34 matches found
CVE-2025-6934-PoC
🔓 Strumento di Exploit CVE-2025-6934 Creazione non autenticata di account amministratore nel plugin WordPress Opal Estate Pro Creato e sviluppato interamente da mejbankadir SMH tech e Mejban HackSheild sotto NexoAmicus 📋 Descrizione CVE-2025-6934 è una vulnerabilità critica nel plugin WordPress...
CVE-2025-6934
CVE-2025-6934 Exploit Automatico ⚡ Panoramica CVE-2025-6934 è un exploit proof-of-concept PoC che prende di mira Plugin WordPress: Opal Estate Pro ≤ 1.7.5. Questo exploit dimostra la creazione non autenticata di un account amministratore. Disclaimer: Questa PoC è solo a scopo didattico. Non...
CVE-2025-6934
Questo repository non contiene un README...
Exploit for CVE-2025-6934
CVE-2025-6934 🛡️ CVE-2025-6934 - Unauthenticated Privilege Es...
Exploit for CVE-2025-6934
No d...
Exploit for CVE-2025-6934
WP-CVE-2025-6934 | Opal Estate Pro = 1.7.5 - Unauthenticat...
Exploit for CVE-2025-6934
CVE-2025-6934 – Eksploitasi WordPress Opal Estate Pro 📖...
CVE-2025-6934
The Opal Estate Pro – Property Management and Submission plugin for WordPress, used by the FullHouse - Real Estate Responsive WordPress Theme, is vulnerable to privilege escalation via in all versions up to, and including, 1.7.5. This is due to a lack of role restriction during registration in th...
CVE-2025-6934
creationtimestamp| type| source ---|---|--- 2025-07-01 07:09:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20008 2025-07-01 09:00:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsvdkcymha2p 2025-07-01 21:00:16+00:00| published-proof-of-concept|...
CVE-2025-6934
CVE-2025-6934 targets the Opal Estate Pro WordPress plugin (≤ 1.7.5). The root cause is missing role restrictions in the registration flow (on_register_user), enabling unauthenticated users to register with arbitrary roles, including Administrator. Several connected sources corroborate unauthenti...
CVE-2024-6934
A vulnerability classified as problematic has been found in formtools.org Form Tools 3.1.1. This affects an unknown part of the file /admin/forms/add/step2.php?submissiontype=direct. The manipulation of the argument Form URL leads to cross site scripting. It is possible to initiate the attack...
CVE-2023-6934
The Limit Login Attempts Reloaded plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 2.25.26 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
Ubuntu: Security Advisory (USN-6934-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : MySQL vulnerabilities (USN-6934-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6934-1 advisory. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL...
CVE-2023-6934
creationtimestamp| type| source ---|---|--- 2024-01-14 08:36:51+00:00| seen| https://t.me/ctinow/167958...
CVE-2023-6934
The Limit Login Attempts Reloaded plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 2.25.26 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2023-6934
The CVE-2023-6934 entry concerns the WordPress Limit Login Attempts Reloaded plugin (all versions up to 2.25.26). It is a Stored XSS where insufficient input sanitization and output escaping on shortcode attributes allows authenticated attackers with contributor-level or higher permissions to inj...
CVE-2015-6934
creationtimestamp| type| source ---|---|--- 2024-01-07 07:25:21+00:00| seen| https://t.me/arpsyndicate/2624...
WordPress Limit Login Attempts Reloaded Plugin <= 2.25.26 is vulnerable to Cross Site Scripting (XSS)
Software Limit Login Attempts Reloaded Type Plugin Vulnerable versions = 2.25.26 Fixed in 2.25.27 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6934 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2de2d139dd65 Credits Hung...
CVE-2018-6934
The CVE-2018-6934 entry describes a CSRF vulnerability in the PHP Scripts Mall Online Tutoring Script 2.0.3, specifically affecting the student/personal-info component. The connected documents corroborate the issue across NVD and CVE listings, though they do not provide additional details on the ...