CVE-2023-27163-POC

CVE-2023-27163 PoC de SSRF para Request-Baskets CVE-2023-27163 basado en este código de entr0pie. El PoC se ha ampliado para hacer fuzzing del contenido de otro servicio web local o no y devolver el contenido de los archivos encontrados. Uso root@kitploit: python3 CVE-2023-27163.py http://: -t...

CVE-2019-5418

CVE-2019-5418 - Divulgación de contenido de archivos en Rails EDIT : esta CVE puede provocar una ejecución remota de código, más información: https://github.com/mpgn/Rails-doubletap-RCE Existe una posible vulnerabilidad de divulgación de contenido de archivos en Action View. Las cabeceras accept...

CVE-2019-3799

CVE-2019-3799 - Spring-Cloud-Config-Server Directory Traversal Spring Cloud Config, versiones 2.1.x anteriores a 2.1.2, versiones 2.0.x anteriores a 2.0.4, versiones 1.4.x anteriores a 1.4.6, y versiones antiguas sin soporte, permiten a las aplicaciones servir archivos de configuración arbitrario...

CVE-2026-81909

Concrete CMS 9 through 9.5.2 is vulnerable to Missing Authorization in the block alias route Process::alias in concrete/controllers/backend/block/process.php.It does not verify that the referenced block is genuinely orphaned on the target page, nor that the caller holds any permission over the...

CVE-2026-81909 Concrete CMS 9 through 9.5.2 is vulnerable to Missing Authorization in the orphaned-block alias route, allowing an authenticated editor to disclose and force-delete arbitrary blocks

Concrete CMS 9 through 9.5.2 is vulnerable to Missing Authorization in the block alias route Process::alias in concrete/controllers/backend/block/process.php.It does not verify that the referenced block is genuinely orphaned on the target page, nor that the caller holds any permission over the...

CVE-2026-81909

Concrete CMS versions 9 through 9.5.2 contain a Missing Authorization flaw in the block alias route (Process::alias() in concrete/controllers/backend/block/process.php). The function fails to verify that a referenced block is genuinely orphaned on the target page and that the caller holds permiss...

EUVD-2026-76168

Concrete CMS 9 through 9.5.2 is vulnerable to Missing Authorization in the block alias route Process::alias in concrete/controllers/backend/block/process.php.It does not verify that the referenced block is genuinely orphaned on the target page, nor that the caller holds any permission over the...

gortex-PoC

Symlink Following in Indexer File-Walk → Out-of-Repo Content Disclosure via searchtext CVE status: requested, pending assignment. This finding is published as GHSA-6vhf-4wcm-2r83. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-gortex-PoC and this banner is replaced with the CVE link...

CVE-2026-61910

An issue was discovered in Cyrus IMAP before 3.12.4. Mailbox/set let a sharee change a special-use role on shared mailboxes. An authenticated user with maySetKeywords on another user's mailbox could change that mailbox's specialuse annotation. This could allow the sharee to change the shared...

CVE-2026-84222

CVE-2026-84222 affects the Kirki WordPress plugin versions 6.2.1 through 6.2.5 . The plugin fails to verify whether the requester is authorized to read a post before rendering and returning its content via the kirki_data parameter. This allows unauthenticated users to retrieve the content of non-...

WordPress Kirki plugin 6.2.1-6.2.5 - Unauthenticated Non-Public Post Content Disclosure vulnerability

Unauthenticated Non-Public Post Content Disclosure vulnerability discovered by Mohammed Abd Alrahman in WordPress Plugin Kirki versions 6.2.1-6.2.5...

nextjs-CVE-2024-34351-_exploit

CVE-2024-34351 Exploit CVE-2024-34351 PoC Next.js Server-Side Request Forgery in Server Actions · CVE-2024-34351 · GitHub Advisory Database Digging for SSRF in NextJS apps Summary PoC for a full exploitation of NextJS SSRF. An attacker can get any website content from Next.js server using...

WordPress The Events Calendar plugin < 6.17.3.1 - Contributor+ Non-Public Event, Venue and Organizer Content Disclosure vulnerability

Contributor+ Non-Public Event, Venue and Organizer Content Disclosure vulnerability discovered by Mohammed Abd Alrahman in WordPress Plugin The Events Calendar versions 6.17.3.1...

CVE-2026-78150

CVE-2026-78150 affects the Smart Post WordPress plugin (Post Grid, Post Carousel, & List Category Posts – by Smart Post Show), versions 4.0.0 through 4.0.7 . The root cause is an IDOR in the saved-templates-duplicate endpoint, which fails to verify the type, ownership, or status of the post being...

CVE-2026-78149

The Smart Post WordPress plugin (Post Grid, Post Carousel, & List Category Posts) versions 4.0.0 through 4.0.7 are affected by an unauthenticated information disclosure vulnerability in the sp_handle_post_id AJAX action. The plugin fails to check whether a post is password-protected before return...

CVE-2026-78150 Post Carousel 4.0.0 - 4.0.7 - Contributor+ Private and Protected Post Content Disclosure via saved-templates-duplicate IDOR

The Smart Post WordPress plugin before 4.0.8 does not check the type, ownership or status of the post it is asked to duplicate, allowing users with contributor privileges and above to copy any private or password protected post into a draft of their own and read its content and metadata...

CVE-2026-78150 Post Carousel 4.0.0 - 4.0.7 - Contributor+ Private and Protected Post Content Disclosure via saved-templates-duplicate IDOR

The Smart Post WordPress plugin before 4.0.8 does not check the type, ownership or status of the post it is asked to duplicate, allowing users with contributor privileges and above to copy any private or password protected post into a draft of their own and read its content and metadata...

WordPress Smart Post plugin 4.0.0-4.0.7 - Contributor+ Private and Protected Post Content Disclosure vulnerability

Contributor+ Private and Protected Post Content Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Post Grid, Post Carousel, & List Category Posts – by Smart Post Show versions 4.0.0-4.0.7...

GHSA-MFRJ-V65R-979C SiYuan: Publish-access filter on renderAttributeView leaves related-database content unfiltered and fails open on non-block first columns

CVE: This vulnerability corresponds to CVE-2026-72798. Summary renderAttributeView correctly applies the reader publish-access filter, but the filter's row-accessibility decision is keyed solely to the row's first cell, and it never inspects the remaining cells' values. Relation and Rollup cells...

WordPress Content Views plugin < 4.5.1.2 - Unauthenticated Non-Public Post Content Disclosure vulnerability

Unauthenticated Non-Public Post Content Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Content Views versions 4.5.1.2...