poc-h2-CVE-2026-71554

CVE-2026-71554 - h2 Duplicate Host Header Request Smuggling Primitive This is my first CVE, and I have released this PoC to document the finding and help others understand and reproduce it. CVE: CVE-2026-71554 GHSA: GHSA-6hr6-w5qg-qmwg Affected: h2 = 4.4.0 Fixed: h2 4.4.1 Severity: Medium CWE-444...

DOCxNGINxFX

WORDLISTxGENERATORxFX Version 1.0 Version 2.0 WORDLISTxGENERATORxFX renamed to DOCxNGINxFX Version 3.0 DOCxNGINxFX I wrote this to give somethink back to the great and powerful open source community all out there that shares their knowledge or frameworks and from whom I have learned so much. The...

CVE-2015-6612

CVE-2015-6612 The detail of the vulnerability please refer to description.pdf My sad story about this bug: I repoted this issue to ZDI last March, at the beginning, they said they couldn't reproduce it in the latest Android, after half a month comunication, they decided not to pursue acquisition ...

json-interop-vuln-labs

JSON Interoperability Vulnerability Labs Description These are the companion labs to my research article "An Exploration of JSON Interoperability Vulnerabilities". Lab 1: Free purchases in an E-commerce Application Key Collision Attacks: Inconsistent Duplicate Key Precedence Inconsistent Large...

CVE-2026-118181

The Duplicate Post WordPress plugin before 1.5.8 does not perform a capability check when saving its global settings, relying only on its own role-access list, which allows users of any role an administrator has given Duplicate Post WordPress plugin before 1.5.8 access to, as low as Subscriber, t...

CVE-2026-118182

The Duplicate Post WordPress plugin before 1.5.8 does not check that a user duplicating a post is allowed to edit it, which, when the slug takeover option is enabled, allows users of a role an administrator has given Duplicate Post WordPress plugin before 1.5.8 access to, such as Contributor, to...

CVE-2026-118182

The Duplicate Post WordPress plugin before version 1.5.8 contains a vulnerability where it fails to verify if a user has permission to edit a post before duplicating it. When the slug takeover option is enabled, users with restricted roles, such as Contributor , can move any readable post off its...

WordPress Duplicate Post plugin < 1.5.8 - Authenticated Arbitrary Post Slug Takeover vulnerability

Authenticated Arbitrary Post Slug Takeover vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Duplicate Post versions 1.5.8...

CVE-2026-118183

The Duplicate Post WordPress plugin before version 1.5.8 is vulnerable to an authenticated post publishing restriction bypass . The plugin fails to verify if a user has the necessary permissions to publish a post during the duplication process. Consequently, users with restricted roles—such as Co...

EUVD-2026-125862

The Duplicate Post WordPress plugin before 1.5.8 does not check whether a user may publish posts when duplicating one, allowing users of a role an administrator has given Duplicate Post WordPress plugin before 1.5.8 access to, such as Contributors, to create published posts, including posts...

EUVD-2026-125861

The Duplicate Post WordPress plugin before 1.5.8 does not check that a user duplicating a post is allowed to edit it, which, when the slug takeover option is enabled, allows users of a role an administrator has given Duplicate Post WordPress plugin before 1.5.8 access to, such as Contributor, to...

CVE-2026-118182 Copy & Delete Posts < 1.5.8 - Authenticated Arbitrary Post Slug Takeover

The Duplicate Post WordPress plugin before 1.5.8 does not check that a user duplicating a post is allowed to edit it, which, when the slug takeover option is enabled, allows users of a role an administrator has given Duplicate Post WordPress plugin before 1.5.8 access to, such as Contributor, to...

WordPress Duplicate Post plugin < 1.5.8 - Authenticated Post Publishing Restriction Bypass vulnerability

Authenticated Post Publishing Restriction Bypass vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Duplicate Post versions 1.5.8...

CVE-2026-118181

The Duplicate Post WordPress plugin, in versions prior to 1.5.8 , is vulnerable to an access control modification. The plugin fails to perform a capability check when saving global settings, relying instead on its own role-access list. This allows users with lower privileges, as low as Subscriber...

WordPress Duplicate Post plugin < 1.5.8 - Authenticated Plugin Settings and Access Control Modification vulnerability

Authenticated Plugin Settings and Access Control Modification vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Duplicate Post versions 1.5.8...

CVE-2026-118181 Copy & Delete Posts < 1.5.8 - Authenticated Plugin Settings and Access Control Modification

The Duplicate Post WordPress plugin before 1.5.8 does not perform a capability check when saving its global settings, relying only on its own role-access list, which allows users of any role an administrator has given Duplicate Post WordPress plugin before 1.5.8 access to, as low as Subscriber, t...

EUVD-2026-125860

The Duplicate Post WordPress plugin before 1.5.8 does not perform a capability check when saving its global settings, relying only on its own role-access list, which allows users of any role an administrator has given Duplicate Post WordPress plugin before 1.5.8 access to, as low as Subscriber, t...

elevationstation

Elevation Station Stealing and Duplicating SYSTEM tokens for fun & profit! We duplicate things, make twin copies, and then ride away. You have used Metasploit's getsystem and SysInternals PSEXEC for getting system privs, correct? Well, here's a similar standalone version of that...but without the...

lil-pwny

Lil Pwny Fast offline auditing of Active Directory passwords using Python. About Lil Pwny Lil Pwny is a Python application to perform an offline audit of NTLM hashes of users' passwords, recovered from Active Directory, against known compromised passwords from Have I Been Pwned. Results will be...

Duplicate Page WordPress - Stored Cross-Site Scripting

Duplicate Page WordPress plugin = 4.4.2 contains a stored cross-site scripting caused by unsanitized Duplicate Post Suffix settings in output, letting high privilege users execute malicious scripts, exploit requires high privilege user role. id: CVE-2021-24681 info: name: Duplicate Page WordPress...