96 matches found
CVE-2019-16097
CVE-2019-16097-batch 免責事項 セキュリティ研究のみに使用し、不正なテストは行わないでください。結果は自己責任となります！！！ CVE-2019-16097-batch バッチ脆弱性悪用スクリプト url.txtファイルにターゲットアドレスを一括追加します http://1.1.1.1 http://2.2.2.2 Pythonでこのスクリプトを実行すると、result.txtに最終的な検証結果が表示されます 脆弱性の背景...
CVE-2019-16097-batch
CVE-2019-16097-batch 免责声明 只做安全研究使用，不得做非法测试，后果自行承担！！！ CVE-2019-16097-batch 批量漏洞利用脚本 在 url.txt文件 批量添加目标地址 http://1.1.1.1 http://2.2.2.2 使用python 运行 此脚本 在 result.txt 可以看到最终的验证结果 漏洞背景...
CVE-2024-54363
CVE-2024-54363 Wp NssUser Register successful, just Check this: Login...
CVE-2026-5118
Divi Form Builder ⚠️ 警告：此工具仅供授权渗透测试和安全研究使用。 未经授权访问计算机系统是违法的。仅可在您拥有或已获得明确书面许可的系统上使用。 更多免责声明：您可以在 Jenderal92 的封面上查看。请点击此处 !!! 概述 此 Python 2 脚本利用了 Divi WordPress 插件 （及相关 Divi 表单）中的权限提升漏洞。它可以通过以下方式远程注册一个管理员 账户： 从目标的 Divi 注册表单中提取 fbnonce。 向 /wp-admin/admin-ajax.php 发送带有 role=administrator 的精心构造的...
CVE-2026-2631
CVE-2026-2631 Datalogics Ecommerce Delivery – Datalogics PoC / エクスプロイトスクリプト: CVE-2026-2631.py 著者: Khaled Alenazi Nxploited – Nxploited ZeroDay Hub 連絡先: Telegram: @Kxploit 🧬 脆弱性の概要 プラグイン: Datalogics Ecommerce Delivery – Datalogics WordPress 影響を受けるバージョン: 2.6.60（2.6.60 未満） 脆弱性タイプ: 未認証の権限昇格 CVE:...
CVE-2026-105231
A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument...
CVE-2026-105231 kishor-23 food-waste-management-system Admin Registration signup.php sql injection
A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument...
CVE-2026-105231 kishor-23 food-waste-management-system Admin Registration signup.php sql injection
A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument...
CVE-2026-105231
A SQL injection vulnerability exists in the Admin Registration component of the kishor-23 food-waste-management-system . Specifically, an unknown function within the admin/signup.php file fails to properly sanitize inputs, allowing an attacker to manipulate the email , username , or location argu...
EUVD-2026-92253
A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument...
CVE-2026-105231 kishor-23 food-waste-management-system Admin Registration signup.php sql injection
A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument...
CVE-2026-105231: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument...
PT-2026-104722
A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument...
CVE-2026-77915 rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php
rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrator privileges due to a duplicate bare Auth::routes call in routes/web.php that re-enables the POST /register route after it was...
CVE-2026-77915 rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php
rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrator privileges due to a duplicate bare Auth::routes call in routes/web.php that re-enables the POST /register route after it was...
CVE-2026-77915 rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php
rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrator privileges due to a duplicate bare Auth::routes call in routes/web.php that re-enables the POST /register route after it was...
CVE-2019-25738
WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vulnerability that allows unauthenticated attackers to modify WordPress options by exploiting the hcajaxsaveoption action. Attackers can send POST requests to the admin-ajax.php endpoint with the action parameter set to...
CVE-2019-25738 WordPress Hybrid Composer 1.4.6 Unauthenticated Settings Change
WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vulnerability that allows unauthenticated attackers to modify WordPress options by exploiting the hcajaxsaveoption action. Attackers can send POST requests to the admin-ajax.php endpoint with the action parameter set to...
CVE-2026-7284
The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to privilege escalation via user registration in all versions up to, and including, 1.4.4. This is due to the 'easyelhandleregister' function not restricting what user roles a user can register with...
