WordPress Burst Statistics 3.4.0-3.4.1.1 - Authentication Bypass

Burst Statistics – Privacy-Friendly WordPress Analytics plugin 3.4.0 to 3.4.1.1 contains an authentication bypass caused by incorrect return-value handling in ismainwpauthenticated function, letting unauthenticated attackers impersonate administrators, exploit requires knowledge of an administrat...

MajorDoMo - Unauthenticated RCE

MajorDoMo contains a remote code execution caused by an include order bug and lack of exit after redirect in admin panel's PHP console, letting unauthenticated attackers execute arbitrary PHP code via crafted GET requests. id: CVE-2026-27174 info: name: MajorDoMo - Unauthenticated RCE author:...

Apache Solr 9.4.0-9.10.1 / 10.0.0 - Hardcoded Default Credentials

Apache Solr 9.4.0 through 9.10.1 and 10.0.0 contain a hardcoded credentials vulnerability caused by default Basic Authentication template users in bin/solr auth enable, letting remote attackers gain full administrative access. Exploit requires use of default template users. id: CVE-2026-44825 inf...

Keycloak < 24.0.5 - Broken Access Control

A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise. id: CVE-2024-3656 info...

WP DeskLite - Reflected XSS

WP DeskLite WordPress plugin through 1.0.0 contains a reflected XSS caused by unsanitized and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin, exploit requires crafted request. id: CVE-2024-12724 info: name: WP DeskLite - Reflected XSS...

Dgraph <= 25.3.2 - Admin Token Disclosure

Dgraph = 25.3.2 contains an information disclosure caused by unauthenticated access to the /debug/vars endpoint , which publishes the cmdline variable including the --security token= flag, letting unauthenticated remote attackers retrieve the admin token and access admin-only endpoints, exploit...

MantisBT <=2.30 - Arbitrary Password Reset/Admin Access

MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirmhash value to verify.php. id: CVE-2017-7615 THIS TEMPLATE IS ONLY FOR DETECTING To carry out further attacks, please see reference2 below. This template works by guessing user ID. MantisBT...

Sneeit WP Social WordPress Plugin - Unauthenticated RCE via call_user_func

The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeitarticlespaginationcallback function. This is due to the function accepting user input and then passing that through calluserfunc. This makes it possible for...

CVE-2021-44103

CVE-2021-44103 Концепт-эксплойт для KONGA 0.14.9 — повышение привилегий. Введение 16 ноября 2021 года Fabrício Salomão и я обнаружили уязвимость в Konga API Gateways, позволяющую любому аутентифицированному пользователю стать администратором. Сообщение об уязвимости Продукт: KONGA Модель: 0.14.9...

CVE-2025-4190

CVE-2025-4190 — WordPress CSV Mass Importer ≤ 1.2: Произвольная загрузка файлов -purple 📌 Описание Плагин CSV Mass Importer ≤ 1.2 для WordPress содержит уязвимость Admin+ Arbitrary File Upload произвольная загрузка файлов администратором. Из-за неправильной проверки загружаемых файлов пользовател...

CVE-2023-3460

CVE-2023-3460 - Accès administrateur non autorisé pour le plugin Ultimate Member POC Score CVSS : 9.1 Date : 07/04/2023 Qu'est-ce que le plugin Ultimate Member ? Le plugin Ultimate Member est un plugin d'adhésion populaire pour enregistrer des utilisateurs, le plugin a plus de 200 000 installatio...

mikrot8over

mikrot8over mikrot8over: Outil d'exploitation rapide pour Mikrotik RouterOS jusqu'à 6.38.4 Description Ceci est une version retravaillée de l'original Mikrotik Exploit. Compatibilité Python 2 et fonctionnalités de scan multithread ajoutées. Version Python L'utilitaire a été testé sur python2.6 ,...

CVE-2023-38829-NETIS-WF2409E

CVE-2023-38829-NETIS-WF2409E NETIS SYSTEMS Маршрутизатор WF2409E: Эксплойт внедрения команд PoC Описание уязвимости: Функции ping и traceroute маршрутизатора NETIS SYSTEMS WF2409E версия V3.6.42541 подвержены атакам внедрения команд. Через веб-интерфейс администратора можно создать вредоносный вв...

CVE-2026-78477 Jawn <= 1.4.2 - Unauthenticated Privilege Escalation

The Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator...

CVE-2025-47550

Instantio - Plugin WordPress 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0: mtu...

CVE-2025-47549

Ultimate Before After Image Slider & Gallery – BEAF 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlf...

CVE-2026-45156-POC

黑客矩阵故障 🚨 CVE-2026-45156 🚨 Nextcloud useroidc ID4me JWT 签名绕过 用于管理员接管的全自动概念验证（PoC）利用程序。 📖 故事背后 每一个 CVE 背后都有一个故事。这个漏洞是在一个寒冷的冬夜凌晨 2 点发现的，伴随着分手混音单曲循环。阅读完整的技术深度剖析、情感过山车以及零信任经验教训： 🔗 阅读完整博客文章 （链接你的博客文章） 🎯 漏洞概述 在处理从 ID4me 身份提供商接收的 JWT 令牌时，Nextcloud 的 useroidc 应用使用 base64decode 处理令牌载荷，而未验证加密签名。 🔥...

CVE-2023-22515

Инструмент Red Team - Эксплуатация уязвимости неавторизованного добавления администратора в Confluence CVE-2023-22515 Затронутые версии root@kitploit: 8.0.0 = Confluence Data Center и Confluence Server = 8.0.4 8.1.0 = Confluence Data Center и Confluence Server = 8.1.4 8.2.0 = Confluence Data Cent...

CVE-2020-15931

CVE-2020-15931 Netwrix Account Lockout Examiner 4.1 도메인 관리자 계정 자격 증명 노출 취약점 취약점 개요 Netwrix Account Lockout ExaminerALE 5.1 이전 버전은 인증되지 않은 원격 공격자가 공격자가 제어하는 시스템으로의 연결을 트리거하고 도메인 관리자 권한이 있는 계정의 NTLMv1/v2 challenge-response를 캡처할 수 있게 합니다. 도메인 관리자 계정은 설치 요구 사항에 따라 이미 제품에 구성되어 있을 것입니다. 공격자는 도메인 컨트롤러에서...

confluence-hack

Piratage de Confluence CVE-2023-22515 exploit.py Exploit pour créer un nouvel administrateur Journal d'audit compromis : Servant de référence : https://packetstormsecurity.com/files/175225/Atlassian-Confluence-Unauthenticated-Remote-Code-Execution.html et https://github.com/Chocapikk/CVE-2023-225...