iTop-CVEs-exploit

iTop-CVEs-exploit 该仓库包含针对 iTOP CVE-2024-52002、52000、31998、31448 的漏洞利用程序，这些漏洞通过 CSRF+XSS 链式攻击，获取软件管理员权限。 环境搭建 1. 从 Docker 下载存在漏洞的 iTOP 版本 root@kitploit: sudo docker run -d -p 8090:80 --name=my-itop2 vbkunin/itop:3.1.1 2. 访问 localhost:8090 并执行标准安装 3. 使用以下命令获取密码 root@kitploit: sudo docker logs...

CVE-2026-3629

CVE-2026-3629 - Comprobador de Escalada de Privilegios en WordPress Una herramienta de línea de comandos para detectar CVE-2026-3629 , una vulnerabilidad crítica de escalada de privilegios en el plugin de WordPress "Import and export users and customers". 📢 Únete a Nuestra Comunidad ¡Mantente al...

CVE-2026-54166

Shelf , a physical asset tracking platform, contains a Server-Side Request Forgery (SSRF) in its Asset CSV Content Import feature prior to version 1.20.3 . Authenticated users with the asset:import permission can bypass imageUrl validation using image-extension suffixes, path keywords, domain sub...

CVE-2025-9215

StoreEngine 强大的 WordPress 电子商务插件（支付、会员、联盟营销、销售等）= 1.4.0 - 已认证（订阅者+）任意文件下载 StoreEngine 插件在其 CSV 导入/导出功能中包含一个漏洞，该漏洞允许任何已认证用户 （订阅者、作者、编辑等）从服务器下载任意文件，包括敏感的系统文件、WordPress 配置文件以及插件源代码。该漏洞源于 storeenginecsv/filedownload 端点缺乏适当的路径清理，仅依赖 nonce 验证来保证安全，而 storeenginenonce 通过插件的 JavaScript 暴露给所有前端用户...

CVE-2025-9216

StoreEngine – 强大的WordPress电子商务插件，支持支付、会员、联盟营销、销售等 root:x:0:0:root:/root:/bin/bash daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin bin:x:2:2:bin:/bin:/usr/sbin/nologin sys:x:3:3:sys:/dev:/usr/sbin/nologin...

import-users-from-csv-with-meta

import-users-from-csv-with-meta Importar usuarios desde CSV con Meta 1.15 - Exportación no autorizada de usuarios autenticados...

BurpImportSitemap

Extensión Import To Sitemap Import To Sitemap es una extensión de Burp Suite para importar archivos CSV de wstalker o archivos de exportación de ZAP al Sitemap de Burp. También incluye un menú contextual para enviar elementos de solicitud/respuesta desde cualquier pestaña al sitemap. Licencia...

CVE-2025-64027

Información del Producto Snipe-IT es un sistema de gestión de activos de TI gratuito y de código abierto FOSS construido sobre Laravel. Proporciona seguimiento de activos de hardware, gestión de licencias de software, accesorios e inventario de consumibles para equipos de operaciones de TI. Se...

CVE-2026-18594

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

CVE-2026-18594 Advanced Contact form 7 DB <= 2.1.3 - Missing Authorization to Authenticated (Custom+) Unauthorized Data Import via 'import_cf7_id'

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

CVE-2026-18594

The Advanced Contact Form 7 DB plugin for WordPress is vulnerable to authorization bypass in all versions up to and including 2.1.3 . The root cause is improper verification of user authorization, allowing authenticated attackers with custom-level access or above to import forged CSV submission r...

EUVD-2026-75238

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

PT-2026-89267

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

CVE-2025-9776

CVE-2025-9776：CatFolders WordPress 插件中的认证 SQL 注入漏洞 关键词： CVE-2025-9776, CatFolders WordPress 漏洞, SQL 注入 WordPress, 认证 SQL 注入, WordPress 安全, CSV 导入漏洞, WordPress 插件利用, CWE-89, WordPress 数据库攻击, 媒体库漏洞, WordPress CVE 2025 目录 概述 漏洞详情 技术分析 利用证明 修复指南 CVSS 指标 参考 安全联系方式 概述 在 CatFolders WordPress 插件中发现了一个经过认...

CVE-2026-86763 snipe-it 7.0.12 through 8.6.3 Authorization Bypass via Importer

Snipe-IT versions = 7.0.12 and = 8.6.3 contain an authorization bypass in the Livewire importer component App\Livewire\Importer, mounted at the imports.index route. The component only checked the broad 'import' ability at mount time, while its files and activeFile computed properties queried the...

EUVD-2026-43001

Snipe-IT's import createdby can be overwritten...

CVE-2026-81728 Dolibarr before 24.0.0 SQL Injection via the CSV and XLSX Import Update Keys

Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads its update keys with GETPOST'updatekeys', 'array' in htdocs/imports/import.php, which applies only the generic alphanohtml filter: that strips HTML but leaves SQL keywords, comment markers,...

CVE-2026-81728

Dolibarr before 24.0.0 is affected by a SQL injection in its CSV/XLSX import wizard. The updatekeys parameter in htdocs/imports/import.php is filtered only by alphanohtml, which strips HTML but leaves SQL metacharacters intact. In import_insert() (import_csv.modules.php), submitted values are con...

CVE-2026-2334

An issue was discovered in vsDesk v14.0101. An authenticated attacker with administrative privileges can bypass client-side file validation in the "Import via CSV" component due to a lack of server-side validation. This allows the upload of an arbitrary file, which can lead to Remote Code Executi...

CVE-2026-2334 ) Missing Server-Side File Extension Validation in vsDesk

An issue was discovered in vsDesk v14.0101. An authenticated attacker with administrative privileges can bypass client-side file validation in the "Import via CSV" component due to a lack of server-side validation. This allows the upload of an arbitrary file, which can lead to Remote Code Executi...