26 matches found
Exploit for CVE-2026-10795
CVE-2026-10795 UpdraftPlus Auto-Exploit & Mass Scanner Au...
PT-2026-46371
Unauthenticated Local File Inclusion in Eros = 1.3 versions...
PT-2026-46326
Unauthenticated Local File Inclusion in Raider Spirit = 1.1.2 versions...
PT-2026-46376
Unauthenticated Local File Inclusion in Tipsy = 1.1 versions...
PT-2026-46364
Unauthenticated Local File Inclusion in Gita = 1.11 versions...
đ WordPress AI Engine 3.1.3 Mass Enumeration
This advisory documents a fully automated PHP-based exploitation framework designed to perform mass enumeration, plugin detection, token extraction, and automated account creation targeting vulnerable WordPress MCP-related REST API endpoints...
From Exposure to Exploitation: How AI Collapses Your Response Window
Weâve all seen this before: a developer deploys a new cloud workload and grants overly broad permissions just to keep the sprint moving. An engineer generates a "temporary" API key for testing and forgets to revoke it. In the past, these were minor operational risks, debts youâd eventually pay do...
Exploit for Path Traversal in Openbsd Openssh
Bastion AI-Powered Penetration Testing Platform for macOS...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell â Advanced Discovery & Exploitation Framework An...
Exploit for Injection in Google Android
EXPLOITER: Automated Exploit for CVE-2024-0044 EXPLOITER...
Exploit for Improper Input Validation in Cacti
CVE-2024-25641 Exploit for Cacti 1.2.26 Exploiting CVE-2024-2...
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
Summary IBM QRadar SIEM includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. These have been addressed in the update. Vulnerability Details CVEID:CVE-2024-11187 DESCRIPTION: It is possible to construct a zone such that some queries ...
Exploit for Missing Authorization in Spicethemes Newscrunch
Newscrunch Exploit CVE-2025-1307 đ¨ Overview This exploit...
Qualys VMDR Rated as the Only Leader and Outperformer by Independent Analyst Firm for the Second Consecutive Year
Qualys VMDR received the highest possible scores for risk-based assessment, cloud-native and serverless function scanning, and flexibility of deployment, among 20 vendors evaluated in this report. As the threat landscape evolves, vulnerability management remains a cornerstone of security...
Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity
CVE-2023-42793 Exploit Script Overview This script is des...
Exploit for Command Injection in Deltaww Dx-3021L9_Firmware
CVE-2022-46169 Pseudo Shell Description This Python script...
Shennina - Automating Host Exploitation With AI
Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nmap for performing the attacks, as well as being...
CVE-2019-10692
In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement. Recent assessments: rootOptional at March 09, 2020 9:03pm UTC reported: This CVE is fairly obscure due to it being present in the WordPre...
CirCarLife SCADA 4.3.0 - Credential Disclosure
Exploit Title: CirCarLife SCADA 4.3.0 - Credential Disclosure Date: 2018-09-10 Exploit Author: David Castro Vendor Homepage: https://circontrol.com/ Shodan Dork: Server: CirCarLife Server: PsiOcppApp Version: CirCarLife Scada all versions under 4.3.0 OCPP implementation all versions under 1.5.0 C...
Bumble: Compromising the user ID
Vulnerability allows to compromise the user ID in the "Dating" menu. This is a serious vulnerability that violates the logic of the site and allows the attacker to write a message to the user he likes before the user responds reciprocally. In order to play the vulnerability, you need to go to the...