5600 matches found
CVE-2026-3629
CVE-2026-3629 - Comprobador de Escalada de Privilegios en WordPress Una herramienta de línea de comandos para detectar CVE-2026-3629 , una vulnerabilidad crítica de escalada de privilegios en el plugin de WordPress "Import and export users and customers". 📢 Únete a Nuestra Comunidad ¡Mantente al...
csv-plus_vulnerability
csv-plusvulnerability 👻 2-Click Arbitrary Code Execution Vulnerability. CVE-2022-21241 ⚠ This PoC was created to alert users and investigate vulnerabilities in their own CSV+, and is prohibited to be used for attacks. Vulnerability The following versions are vulnerable. CSV+ click me 👻...
vt-py-scanner
VirusTotal Scanner Python script to analyze ALL files with the VirusTotal API, scanning folders and subfolders recursively. Optimized for Windows. Features Scans ALL files in a folder and its subfolders Configuration via .env file - Save your API key and settings Interactive mode - Also works...
iTop-CVEs-exploit
iTop-CVEs-exploit This repository contains exploits for iTOP CVE-2024-52002, 52000, 31998, 31448 that involve CSRF+XSS chaining to get admin privileges on the software. Set up 1. Download the vulnerable iTOP version from docker root@kitploit: sudo docker run -d -p 8090:80 --name=my-itop2...
CVE-2023-36250
CVE-2023-36250 Vulnerabilidad de inyección CSV en el rastreador de tiempo de GNOME versión 3.0.2, que permite a atacantes locales ejecutar código arbitrario a través de un archivo .tsv manipulado al crear un nuevo registro. Tipo de Vulnerabilidad Inyección CSV Descubridor Bruno Teixeira Referenci...
CVE-2020-25398
CVE-2020-25398 Existe una inyección CSV en InterMind iMind Server hasta la versión 3.13.65 a través de la funcionalidad de exportación CSV. Información Descripción: Un atacante puede configurar datos específicos, que podrían exportarse a un archivo csv malicioso con una carga útil de ejecución de...
log4shell_sentinel
Log4Shell Sentinel - Un escáner inteligente para CVE-2021-44228 Introducción Aunque se han publicado algunas herramientas excelentes para ayudar a las organizaciones a escanear sus entornos en busca de aplicaciones vulnerables a la crítica vulnerabilidad Log4J / CVE-2021-44228, consideré que:...
CVE-2024-29375
CSV-Injection-PoC Inyección CSV en Addactis IBNRS 3.10.3.107 AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L CVSS: 7.1, Puntuación de Impacto: 5.3, Puntuación de Explotación: 1.3 Componentes Afectados: parámetros de Descripción del Proyecto, Identificadores, Nombre del Triángulo Personalizado dentro de...
CVE-2026-92540
The Import and export users and customers WordPress plugin before 2.5.2 does not correctly enforce the promoteusers capability when assigning roles during a CSV import, allowing users with only the createusers capability to create new administrator accounts or promote existing users to...
CVE-2026-16542
The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user-supplied URL before requesting it server-side during a CSV import, allowing high-privileged users to perform Server-Side Request Forgery attacks...
EUVD-2026-83677
The Import and export users and customers WordPress plugin before 2.5.2 does not correctly enforce the promoteusers capability when assigning roles during a CSV import, allowing users with only the createusers capability to create new administrator accounts or promote existing users to...
CVE-2026-92540
The Import and export users and customers WordPress plugin before version 2.5.2 contains a privilege escalation flaw. The plugin does not correctly enforce the promote_users capability (via the caller_can_promote_users function) when assigning roles during a CSV import , allowing users holding on...
CVE-2026-16542 Import and export users and customers < 2.4.5 - Admin+ SSRF via bp_avatar
The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user-supplied URL before requesting it server-side during a CSV import, allowing high-privileged users to perform Server-Side Request Forgery attacks...
EUVD-2026-83661
The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user-supplied URL before requesting it server-side during a CSV import, allowing high-privileged users to perform Server-Side Request Forgery attacks...
CVE-2020-10131
CVE-2020-10131 - CVE-2020-10131 - El producto SearchBlox anterior a V-9.2.1 es vulnerable a la inyección de macros CSV. Descripción del producto: SearchBlox simplifica la búsqueda empresarial para organizaciones complejas. Las herramientas intuitivas e inteligentes de SearchBlox ofrecen una...
CVE-2021-46363
CVE-2021-46363: Formula Injection in Magnolia CMS An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported...
CHIRP-CodeExecution_via_Malicious_ImageFile
CHIRP — Arbitrary Code Execution via eval in Kenwood ITM Driver Product: CHIRP - An open-source project for programming Ham Radios. Affected Versions: URL: https://github.com/kk7ds/chirp, https://chirpmyradio.com Affected Versions: = chirp-next-20260814 CWE: CWE-95 Eval Injection Overview CHIRP's...
sysmon-modular
sysmon-modular | A Sysmon configuration repository for everybody to customise Sysmon Modular is a configuration repository for Microsoft Sysinternals Sysmon. Small XML modules make it easier to select, review and maintain the telemetry that is useful to your organisation. The sysmon-modular Go to...
Security_Article
SecurityArticle scrapy website Article and link ... 0x01 Crear un nuevo proyecto 0x02 Definir los objetivos 0x03 Crear el crawler 0x04 Almacenar contenido e.g. pip3 install lxml,scrapy root@kitploit: 文章标题 ArticleTitle //@id="wrapper"/main/div/article/header/h5/a/text...