CVE-2024-12594

CVE-2024-12594 ALL In One Custom Login Page...

CVE-2024-12849

CVE-2024-12849 Error Log Viewer By WP Guru = 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File Read Description The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the...

CVE-2025-6934

CVE-2025-6934 – WordPress Opal Estate Pro Exploit 📖 Description This repository contains a Proof of Concept PoC exploit for CVE-2025-6934 , a critical vulnerability in the WordPress Plugin: Opal Estate Pro = 1.7.5, which allows creating an administrator account without authentication. ⚠️ Disclaime...

hackazon

Hackazon Hackazon es un sitio de prueba vulnerable gratuito que es una tienda en línea construida con las mismas tecnologías utilizadas en las aplicaciones móviles y de cliente enriquecido actuales. Hackazon tiene una interfaz AJAX, flujos de trabajo estrictos y API RESTful utilizadas por una...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

CVE-2022-21661

CVE-2022-21661 CVE-2022-21661 docker and poc functions.php को मूल छवि के functions.php से बदलने की आवश्यकता है, docker-compose.yml में सीधे माउंट करें। poc root@kitploit: POST /wp-admin/admin-ajax.php HTTP/1.1 Host: your-ip:8080 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:132.0...

CVE-2025-2539

POC - CVE-2025-2539 File Away Aviso : Esta Prova de Conceito POC é feita apenas para fins educacionais e de teste ético. O uso desta ferramenta para atacar alvos sem consentimento mútuo prévio é ilegal. É responsabilidade do usuário final obedecer todas as leis locais, estaduais e federais...

cve-2021-38314

cve-2021-38314 - Divulgação não autenticada de informações sensíveis O plugin Gutenberg Template Library & Redux Framework = 4.2.11 para WordPress registrou várias ações AJAX disponíveis para usuários não autenticados na função includes em redux-core/class-redux-core.php. Essas ações eram...

CVE-2024-3495-Poc

CVE-2024-3495-Poc CVE-2024-3495 Country State City Dropdown CF7 Accept-Encoding: gzip, deflate Accept: / Accept-Language: en-US;q=0.9,en;q=0.8 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWe...

CVE-2026-8380

CVE-2026-8380 CVE-2026-8380 — फ्रंटएंड फ़ाइल मैनेजर = 23.6 में मनमाना पोस्ट विलोपन अवलोकन वर्डप्रेस प्लगइन Frontend File Manager nmedia-user-file-uploader के संस्करण = 23.6 में एक गंभीर प्राधिकरण दोष पाया गया। इस कमजोरी के कारण, प्रमाणित उपयोगकर्ता कम विशेषाधिकारों के साथ AJAX विलोपन एंडपॉइंट में...

burp-exporter

Exporter Extension for Burp Suite Community and Pro Follow us to know more about tips and others extensions Description Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions. It also adds a tab called Exporter where you can...

CVE-2026-49049

CVE-2026-49049 — Plugin Helix3 per Joomla JoomShaper Handler AJAX non autenticato — Scanner di vulnerabilità sola lettura Panoramica CVE-2026-49049 colpisce il framework template Helix3 per Joomla versioni da 1.0 a 3.1.0. Il gestore onAjaxHelix3, raggiungibile tramite il dispatcher comajax di...

CVE-2026-39492

CVE-2026-39492 — WP Maps Blind SQL Injection Scanner Pre-Auth Time-Based Blind SQLi via Backtick-Bypass → DB-Extraktion Übersicht CVE-2026-39492 ist eine kritische CVSS 9.3 nicht authentifizierte blinde SQL-Injection-Schwachstelle im WP Maps -Plugin wp-google-map-plugin in Versionen ≤ 4.9.1. Der...

CVE-2026-3891

CVE-2026-3891 — Pix for WooCommerce RCE tramite Caricamento File Non Autenticato Fuga di Nonce → Upload certificatecrtpath → Esecuzione di Codice Panoramica CVE-2026-3891 è una vulnerabilità di upload arbitrario di file non autenticato di gravità critica CVSS 9.8 nel plugin WordPress Pix for...

CVE-2026-15282

CVE-2026-15282 — Exploit di massa RCE per Instant Appointment filegetcontents + fileputcontents pre-autenticazione → PHP Webshell Panoramica CVE-2026-15282 è una vulnerabilità critica CVSS 9.8 di upload arbitrario di file senza autenticazione nel plugin WordPress Instant Appointment ≤ 1.2. L'azio...

CVE-2024-11728

CVE-2024-11728 KiviCare – Klinik- & Patientenverwaltungssystem EHR WordPress-Plugin: PoC für nicht authentifizierte SQL-Injection Dieses Repository enthält ein Proof-of-Concept-Skript PoC zur Ausnutzung einer SQL-Injection-Schwachstelle im KiviCare – Klinik- & Patientenverwaltungssystem EHR...

CVE-2025-6440

CVE-2025-6440 — Plugin WordPress WooCommerce Dynamic Pricing & Discounts Panoramica Questo repository contiene uno script Python proof-of-concept PoC per testare una vulnerabilità di upload non autenticato di file che colpisce il plugin WordPress WooCommerce Dynamic Pricing & Discounts. ⚠️ Questo...

CVE-2023-4771

Vulnerabilità di cross-site scripting in CKEditor nell'esempio AJAX CVE-2023-4771 PoC CKEditor 4 Vulnerabilità di cross-site scripting XSS nell'esempio AJAX Questo documento descrive come eseguire una vulnerabilità XSS CVE-2023-4771 utilizzando CKEditor. Assicurati di eseguire i seguenti passaggi...

CVE-2026-47100-Analysis-Lab

CVE-2026-47100 — FunnelKit / Funnel Builder for WooCommerce Checkout: Laboratorio di Stored XSS Laboratorio Docker locale per riprodurre CVE-2026-47100 in modo sicuro e con il minimo danno. Questo laboratorio confronta una versione vulnerabile di FunnelKit con una versione corretta e verifica il...

RAU_crypto

RAUcrypto Exploit combinato per Telerik UI per ASP.NET AJAX. Caricamento file per CVE-2017-11317 e CVE-2017-11357 - caricherà automaticamente il file Deserializzazione .NET per CVE-2019-18935 Ora supporta il test della capacità del target di recuperare payload remoti da un servizio SMB ospitato...