CVE-2023-41425-RCE-WonderCMS-4.3.2

🚨 WonderCMS RCE 익스플로잇 도구 CVE-2023-41425 이 Python 기반 공격 보안 도구는 WonderCMS 4.3.2 의 원격 코드 실행RCE 취약점CVE-2023-41425을 자동으로 익스플로잇합니다. 악성 ZIP 테마 모듈을 제작하고 JavaScript 기반 XSS 페이로드 를 전달하여 관리자 세션을 탈취하고 PHP 리버스 셸을 배포하는 과정을 간소화합니다. ⚠️ 교육 및 승인된 보안 테스트 목적으로만 사용하세요. 📚 목차 ⚙️ 기능 📥 설치 및 요구 사항 🚀 사용 예제 🧾 인수 참조 🧠 상세 워크플로우...

Login Configurator <=2.1 - Cross-Site Scripting

Login Configurator WordPress plugin = 2.1 contains a reflected cross-site scripting caused by improper escaping of URL parameter before outputting it to the page, letting attackers execute scripts in the context of site administrators, exploit requires victim to visit a malicious URL. id:...

Arcserve UDP <= 9.0.6034 - Authentication Bypass

Arcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at WebServiceImpl/services/FlashServiceImpl leaks the AuthUUID token. This token can be used at /WebServiceImpl/services/VirtualStandbyServiceImpl to obtain a valid session. This session can be used to execute a...

CVE-2025-41646

CVE-2025-41646 - RevPi Webstatus = 2.4.5 인증 우회 익스플로잇 개요 이것은 RevPi Webstatus = 2.4.5에 영향을 미치는 인증 우회 취약점 인 CVE-2025-41646 용 Python3 익스플로잇 스크립트입니다. 취약점 세부 정보: CVE ID : CVE-2025-41646 영향받는 제품 : RevPi Webstatus = 2.4.5 영향 : 원격 공격자가 인증을 우회하고 유효한 관리자 세션 ID를 획득할 수 있습니다. 취약점 유형 : 인증 우회 공격 경로 : /php/dal.ph...

CVE-2024-10924

CVE-2024-10924 - Обход аутентификации в Really Simple Security ОБЗОР Этот проект демонстрирует эксплуатацию и устранение CVE-2024-10924, критической уязвимости обхода аутентификации в плагине WordPress "Really Simple Security". ШАГ 1: НАСТРОЙКА СРЕДЫ Запустите уязвимую среду WordPress: cd...

CVE-2025-34157

Coolify削除フローにおけるStored XSS CVE-2025-34157 影響を受けるバージョン: Coolify ≤ v4.0.0-beta.420.6 修正バージョン: v4.0.0-beta.420.7 深刻度: 重大 9.4 CVSS 4.0 ベクトル: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE: CWE-79 クロスサイトスクリプティング, CWE-20 不適切な入力検証 概要 プロジェクト削除フローにおけるStored...

CVE-2026-66917

JoomGallery의 객체 수준 권한 부여 결함을 통한 IDOR + 저장형 XSS JoomGallery ≤ 4.3.0 — 편집자Editor 역할 사용자가 모든 갤러리 이미지를 탈취하고 XSS 페이로드를 저장하여 관리자 세션 탈취 가능 요약 JoomGallery의 UserimageController::save는 checkACL'edit.own', ... 대신 checkACL'edit', ...를 확인합니다. 편집자Editor 역할 사용자는 소유권과 관계없이 모든 이미지에 대해 task=userimage.save&id=N으로...

CVE-2026-77850

Stored Cross-site Scripting vulnerability in ash-project ashadmin executes attacker-supplied record content as script in an administrator's browser. The relationship typeahead components AshAdmin.Components.Resource.RelationshipField and AshAdmin.Components.Resource.ManagedRelationshipSelectField...

CVE-2026-55779

Silverstripe Versioned provides versioning for Silverstripe models. Prior to 3.2.1, RestoreAction::getRestoreMessage in src/RestoreAction.php builds ArchiveAdmin restore notifications rendered as CASTHTML and inserts $restoredItem-Title, $restoredItem-URLSegment, $restoredItem-CMSEditLink, and...

CVE-2026-2991

KiviCare = 4.1.2 - Bypass dell'autenticazione CVE-2026-2991 PoC 📜 Descrizione CVE-2026-2991 è una vulnerabilità di bypass dell'autenticazione nel plugin WordPress KiviCare – Clinic & Patient Management System EHR che colpisce tutte le versioni fino alla 4.1.2 inclusa. Il plugin espone un endpoint...

CVE-2025-62343

HCL IntelliOps Event Management IEM is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion...

EUVD-2025-210806

HCL IntelliOps Event Management IEM is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion...

CVE-2026-59808

AVideo through commit 9c39d8c8 contains an authentication bypass vulnerability where deduplicateByEncoderQueueId returns videoidhash credentials for any video by encoderqueueid without ownership verification, and useVideoHashOrLogin converts this hash into passwordless login as the video owner...

CVE-2026-59808 AVideo Authentication Bypass via Unkeyed Video Hash Disclosure

AVideo through commit 9c39d8c8 contains an authentication bypass vulnerability where deduplicateByEncoderQueueId returns videoidhash credentials for any video by encoderqueueid without ownership verification, and useVideoHashOrLogin converts this hash into passwordless login as the video owner...

CVE-2026-59808

AVideo (through commit 9c39d8c8) is affected by an authentication bypass vulnerability. The root cause lies in deduplicateByEncoderQueueId(), which returns video_id_hash credentials for any video by encoder_queue_id without ownership verification , and useVideoHashOrLogin(), which converts this h...

CVE-2026-16260

The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.8.1 does not sanitise and escape one of its custom post type settings before outputting it in an HTML attribute on the admin edit screen, allowing users with the Contributor role and above to inject JavaScript that executes in th...

CVE-2026-77001 Social Login & Sharing buttons with Analytics By SoClever <= 1.2.0 - Unauthenticated Authentication Bypass

The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated attackers to obtain a valid session as any existing user,...

CVE-2026-16260

CVE-2026-16260 is a stored XSS vulnerability in the Post Grid, Slider & Carousel Ultimate WordPress plugin (versions before 1.8.1 ). The plugin fails to sanitise and escape the Header Title custom post type setting before outputting it in an HTML attribute on the admin edit screen. This allows au...

CVE-2026-14948

A low privileged remote attacker can hijack an active administrative session without needing to know the administrator password by extracting live plaintext session identifiers for authenticated users from downloadable error log archives...

CVE-2026-67189 pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record

pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnerability in the Traffic Graphs top-talkers feature, where PTR records returned by reverse DNS lookups are incorporated without sanitization into AJAX responses and rendered as HTML through a DOM sink...