CVE-2026-81026

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or status of a payment notification before marking the corresponding order completed, allowing unauthenticated users to complete full-price orders and gain access to paid content by...

CVE-2026-77010

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation checks on its REST API routes and does not consistently enforce the per-class access code, allowing unauthenticated users to obtain a signed meeting join link for any classroom,...

CVE-2026-77704

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check that a user holds the required capability before letting them change an appointment's status, allowing customers to set arbitrary statuses on appointments they are booked on, including approving their ow...

CVE-2026-77010 HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Moderator Join URL Disclosure and Class Access Code Bypass

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation checks on its REST API routes and does not consistently enforce the per-class access code, allowing unauthenticated users to obtain a signed meeting join link for any classroom,...

CVE-2026-18234

The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its wallet payment handling belongs to the requester, and does not deduct the wallet balance for most payment methods, allowing any authenticated user, including Subscribers, to mark arbitrary orders as paid...

CVE-2026-76548

The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature, granting unauthenticated visitors capabilities reserved to privileged roles. This allows them to list the site's media library and to modify unpublished posts, pages and media item...

CVE-2026-18234 MStore API < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass via Wallet

The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its wallet payment handling belongs to the requester, and does not deduct the wallet balance for most payment methods, allowing any authenticated user, including Subscribers, to mark arbitrary orders as paid...

CVE-2026-76548 Profile Builder < 4.0.1 - Unauthenticated Unpublished Content and Media Modification via Front-End Upload Auth Bypass

The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature, granting unauthenticated visitors capabilities reserved to privileged roles. This allows them to list the site's media library and to modify unpublished posts, pages and media item...

EUVD-2026-68047

The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of its delivery endpoints belongs to the requester, allowing any authenticated user, including Subscribers, to mark arbitrary orders as completed and paid without any payment being made...

CVE-2026-18233

The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of its delivery endpoints belongs to the requester, allowing any authenticated user, including Subscribers, to mark arbitrary orders as completed and paid without any payment being made...

CVE-2026-16947 Total Processing Card Payments for WooCommerce <= 7.3 - Unauthenticated SSRF leading to Payment Bypass and Gateway Credential Disclosure

The Total processing card payments for WooCommerce WordPress plugin through 7.3 does not validate a user-supplied path before using it to build a server-side verification request, and does not verify the authenticity of the response, allowing unauthenticated attackers to redirect that request to ...

CVE-2021-26121

CS-Cart templates.manage Vulnerabilità di esecuzione di codice remoto tramite Server Side Template Injection Trovato da: Steven Seeley di 360 Vulcan Team Versione: = 4.12.x ultima Data: 2021-01-08 12:49 CVE: CVE-2021-26121 Cronologia della divulgazione 2021-01-26 – Inviato al team di sviluppo di...

MoreImpacketExamples

MoreImpacketExamples Dieses Repository enthält ein paar kurze Python-Skripte, die mit der Bibliothek Impacket erstellt wurden. Das Hauptziel dieses Projekts ist es, mir selbst und anderen zu helfen, die den Übergang von der Verwendung der mitgelieferten Impacket-Beispiele zur...

Fugu15

Fugu15 Fugu15 ist ein semi-untethered, dauerhaft signierter Jailbreak für iOS 15. Er enthält einen Code-Signing-Bypass, einen Kernel-Exploit, einen Kernel-PAC-Bypass und einen PPL-Bypass. Zusätzlich kann er über Safari installiert werden, d. h. ein Computer ist nicht erforderlich, außer für einen...

Superset_auth_bypass_check

Supersetauthbypasscheck Tool zur Erkennung der Apahce-Superset-Authentifizierungsumgehung-Schwachstelle CVE-2023-27524 Behoben am: 3.8.2023 Behoben: Sitzungsfehler aufgrund abgelaufener hartcodierter Sitzungszeiträume; Ersetzung durch das Tool flasksessioncookiemanager zur Generierung von...

Payload-Download-Cradles

Payload Download Cradles Dies sind verschiedene Arten von Download-Cradles, die als Inspiration dienen sollen, um damit zu spielen und neue Download-Cradles zu erstellen, um AV/EPP/EDR im Kontext von Download-Cradle-Erkennungen zu umgehen. Beachte: Das Entfernen oder Verschleiern von Signaturen a...

AMSI-ETW-Patch

AMSI-ETW-Patch questa repo contiene informazioni per patchare AMSI ed ETW usando una patch a singolo byte per entrambi. L'idea era limitare il rilevamento della patch stessa dato che è un singolo byte. AMSI patch-amsi-x64.c L'idea è che AMSI esegua molti controlli di validazione prima di...

ExecASLR-ekoparty

ExecASLR - Missbrauch von Intel-Branch-Prädiktoren zur Umgehung von ASLR Was ist ASLR Address Space Layout Randomization ist eine Schutzmaßnahme, die es schwerer machen soll, Speicherkorruptionsangriffe auszunutzen. In einem Szenario einer Pufferüberlauf-Schwachstelle muss ein Angreifer, der...

CVE-2025-29927

Scanner avanzato per la vulnerabilità CVE-2025-29927 Questo è uno scanner di livello professionale progettato per rilevare la vulnerabilità di bypass del middleware CVE-2025-29927 nelle applicazioni Next.js. 🧠 Cosa fa Usa un browser headless reale Playwright per eseguire una scansione profonda di...

Nginx-CVE-2013-4547

Nginx Logica di Vulnerabilità del Nome File CVE-2013-4547 Descrizione della Vulnerabilità Versioni interessate: Nginx 0.8.41 1.4.3 / 1.5.0 1.5.7 Link di riferimento: https://vulners.com/cve/CVE-2013-4547 https://blog.werner.wiki/file-resolution-vulnerability-nginx/ http://www.91ri.org/9064.html...