260599 matches found
CVE-2024-49607
CVE-2024-49607 WP Dropbox Dropins = 1.0 - Unauthenticated Arbitrary File Upload Description: The WP Dropbox Dropins plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.0. This makes it possible for unauthenticated attackers to upload arbitrary file...
CVE-2021-43798
CVE-2021-43798 CVE-2021-43798 es una vulnerabilidad de path traversal de alta gravedad puntuación CVSS 3.1: 7.5 que afecta a Grafana versiones 8.0.0-beta1 hasta 8.3.0. Permite a atacantes no autenticados leer archivos arbitrarios del servidor explotando una sanitización incorrecta en el endpoint...
CVE-2025-68055-poc
CVE-2025-68055 Authenticated SQL injection in Hydra Booking Plugin get function, Hydra Booking hardcodes user input directly into the raw sql request instead of using prepare to sanitize input, leading to Time-Based Blind SQL injection. Exploit A simple run command as such will tell you whether o...
CVE-2026-13610
CVE-2026-13610 KiviCare – Clinic & Patient Management System CWE-269 Improper Privilege Management | Unauthenticated registration with attacker-chosen staff role → patient PHI disclosure Overview Critical vulnerability in the KiviCare – Clinic & Patient Management System WordPress plugin versions...
CVE-2018-6574-go-get-RCE
CVE-2018-6574-Solution gcc -shared -o attack.so -fPIC attack.c...
CVE-2025-5287
CVE-2025-5287 Likes and Dislikes Plugin = 1.0.0 - Unauthenticated SQL Injection Description The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied...
EFISwissKnife
. //| | | | | | | \ | \ | | / / / || / / . . . / / || | |/ | | |/ \ / / / |/ /// | || | /|| | / / / / / / EFI Swiss Knife Un plugin de IDA para mejorar la ingeniería inversa de UEFI Copyright C 2016, 2017 Pedro Vilaça fG! - [email protected] - https://reverse.put.as Este es un plugin de IDA...
efiSeek
efiSeek para Ghidra Acerca de El analizador automatiza el proceso de investigación de archivos EFI, ayuda a descubrir y analizar protocolos conocidos, manejadores de SMI, etc. Características Encuentra GUID de EFI conocidos Identifica protocolos localizados con la función LOCATEPROTOCOL Identific...
ida-efiutils
EFI scripts for IDA Pro Some IDA scripts to assist with reverse engineering EFI executables. This package contains the following files: 1. efiutils.py - IDAPython module with some helper functions 2. efiguids.py - A collection of known GUIDs for EFI protocols 3. efiguidsami.py - A collection of...
ida-efitools2
Acerca de Es un plugin de IDA para ampliar las capacidades de ingeniería inversa de UEFI. Basado en ida-efitools con un montón de correcciones y nuevas funciones. Funciona tanto con Python 2 como con Python 3. Soporta versiones obsoletas de IDA Pro 7.x sin garantías. Características Definición de...
ida-efitools2
About It is an IDA plugin for extending UEFI reverse engineering capabilities. Based on ida-efitools with a bunch of fixes and new features. Works with both Python 2 and Python 3. Supports outdated versions of IDA Pro 7.x with no guarantees. Features GUIDs defining Structures propagating register...
wp-ulike-cve-2025-32259-poc
WP ULike ≤ 4.7.9.1 - Unauthenticated Content Spoof CVE-2025-32259 🔬 A simple PoC demonstrating CVE-2025-32259 in the WP ULike plugin for WordPress. 🚨 Educational use only – do not test on systems without explicit authorization. 🧠 Overview WP ULike is a popular WordPress plugin that allows users t...
CVE-2026-0920-
CVE-2026-0920- LA-Studio Element Kit for Elementor 📡 The exploit drops here first. Follow @KNxploited on Telegram — your elite feed for freshly disclosed CVEs, working PoCs, and precision security research. Updated relentlessly. Built for those who stay ahead. 🧠 Overview CVE-2026-0920 is a CVSS 9...
CVE-2026-8181
CVE-2026-8181 Proof of Concept Research • Validation • Security Testing "roses a red, violet are blue, i think i just shat my pant thinking about you. rizz" CVE Overview Field| Value ---|--- CVE ID| CVE-2026-8181 Type| Authentication Bypass Impact| Privilege Escalation / Full Site Takeover Attack...
ghidra-firmware-utils
Ghidra Firmware Utilities Various modules for Ghidra to assist with PC firmware reverse engineering. This was accepted as a coreboot project for GSoC 2019. Features PCI option ROM loader Implements a FS loader for PCI option ROMs handles hybrid ROMs with multiple images, e.g. legacy x86 + UEFI...
CVE-2024-25092
CVE-2024-25092 Exploit Overview CVE-2024-25092 is a high-severity vulnerability affecting the WordPress NextMove Lite plugin versions = 2.17.0. This vulnerability allows a subscriber+ user to install and activate arbitrary plugins on a WordPress site due to missing authorization checks. Details...
CVE-2021-29447
WAV iXML XXE Exploit Generator Generates malicious WAV files that exploit XXE vulnerabilities in WordPress plugins parsing iXML metadata chunks e.g., BookingPress │ Target │ └──────────┘ └──────────┘ ▲ │ │ │ 2. Parse XML │ │ │ 3. GET /xxe.dtd │ │─────────────────────────────┘ │ │ 4. GET...
Wordpress-ebook-CVE-2016-10924
Wordpress eBook Download 1.1 plugin has a file disclosure vulnerability by abusing it's get parameter in the filedownload.php file. This script brute forces different processes on the server using this vulnerability. USAGE: python pidbrute.py...
WordPress Featured Image from URL plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by ChuongVN in WordPress Plugin Featured Image from URL versions = 6.0.7...