179083 matches found
EDR-Freeze
EDR-Freeze This is a tool that exploits the software vulnerability of WerFaultSecure to suspend the processes of EDRs and antimalware without needing to use the BYOVD Bring Your Own Vulnerable Driver attack method. EDR-Freeze operates in user mode, so you don't need to install any additional...
CVE-2026-21003-JWT-none-Algorithm-Bypass-via-kid-Header-Omission
CVE-2026-21003 – JWT "none" Algorithm Bypass via kid Header Omission Program Code Node.js root@kitploit: // jwtverifyserver.js - Vulnerable JWT verification const jwt = require'jsonwebtoken'; const express = require'express'; const app = express; app.useexpress.json; const publicKey = -----BEGIN...
CVE-2026-85308
Authorization Bypass Through User-Controlled Key vulnerability in Brainstorm Force SureForms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SureForms: from n/a through 2.12.5...
CVE-2026-84849
Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce = 2.3 versions...
CVE-2026-84767
Unauthenticated Bypass Vulnerability in BookIt = 2.6.0.3 versions...
CVE-2026-84762
Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...
CVE-2026-84766
Unauthenticated Bypass Vulnerability in FluentBooking Pro = 2.2.1 versions...
GHSA-4MVJ-M6J5-PMF7 unstructured: Server-Side Request Forgery in the URL-based partitioning
Summary Server-Side Request Forgery in unstructured. The url= argument of partition, partitionhtml, and partitionmd is fetched via requests.get with no host validation. The response body is returned as Element text, so this is a full-read SSRF — attackers reach loopback admin APIs, internal HTTP...
CVE-2026-85308
Brainstorm Force SureForms , a WordPress plugin, is affected by an Authorization Bypass Through User-Controlled Key (IDOR) vulnerability in versions from n/a through 2.12.5 . The flaw allows exploitation of incorrectly configured access control security levels, meaning an unauthenticated remote a...
EUVD-2026-70552
Authorization Bypass Through User-Controlled Key vulnerability in Brainstorm Force SureForms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SureForms: from n/a through 2.12.5...
CVE-2026-85308 WordPress SureForms plugin <= 2.12.5 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Brainstorm Force SureForms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SureForms: from n/a through 2.12.5...
CVE-2026-84777 WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability
Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...
CVE-2026-84777
WordPress Really Simple SSL plugin versions ≤ 9.8.0 are affected by an unauthenticated broken authentication vulnerability described as a 2FA bypass . The flaw allows a network-based attacker (with no prior privileges or user interaction, but high attack complexity) to compromise authentication, ...
EUVD-2026-70561
Unauthenticated Bypass Vulnerability in FluentBooking Pro = 2.2.1 versions...
CVE-2026-84766
An unauthenticated bypass vulnerability exists in the FluentBooking Pro WordPress plugin in versions 2.2.1 and below , as reported by Patchstack. The CVSS 3.1 score is 5.9 (Medium) , with a network attack vector, high complexity, no privileges required, and a high integrity impact but no confiden...
EUVD-2026-70579
Unauthenticated Bypass Vulnerability in BookIt = 2.6.0.3 versions...
CVE-2026-84767 WordPress BookIt plugin <= 2.6.0.3 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in BookIt = 2.6.0.3 versions...
CVE-2026-84766 WordPress FluentBooking Pro plugin <= 2.2.1 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in FluentBooking Pro = 2.2.1 versions...
CVE-2026-84767
An unauthenticated bypass vulnerability affects the WordPress BookIt plugin in versions ≤ 2.6.0.3 . The flaw allows a remote attacker with no prior authentication or user interaction to trigger the bypass over the network with low complexity. The CVSS 3.1 score is 5.3 (Medium) , reflecting a low ...