WordPresShell

WordPresShell PoC de RCE pré-auth para CVE-2026-63030 + CVE-2026-60137 núcleo do WordPress. Confusão de rota REST /batch/v1 → SQLi via WPQuery authornotin → criação de admin sem autenticação → webshell. Arquivo único, apenas com stdlib do Python. Vulnerabilidade: Adam Kues Searchlight Cyber...

EUVD-2026-64900

A local privilege escalation vulnerability exists in the Restricted Access Kiosk Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5. The vulnerability affects the external PDF viewer functionality used to display the application manual and its interaction with the underlyi...

PT-2026-80808

Name of the Vulnerable Software and Affected Versions itsourcecode Online Clinic Management System version 1.0 Description An issue in the Admin Login component allows remote exploitation via SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. T...

CVE-2026-8732

⚔️ CVE-2026-8732 WP Maps Pro ≤ 6.1.0 — Escalation dei Privilegi Non Autenticata Automazione dell'Exploit in 8 Fasi | Multiprocessing + Asyncio | Creazione Admin Verificata 🎯 Informazioni sulla Vulnerabilità Il plugin WordPress WP Maps Pro versione ≤ 6.1.0 presenta una vulnerabilità di escalation...

CVE-2026-20896-Gitea-Authentication-Bypass

CVE-2026-20896 - Bypass dell'autenticazione di Gitea ≤1.26.2 1. Cos'è Gitea? Gitea è una piattaforma di hosting Git leggera e open-source che consente a organizzazioni e sviluppatori di gestire repository di codice sorgente, tracciare issue, revisionare le modifiche e collaborare su progetti...

Malicious code in sm-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa2741ebbd0df8c6f349a4d34361cc3d814fe878f3f4521fd771a855cfdc152b Package [email protected] defines preinstall and postinstall lifecycle scripts that issue plain-HTTP GET requests to a hardcoded bare-IP endpoint at...

MAL-2026-14393 Malicious code in sm-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa2741ebbd0df8c6f349a4d34361cc3d814fe878f3f4521fd771a855cfdc152b Package [email protected] defines preinstall and postinstall lifecycle scripts that issue plain-HTTP GET requests to a hardcoded bare-IP endpoint at...

CVE-2026-8732

CVE-2026-8732 - WordPress WP Google Map Pro Massen-Scanner & Automatischer Admin-Ersteller 📌 Beschreibung Dieses Tool nutzt CVE-2026-8732 aus, eine Sicherheitslücke im WP Google Map Pro -Plugin für WordPress. Die Schwachstelle ermöglicht es einem nicht authentifizierten Angreifer, über einen...

CVE-2024-54363-Exploit

CVE-2024-54363-Exploit Fehlerhafte Zuweisung von Berechtigungen in nssTheme Wp NssUser Register ermöglicht eine Privilegienausweitung. Dieses Problem betrifft Wp NssUser Register: von n/a bis 1.0.0. Beschreibung Das Plugin nssTheme Wp NssUser Register für WordPress ist anfällig für ein Problem mi...

CVE-2024-36985

CVE-2024-36985 Todos os códigos de exploração são gerados pelo gemini. Função de administrador do Splunk necessária. Aplicativo Splunkarchiver ativado. Você também pode executar o SPL abaixo na pesquisa para acionar o RCE. root@kitploit: | copybuckets data=""providers": "pwnprovider":...

CVE-2025-56311

CVE-2025-56311: Aviso de Segurança – Vulnerabilidade CSRF na Função de Reinicialização do Roteador FD602GW-DX-R410 Prova de Conceito e Aviso de Segurança para uma vulnerabilidade de Cross-Site Request Forgery CSRF na interface administrativa do roteador de fibra FD602GW-DX-R410 Firmware V2.2.14. ...

majordomo-CVE-2026-27174-poc

majordomo-CVE-2026-27174-poc Ein Proof-of-Concept, das eine nicht authentifizierte Remote-Codeausführung über die PHP-Konsolenfunktion des Admin-Panels in MajorDomo Major Domestic Module ausnutzt. Schwachstelle Das Admin-Panel von MajorDoMo stellt über /admin.php eine PHP-Auswertungskonsole berei...

qubes-core-admin

Qubes core, versione 3 Questo è il ramo master del core di Qubes OS. La documentazione API è disponibile: https://dev.qubes-os.org/projects/core-admin/en/latest/...

CVE-2026-73847-emlog-PoC

CVE-2026-73847 — Assistente de IA do emlog: CSRF → Execução de SQL → Assunção total da conta de administrador PoC para a falta de proteção contra CSRF no endpoint executetool do Assistente de IA do emlog pro, que permite a um atacante aproveitar a sessão autenticada de um administrador para...

CVE-2026-13598

The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during account registration, allowing unauthenticated attackers to create a new administrator account and gain a logged-in administrator session, leading to full site takeover...

RedSun-

RedSun Il repository della vulnerabilità Red Sun Ora, normalmente mi limiterei a pubblicare il codice PoC e lascerei che gli altri lo capissero da soli. Ma per questo non posso, è troppo divertente. Quando Windows Defender si accorge che un file dannoso ha un tag cloud, per qualche motivo stupido...

CVE-2024-31114

CVE-2024-31114 - WordPress Shortcode Addons RCE Exploit Shortcode Addons = 3.2.5 – Authentifizierter Admin+ Upload beliebiger Dateien CVE-ID: CVE-2024-31114 CVSS-Score: 9.1 Kritisch 🛠️ Schwachstellenbeschreibung Das Shortcode Addons – with Visual Composer, Divi, Beaver Builder, and Elementor...

Bludit-3-9-2-bb

Bludit-3-9-2-bb Bludit 3.9.2 - bypass bruteforce - CVE-2019-17240 Script molto semplice basato su CVE-2019-17240. POC originale e spiegazione: https://github.com/bludit/bludit/pull/1090. root@kitploit: usage: python ./bludit-3-9-2-bb.py -l 'http://sitename.com/admin/login' -u...

CVE-2026-60084

SiYuan versions before v3.7.4 contain an arbitrary file deletion vulnerability in the /api/search/removeTemplate endpoint that accepts an unvalidated path parameter passed directly to os.RemoveAll. Authenticated admin attackers can supply absolute filesystem paths to recursively delete any file o...

CVE-2026-59808

AVideo through commit 9c39d8c8 contains an authentication bypass vulnerability where deduplicateByEncoderQueueId returns videoidhash credentials for any video by encoderqueueid without ownership verification, and useVideoHashOrLogin converts this hash into passwordless login as the video owner...