57 matches found
CVE-2026-63030-CVE-2026-60137-wp2shell-poc
wp2shell — Proof‑of‑Concept di Blind SQL Injection temporizzata su WordPress REST API → RCE Descrizione pocwptot.py è un proof‑of‑concept PoC per sfruttare la vulnerabilità di blind SQL injection basata sul tempo nell'endpoint batch delle WordPress REST API, ed eseguire una catena di escalation...
WP2Shell
WP2Shell - CVE-2026-63030 / CVE-2026-60137 WordPress REST API Batch SQL Injection to RCE Strumento completo di scoperta e sfruttamento per la vulnerabilità di SQL injection nell'endpoint Batch dell'API REST di WordPress. Questo strumento sfrutta una vulnerabilità critica di SQL injection...
wp2shell-poc
wp2shell-poc Proof-of-concept indipendente per l'iniezione SQL blind basata su confusione di route del batch REST non autenticato di WordPress, associata all'avviso wp2shell di Searchlight Cyber. Questo repository non è il checker ufficiale di Searchlight Cyber. check conferma il percorso SQLi,...
WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion
WordPress core versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 are vulnerable to a pre-authentication route confusion issue in the REST API batch endpoint /?restroute=/batch/v1. A malformed nested batch request desynchronizes the batch router, allowing unauthenticated requests to reach...
wp2shell
wp2shell Sfrutta la route confusion dell'API REST di WordPress CVE-2026-63030 + l'SQL injection CVE-2026-60137 nell'endpoint batch per ottenere l'esecuzione remota di codice. Vulnerabilità Route Confusion CVE-2026-63030 L'endpoint batch /batch/v1 dell'API REST di WordPress non isola correttamente...
wp2shell-lab
wp2shell-lab PoC e laboratório educativo para CVE-2026-63030 + CVE-2026-60137 : injeção SQL pré-autenticação no core do WordPress via confusão de rota batch. Descoberto por Adam Kues Searchlight Cyber / Assetnote. Corrigido no WordPress 6.9.5 / 7.0.2. Início rápido root@kitploit: iniciar o...
CVE-2026-75850
ArcadeDB before 26.8.1 fails to bind the authenticated principal setCurrentUser on its batch and time-series HTTP handlers. Because no principal is bound on the worker thread, the engine's fine-grained per-type ACL layer LocalBucket.checkPermissionsOnFile does not execute for these handlers. In...
EUVD-2026-60611
ArcadeDB before 26.8.1 fails to bind the authenticated principal setCurrentUser on its batch and time-series HTTP handlers. Because no principal is bound on the worker thread, the engine's fine-grained per-type ACL layer LocalBucket.checkPermissionsOnFile does not execute for these handlers. In...
CVE-2026-75850
ArcadeDB before 26.8.1 contains a per-type ACL bypass in its batch and time-series HTTP handlers . The root cause is that the authenticated principal (setCurrentUser) is not bound on the worker thread, causing the engine's fine-grained ACL layer (LocalBucket.checkPermissionsOnFile) to be skipped ...
CVE-2026-9859
Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21, 11.8.x = 11.8.3 fail to enforce PermissionManageBoardRoles on the channelId field of the batch endpoint, which allows an authenticated board editor to relink any board they can edit to an arbitrary channel via a crafted PATCH request...
PT-2026-76877
Name of the Vulnerable Software and Affected Versions Mattermost versions 11.7.0 through 11.7.6 Mattermost versions 10.11.0 through 10.11.21 Mattermost versions 11.8.0 through 11.8.3 Description The Boards plugin fails to enforce the PermissionManageBoardRoles authorization on the channelId field...
CVE-2026-67342
ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints that fail to validate database access permissions. Attackers can access and modify databases they are not authorized to use by directly calling...
CVE-2026-67342
ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints that fail to validate database access permissions. Attackers can access and modify databases they are not authorized to use by directly calling...
CVE-2026-67342 ArcadeDB before 26.7.2 Authorization Bypass via Database Handlers
ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints that fail to validate database access permissions. Attackers can access and modify databases they are not authorized to use by directly calling...
CVE-2026-67342
ArcadeDB is affected in versions before 26.7.2 where an authorization bypass exists in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints, failing to validate database access permissions. Attackers can call affected endpoints with arbitrary database parameters to access and m...
Exploit for Interpretation Conflict in Wordpress
CVE-2026-63030 / CVE-2026-60137 — "wp2shell" WordPress Core RC...
Exploit for CVE-2026-63030
Plugin Acyber Wordpress !WARNING Temporary Emergency...
Exploit for CVE-2026-63030
CVE-2026-63030 WordPress REST Batch Route-Confusion SQL I...
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Description WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the authornotin WPQuery SQL Injection CVE-2026-60137, could allow an attacker to perform SQL Injection and achieve Remote Code Execution...