TrojanSourceFinder

TrojanSourceFinder TrojanSourceFinder hilft Entwicklern, die „Trojan Source“-Sicherheitslücke im Quellcode zu erkennen. Die Trojan-Source-Sicherheitslücke ermöglicht es einem Angreifer, bösartigen Code harmlos erscheinen zu lassen. Im Allgemeinen versucht der Angreifer, seinen Code als Kommentar...

CVE-2026-18978

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 7.8.1 . The root cause is insufficient input sanitization and output escaping in the plugin's media handling (src/media.cls.php). An unauthenticated attacker can craft a...

CVE-2024-4439

CVE-2024-4439 CVE-2024-4439 docker and poc Configuração do laboratório Após iniciar o contêiner docker, algumas configurações adicionais são necessárias. Acesse 127.0.0.1:8080 e conclua a configuração. No Painel administrativo - Aparência - Temas, selecione um tema, Personalizar, e faça as...

CVE-2026-76053

TranslatePress – Translate Multilingual sites with AI Translation (WordPress plugin) is vulnerable to Stored Cross-Site Scripting in all versions up to and including 3.3.3 . The root cause is insufficient input sanitization and output escaping in the plugin's HTML parser: WordPress's comment KSES...

solidity_CVE-2021-42574-POC

solidityCVE-2021-42574-POC Jan 31 2023, Altin tin-z, github.com/tin-z PoC POC do CVE-2021-42574 para solidity e o compilador solc. instalar root@kitploit: solc and select 0.8.17 version https://github.com/crytic/solc-select foundry https://github.com/foundry-rs/foundry implantar contrato...

CVE-2009-4623

CVE-2009-4623 CVE-2009-4623 पर दूरस्थ शेल: एक गैर-इंटरैक्टिव शेल प्राप्त करें, उन्नत उपयोग के लिए दूसरा शेल खोलें !!! उपयोग: CVE-2009-4623.sh hostnameandPath उदाहरण: CVE-2009-4623.sh http://192.168.1.24/advancedcommentsystem/admin.php विकल्प: -h यह बकवास...

cve-2019-9787_csrf_poc

CVE-2019-9787 CSRF PoC Panoramica PoC della CVE-2019-9787 CSRF Versione WordPress 5.0 riferimento Non usarlo se non per scopi di test. Installazione root@kitploit: $ docker-compose up -d 1. accedi a http://localhost:8080/ e installa WordPress. devi solo creare un account amministratore WP. 2...

CVE-2021-28378

CVE-2021-28378 Details zu dieser CVE hier. Diese CVE betrifft das Fehlen einer String-Escape-Funktion auf der Client-Seite, wenn Inhalte vom Server abgerufen werden. Sie ermöglicht es einem Angreifer, einfach beliebigen Code einzuschleusen, indem er einen Kommentar zu einem Issue oder einem Pull...

CVE-2026-71491

A flaw was found in sqlparse, a Python module for parsing SQL. A remote attacker could exploit this vulnerability by providing specially crafted SQL input that contains numerous comment-only statements. This could cause the groupcomments function to repeatedly rescan these statements, leading to...

hdwebmobile-photo-video-reviews

HDWebmobile Avaliações com Foto e Vídeo Um plugin WooCommerce que permite aos clientes anexar fotos e vídeos curtos às suas avaliações de produtos, exibidos diretamente na lista de avaliações na página do produto. WordPress.org: https://wordpress.org/plugins/hdwebmobile-photo-video-reviews/...

YT-Spammer-Purge

YouTube Spammer Purge Cos'è? - Consente di filtrare e cercare commenti spam sul tuo canale e su canali altrui in molti modi diversi E cancellarli/segnalarli tutti insieme vedi funzionalità sotto. Come scaricare: Clicca sul collegamento "Releases" a destra, poi sulla release più recente, sotto...

Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion

A directory traversal vulnerability in the ZiMB Comment comzimbcomment component 0.8.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1602 info: name: Joomla! Component...

WPEngine WPGraphQL 0.2.3 - Unauthenticated Comment Posting

The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment' is disabled. id: CVE-2019-9881 info: name: WPEngine WPGraphQL 0.2.3 - Unauthenticated Comment Posting author: intelligent-ears severity:...

Advanced Comment System 1.0 - Local File Inclusion

ACS Advanced Comment System 1.0 is affected by local file inclusion via an advancedcomponentsystem/index.php?ACSpath=..%2f URI. id: CVE-2020-35598 info: name: Advanced Comment System 1.0 - Local File Inclusion author: daffainfo severity: high description: ACS Advanced Comment System 1.0 is affect...

CVE-2023-5024

एक्सप्लॉइट शीर्षक: PLANNO 23.04.04 कमेंट क्रॉस साइट स्क्रिप्टिंग एक्सप्लॉइट लेखक: Angel Metz उर्फ PH03N1XSP विक्रेता होमपेज: Planno सॉफ्टवेयर लिंक: GitHub - PlanningBiblio संस्करण: alert1; 4. स्क्रिप्ट दर्ज हो जाने के बाद, रिफ्लेक्टेड XSS प्राप्त करें। दूसरा तरीका 1. अपने क्रेडेंशियल का उपयोग करक...

CVE-2025-70886

CVE-2025-70886 针对 CVE-2025-70886 的概念验证（PoC）利用程序，该漏洞是 Halo CMS（v2.22.4 及更早版本）中的一个持久性拒绝服务漏洞，允许远程攻击者通过提交畸形负载导致管理评论界面崩溃。 基本信息 产品供应商: 凌霞软件 供应商网站: https://www.lxware.cn/ 受影响对象类型: 软件 / Web 应用程序 受影响产品: Halo CMS 受影响产品版本: = v2.22.4 漏洞类型: 持久性 DoS（存储型 DoS）/ 未处理异常 攻击类型: 远程 影响: 拒绝服务（管理评论页面返回 HTTP 500 / 内部服务器错误...

CVE-2026-3844

CVE-2026-3844 Breeze Cache ≤ 2.4.4 - رفع ملفات تعسفي غير مصادق عليه ⚠️ إخلاء مسؤولية root@kitploit: هذه الأداة مقدمة لأغراض تعليمية وبحوث أمنية فقط. الوصول غير المصرح به إلى أنظمة الكمبيوتر غير قانوني. استخدم هذه الأداة فقط على الأنظمة التي تملكها أو لديك إذن صريح لاختبارها. لا يتحمل المؤلف أي...

CVE-2019-9787

CVE-2019-9787 CSRF PoC Обзор PoC CSRF для CVE-2019-9787 WordPress версии 5.1.1 CVE-2019-9787 Не используйте это, ЗА ИСКЛЮЧЕНИЕМ целей ТЕСТИРОВАНИЯ. Установка root@kitploit: docker-compose up -d Атака 1. Перейдите на http://localhost:8080/wp-admin/install.php и установите WordPress. Вам нужно толь...

w3-total-cache-cve-2013-2010

w3-total-cache-cve-2013-2010 w3 total cache cve 2013-2010에서 원격 코드 실행 사용법: python3 w3tcrceexploit.py -u http://example.com -p "system'whoami';" 출력: Targeting: http://example.com + Payload sent successfully. + Check the target for execution of the payload. import requests import argparse def...

CVE-2021-39473

CVE-2021-39473 Base di codice del prodotto interessato HotelManager - v1.2 Componente interessato Kernel.php; Middleware Tipo di attacco Remote Vettori di attacco Per sfruttare questa vulnerabilità, l'utente deve creare "stanze" o "ospiti" o "prenotazioni" o "utenti" e nel campo "commento" o...