprivileged local account on ...
dsync
dsync Плагин IDAPython, синхронизирующий представления декомпилированного и дизассемблированного кода. Подробнее см. комментарии в исходном коде. Требуется IDA Pro 7.3 Примечание: Возможно, стоит воспользоваться официальной функцией синхронизации, представленной в IDA 7.3...
CVE-2026-77771
CVE-2026-77771 — miniOrange 2FA Free & Pro: 2FA Bypass via Session-Scoped OTP Lockout An authentication bypass in the miniOrange Two-Factor Authentication plugin for WordPress allows an attacker who already holds a victim's valid password to brute-force the second factor without limit, defeating...
CVE-2026-104854 Nx daemon and plugin worker sockets are accessible to other local users
Nx is a monorepo solution for TypeScript and polyglot codebases. From 14.6.0 until 22.7.9 and 23.1.2, Nx creates Unix domain sockets for its daemon and isolated plugin workers in shared temporary locations without owner-only directory and socket permissions. Another unprivileged local account on ...
CVE-2023-4634
CVE-2023-4634 RCE Exploit for Wordpress Plugin Media-Library Plugin 3.10 CVE-2023-4634 Info Patrowl discovered An unauthenticated RCE Vulnerability on Media-Librairy-Assistant Wordpress Plugin in version 3.10. The exploit is not trivial and requires just a little setup explained bellow. Global...
CVE-2026-65540
CVE-2026-65540 Popup for CF7 with Sweet Alert Hello document.getElementById'csrf'.submit; 2. Log in to WordPress as an administrator 3. Visit the malicious page 4. Optional Navigate to http://TARGET/wp-admin/admin.php?page=cf7-simplepopup — confirm the Width field now contains...
WordPress WebSamurai plugin <= 1.0.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WebSamurai versions = 1.0.7...
WordPress Smart One Click Setup – Complete Demo Import & Export plugin <= 1.4.3 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Smart One Click Setup – Complete Demo Import & Export versions = 1.4.3...
CVE-2025-13486
Mass Exploit CVE-2025-13486 Advanced Custom Fields: Extended 0.9.0.5 - 0.9.1.1 - Unauthenticated Remote Code Execution in prepareform ⚠️ Vulnerability Details The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Remote Code Execution in versions 0.9.0.5 through 0.9.1.1 via th...
community-id-spec
Хеширование потоков Community ID При обработке данных о потоках из различных приложений мониторинга таких как Zeek и Suricata часто бывает желательно быстро переключаться с одного набора данных на другой. Хотя необходимая информация о кортеже потока обычно присутствует в наборах данных, детали...
WordPress CMP – Coming Soon & Maintenance plugin < 4.1.20 - Unauthenticated Maintenance Mode Bypass vulnerability
Unauthenticated Maintenance Mode Bypass vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin CMP – Coming Soon & Maintenance versions 4.1.20...
CVE-2026-3844
╔════════════════════════════════════════════════════════════╗ ║ CVE-2026-3844 ║ ║ Breeze Cache = 2.4.4 Arbitrary File Upload ║ ║ Unauthenticated RCE | Authorized Lab Use Only ║ ╚════════════════════════════════════════════════════════════╝ Overview CVE-2026-3844 is an arbitrary file upload...
CVE-2024-37051
CVE-2024-37051 Analysis Overview CVE-2024-37051 is a vulnerability found in JetBrains' IntelliJ-based IDEs, affecting the GitHub plugin. It allows unauthorized exposure of GitHub access tokens when a malicious pull request PR is loaded. Technical Details The vulnerability occurs during the...