exploit_cve-2023-26326_using_cve-2024-2961

IconvCVE-2024-2961을 사용한 BuddyFormsCVE-2023-26326 익스플로잇 이 작업은 저Omar Elshopky와 Nour El Dien Bassiouny가 수행했습니다. 이 저장소는 Joshua Martinelle이 보안 권고에서 처음 보고한 WordPress BuddyForms 플러그인CVE-2023-26326에 대한 익스플로잇을 포함합니다. 이 익스플로잇은 Iconv, 문자셋을 RCE로 설정: PHP 엔진을 해킹하기 위해 glibc 익스플로잇하기 블로그에서 제안된 기법을 활용하며, @ambionic...

CVE-2024-2961

Buddyforms 2.7.7 CNEXT RCE CVE-2024-2961 및 CVE-2023–26326을 악용하여 RCE 달성 사용법 git-clone https://github.com/suce0155/CVE-2024-2961buddyforms2.7.7 pip install -r requirements.txt python3 buddyforms2.7.7cnextexploit.py http://site/wp-admin/admin-ajax.php ip port 분석 및 기술 세부 사항 제 블로그 게시물을 확인하세요 POC...

CVE-2026-81785

Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...

CVE-2026-81785

CVE-2026-81785 affects the WordPress BuddyForms plugin , versions 2.9.0 and earlier . The vulnerability is an unauthenticated Broken Access Control flaw, meaning an attacker can exploit it over the network without any credentials or user interaction. The CVSS v3.1 score is 6.5 (Medium) , with low...

EUVD-2026-75518

Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...

CVE-2026-81785 WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...

CVE-2026-81785 WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...

CVE-2026-81785: Missing Authorization

Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...

PT-2026-89432

Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...

WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peng Zhou in WordPress Plugin BuddyForms versions = 2.9.0...

CVE-2018-21003

The buddyforms plugin before 2.2.8 for WordPress has SQL injection...

CVE-2025-62973

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

CVE-2025-62973

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

CVE-2025-62973

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

CVE-2025-62973 WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

CVE-2025-62973 WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

EUVD-2025-35972

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

CVE-2025-62973

CVE-2025-62973 is a Missing Authorization / Broken Access Control vulnerability in Themekraft BuddyForms WordPress plugin, affecting BuddyForms versions from the earliest through 2.9.0. The issue allows Accessing Functionality Not Properly Constrained by ACLs. Public records (NVD, Red Hat, CIRCL,...

PT-2025-43845

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

CVE-2025-62973: Missing Authorization

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...