CVE-2026-1242

The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callback in all versions up to, and including, 4.2.6 due to the use of an AND && operator instead of an OR || operator. This makes it possible for authenticated attackers, with...

CVE-2026-1242

The BlockSpare plugin for WordPress (Gutenberg Site Builder Blocks & Starter Sites) is vulnerable to authorization bypass in all versions up to and including 4.2.6 . The root cause is a logic error in the permission callback where an AND (&&) operator was used instead of an OR (||) operator, allo...

EUVD-2026-83541

The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callback in all versions up to, and including, 4.2.6 due to the use of an AND && operator instead of an OR || operator. This makes it possible for authenticated attackers, with...

CVE-2026-1242 BlockSpare - Gutenberg Site Builder Blocks & Starter Sites <= 4.2.6 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Post Creation

The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callback in all versions up to, and including, 4.2.6 due to the use of an AND && operator instead of an OR || operator. This makes it possible for authenticated attackers, with...

EUVD-2026-83499

The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.3 does not sufficiently restrict which PHP functions can be used as a custom field-validation callback, relying on a blocklist that omits a file-deletion function, allowing users able to manage forms to cause arbitrary...

CVE-2026-19860 JetFormBuilder 3.5.6.2 - 3.6.5.2 - Admin+ Arbitrary File Deletion via Server-Side Validation Callback

The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.3 does not sufficiently restrict which PHP functions can be used as a custom field-validation callback, relying on a blocklist that omits a file-deletion function, allowing users able to manage forms to cause arbitrary...

CVE-2026-19860

The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin (versions 3.5.6.2 through 3.6.5.2 ) allows arbitrary file deletion on the server due to an insufficient blocklist of PHP functions permitted as custom field-validation callbacks. The blocklist omits a file-deletion function, enabli...

CVE-2023-22432

CVE-2023-22432 Vérification du PoC de la vulnérabilité web2py CVE-2023-22432 Une vulnérabilité CVE-2023-22432 dans web2py a été divulguée le 31 janvier 2023 heure américaine. Cet article décrit notre discussion sur cette vulnérabilité et les résultats de notre vérification. Résumé de la...

CVE-2026-49176_BOF

CVE-2026-49176 Cobalt Strike BOF Cobalt Strike Beacon Object File BOF pour l'élévation de privilèges locale via le WalletService Windows CVE-2026-49176 , corrigé en juillet 2026. Depuis un Beacon à intégrité moyenne utilisateur standard, cet outil prépare une base de données ESE Wallet...

VectorKernel

VectorKernel PoCs لتقنيات الروتكيت في وضع النواة للبحث أو التعليم. حاليًا تركز على نظام ويندوز. جميع الوحدات تدعم أنظمة x64 ذات 64 بت فقط. البيئة جميع الوحدات تم اختبارها في Windows 11 x64. لاختبار التعريفات drivers، يمكن استخدام الخيارات التالية لجهاز الاختبار: 1. تمكين تحميل التعريفات الموقعة...

PHPJabbers Callback Widget v1.0 - Cross-Site Scripting

There is a Cross Site Scripting XSS vulnerability in the "theme" parameter of preview.php in PHPJabbers Callback Widget v1.0. id: CVE-2023-40755 info: name: PHPJabbers Callback Widget v1.0 - Cross-Site Scripting author: ritikchaddha severity: medium description: | There is a Cross Site Scripting...

LearnPress < 4.3.0 - Arbitrary Callback Execution to Information Exposure

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 4.2.9.4. This is due to missing capability checks in the REST endpoint /wp-json/lp/v1/loadcontentviaajax which allows arbitrary callback execution of...

CVE-2026-33017

CVE-2026-33017 Langflow RCE ★ CVE-2026-33017 Langflow PoC d'exécution de code à distance ★ https://github.com/user-attachments/assets/562fc637-6be1-4ab9-a396-bfad56447af7 Configuration de l'environnement Utilisez les commandes suivantes pour construire et exécuter l'environnement Langflow...

Log4Shell

log4shell Un scanner entièrement automatisé, précis et complet pour trouver des hôtes log4j vulnérables Fonctionnalités Prise en charge des listes d'URL. Fuzzing de plus de 60 en-têtes de requête HTTP. Fuzzing des paramètres de données HTTP POST. Fuzzing des paramètres de données JSON. Prend en...

DarkLoadLibrary

DarkLoadLibrary LoadLibrary pour des opérations offensives. Comment ça marche ? https://www.mdsec.co.uk/2021/06/bypassing-image-load-kernel-callbacks/ Utilisation root@kitploit: DARKMODULE DarkModule = DarkLoadLibrary LOADLOCALFILE, // control flags L"TestDLL.dll", // local dll path, if loading...

log4j_checker

Log4jchecker.py CVE-2021-44228 Описание Этот скрипт на Python3 пытается найти серверы, уязвимые для CVE-2021-44228, также известной как Log4Shell, очень критической уязвимости, обнаруженной в библиотеке журналирования Log4j2 на Java. Он не полагается на внешние DNS-логи серверы для проверки и...

CVE-2021-26855_SSRF

CVE-2021-26855SSRF CVE-2021-26855 Exchange SSRF POC change the ceye.io tokne & Identifier : token = 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX' dnsurl = randomstr + '.XXXXXX.ceye.io' python CVE-2021-26855SSRF.py https://a.com...

area51

Every callback, captured. The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a dashboard you control, and it gets whatever response you choose in return...

CVE-2021-44228-log4jVulnScanner-metasploit

CVE-2021-44228-log4jVulnScanner-metasploit Outil open source de détection et de scanning pour découvrir et fuzzer la vulnérabilité Log4J RCE CVE-2021-44228 préparation POC root@kitploit: git clone https://github.com/TaroballzChen/CVE-2021-44228-log4jVulnScanner-metasploit cd...

effective-waffle

effective-waffle encore un truc de chiffrement de veille. J'ai aussi utilisé le nom de dépôt GitHub par défaut pour celui-ci. TpAllocWork + TpPostWork + TpWaitForWork + TpReleaseWork pour créer + exécuter + nettoyer le callback. Le callback est un assemblage bricolé qui met en file une tonne de...