517383 matches found
CVE-2025-25101
🚀 CVE-2025-25101 - WordPress Munk Sites Plugin = 1.0.7 - CSRF to Arbitrary Plugin Installation 📌 Overview CVE-2025-25101 is a Cross-Site Request Forgery CSRF vulnerability in the MetricThemes Munk Sites plugin for WordPress versions ≤ 1.0.7. This vulnerability allows an unauthenticated attacker t...
CVE-2025-1306
Newscrunch Exploit CVE-2025-1306 🚨 Overview This exploit targets a Cross-Site Request Forgery CSRF to Arbitrary File Upload vulnerability CVE-2025-1306 in the Newscrunch WordPress theme. Due to missing nonce validation in the newscrunchinstallandactivateplugin function, an unauthenticated attacke...
CVE-2024-52380-Exploit
CVE-2024-52380-Exploit Picsmize plugin for WordPress is vulnerable to arbitrary file uploads. Description This script exploits a vulnerability CVE-2024-52380 in the Picsmize plugin for WordPress, allowing unauthenticated attackers to perform arbitrary file uploads. This vulnerability exists in al...
CVE-2024-54262
CVE-2024-54262 Exploit CVE-2024-54262: Arbitrary File Upload in Import Export for WooCommerce Overview This script exploits a vulnerability in the "Import Export for WooCommerce" WordPress plugin. The vulnerability allows unauthorized users to upload arbitrary files, leading to potential remote...
CVE-2024-50492
🚨 CVE-2024-50492 - ScottCart 🔥 Exploit Script for ScottCart 🧑💻 By Nxploit – Khaled Alenazi 📌 Description The ScottCart plugin for WordPress versions ≤ 1.1 is vulnerable to Remote Code Execution RCE. This allows unauthenticated attackers to execute arbitrary PHP functions on the server through a...
CVE-2024-51788
💀 CVE-2024-51788 - WordPress The Novel Design Store Directory Plugin = 4.3.0 - Unauthenticated Arbitrary File Upload 🚨 Overview CVE-2024-51788 is a newly disclosed critical vulnerability affecting the The Novel Design Store Directory WordPress plugin = v4.3.0. This flaw allows unauthenticated...
CVE-2024-10674
CVE-2024-10674 Exploit - Th Shop Mania = 1.4.9 🚀 Overview This repository contains an exploit for the vulnerability identified as CVE-2024-10674 in the Th Shop Mania WordPress theme. The vulnerability allows authenticated users with at least Subscriber-level access to install and activate arbitra...
CVE-2024-10673
🔥 Overview This script exploits CVE-2024-10673 , a critical vulnerability found in the Top Store WordPress Theme = 1.5.4. The flaw allows authenticated users with subscriber-level access or higher to install and activate arbitrary plugins via unprotected AJAX requests. ⚠️ Severity & Impact...
CVE-2024-1247-PoC
CVE-2024-1247-PoC Post Saint = 1.3.1 plugin for WordPress Arbitrary File Upload Description The Post Saint plugin for WordPress versions up to and including 1.3.1 is vulnerable to arbitrary file uploads due to missing capability checks and file type validation. Authenticated attackers with at lea...
CVE-2023-51409
CVE-2023-51409 AI Engine: ChatGPT Chatbot = 1.9.98 - Unauthenticated Arbitrary File Upload via restupload Description This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. usage:...
CVE-2024-10629
🛠️ GPX Viewer Exploit CVE-2024-10629 This repository contains a proof-of-concept exploit for the GPX Viewer plugin for WordPress, which is vulnerable to arbitrary file creation CVE-2024-10629. The vulnerability allows authenticated attackers with subscriber-level access and above to create...
CVE-2024-48990
CVE-2024-48990 introdution This vulnerability takes advantage of the way in which needrestart manages the environment variable, to be more precise, PYTHONPATH can be hijacked by modifying the PYTHONPATH variable to a directory that contains a malicious library, thus executing and gaining access, ...
CVE-2024-12252
SEO LAT Auto Post = 2.2.1 - Remote Code Execution Description The SEO LAT Auto Post plugin for WordPress is vulnerable to file overwrite due to a missing capability check on the remoteupdate AJAX action in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated...
log4jcheck
Northwave Log4j CVE-2021-44228 checker Friday 10 December 2021 a new Proof-of-Concept 1 addressing a Remote code Execution RCE vulnerability in the Java library 'log4j' 2 was published. This vulnerability has not been disclosed to the developers of the software upfront. The vulnerability is being...
Important: Red Hat Security Advisory: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response
A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...
CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning
CVE-2024-4879 和 CVE-2024-5217 ServiceNow RCE 扫描 使用 Nuclei 和 Shodan Dork 扫描 CVE-2024-4879 和 CVE-2024-5217 ServiceNow RCE 漏洞。 漏洞信息资源 https://www.assetnote.io/resources/research/chaining-three-bugs-to-access-all-your-servicenow-data 使用方法 nuclei -t CVE-2024-4879-Detect-Database-ServiceNow.yaml -l...
HFS2.3_poc
HFS2.3poc HFS2.3未经身份验证的远程代码执行CVE-2024-23692 python HFS2.3poc.py -h root@kitploit: -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--' --' usage: HFS2.3poc.py -h -u URL -f...
CVE-2024-32002-PoC
CVE-2024-32002-PoC This repo contains the script or commands to create & demonstrate the git vulnerability CVE-2024-32002. This vulnerability allows an attacker to execute arbitrary code on the victim's machine. For detailed information, please refer to the following blog post:...