CVE-2026-63030-POC

wp2shell — CVE-2026-63030 + CVE-2026-60137 Cadena de exploits RCE de un día para WordPress. Sin autenticación. CVSS 9.8. Cero dependencias — solo stdlib de Python 3.8+. Versiones afectadas Rama| Vulnerable| Parcheada ---|---|--- 6.9.x| 6.9.0 – 6.9.4| ≥ 6.9.5 7.0.x| 7.0.0 – 7.0.1| ≥ 7.0.2 La caden...

exploits-rconfig

Exploits Drei Exploits für rconfig = 3.9.4 : root@kitploit: CVE-2019-19509 : authenticated RCE CVE-2019-19585 : Local Privilege Escalation root CVE-2020-10220 : unauthenticated SQLi rconfigrootRCEunauth.py : chaining the three CVEs above to get root reverse shell without authentication...

FreePBX-CVE-2025-57819-CVE-2025-61678

FreePBX-CVE-2025-57819-CVE-2025-61678 Combina CVE-2025-57819 SQL injection a query impilate e CVE-2025-61678 caricamento di file autenticato in FreePBX Endpoint Manager per ottenere Esecuzione Remota di Codice RCE. Solo per uso educativo. Riferimenti:...

CVE-2026-13188 DialogHandler Parameters Tampering Vulnerability in Telerik UI for ASP.NET AJAX

In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler request parameters may be tampered with, potentially altering dialog server-side behavior and enabling chained exploitation...

bug-bounty-reports

Bug Bounty Reports — Josef Basner Sanitized, redacted, resp...