19640 matches found
CVE-2018-7422
CVE-2018-12613 Local file inclusion bug due to no sanitization of user input. Software Affected 1. Wordpress Plugin: Site-Editor v.1.1.1; How to use This PowerShell scripts need two parameters to craft a exploit HTTP request: 1. Wordpress URL endpoint 2. A full path file to be retrieved in remote...
CVE-2018-7422
CVE-2018-7422 Exploit para CVE-2018-7422: InclusiΓ³n de archivos locales en el plugin Site Editor 1.1.1 de WordPress T1574.008 Sintaxis ruby Entorno de Laboratorio OffSec Proving Grounds - Readys Uso...
engagement-mgr
Engagement Manager Engagement Manager is a web application for tracking offensive security engagements. It features a modern UI, built with Next.js, Prisma, and PostgreSQL. The app includes a calendar, engagements, clients, contacts, findings, and operators. Lee Baird @discoverscripts Jay...
XPEViewer
PE file viewer/editor for Windows, Linux and MacOS. Download: https://github.com/horsicq/XPEViewer/releases How to run: https://github.com/horsicq/XPEViewer/blob/master/docs/RUN.md How to build: https://github.com/horsicq/XPEViewer/blob/master/docs/BUILD.md Changelog:...
Risk-Analysis-Editor
Risk Analysis Editor RAE English Β· FranΓ§ais Standalone tool for building and visualizing risk matrices β inherent gross risk and residual net risk β with an open, documented file format, .rae.json. βΆοΈ Open the app Β· π User guide Β· π¬ Video tutorials Β· β¬οΈ Download No installation: the tool runs...
heappy
π Heappy: un editor de heap feliz Heappy es un editor basado en gdb/gef que te ayuda a manejar el heap durante el desarrollo de tus exploits. El proyecto debe considerarse una herramienta didΓ‘ctica ΓΊtil para comprender la evoluciΓ³n del heap durante el ciclo de vida del proceso. Se ha creado para...
CVE-2023-43263
CVE ID : CVE-2023-43263 Vulnerability Type : Cross-Site Scripting Description : Cross-site scripting XSS vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component. Steps to reproduce : Enter payload in markdown component input: Reference : 1...
fhex
Fhex - Un Editor Hex Completamente Funcional Este proyecto nace con el objetivo de desarrollar una herramienta ligera pero ΓΊtil. La razΓ³n es que los editores hex existentes tienen algunas limitaciones diferentes por ejemplo, demasiadas dependencias, falta de caracterΓsticas de coloreado hex, etc...
WordPress Site Editor <=1.1.1 - Local File Inclusion
WordPress Site Editor through 1.1.1 allows remote attackers to retrieve arbitrary files via the ajaxpath parameter to editor/extensions/pagebuilder/includes/ajaxshortcodepattern.php. id: CVE-2018-7422 info: name: WordPress Site Editor =1.1.1 - Local File Inclusion author: LuskaBol,0x240x23elu...
Vvveb-CMS-CVE-2025-8518
Vvveb-CMS-CVE-2025-8518 This repository contains a Proof of Concept PoC demonstrating a critical vulnerability in givanz Vvveb 1.0.5. The vulnerability allows an authenticated user with template editing privileges to write arbitrary PHP code to server files, leading to Remote Code Execution RCE...
Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation
𧨠CVE-2020-11107 β XAMPP Local Privilege Escalation Windows π Overview CVE-2020-11107 is a Local Privilege Escalation LPE vulnerability affecting Apache Friends XAMPP on Windows. An unprivileged user can modify the XAMPP Control Panel configuration file xampp-control.ini and replace the default...
CVE-2026-103897
The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 2.7.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2026-18937
abraxaslabs.tech Β· github.com/abraxas Β· @abraxasnull Β· [email protected] Β· CVE-2026-18937 CVE-2026-18937 Broken Link Checker 2.4.11 - wordpress.org I am @abraxasnull. Loopback lab. The client is CVE-2026-18937-Abraxas-Labs.py. Query vars become globals. On plain permalinks,...
CVE-2026-103897 Responsive Lightbox & Gallery <= 2.7.9 - Authenticated (Editor+) Stored Cross-Site Scripting via Comment Content 'title' Attribute
The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 2.7.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
EUVD-2026-96219
The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 2.7.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2026-103897
The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.7.9 . The root cause is insufficient input sanitization and output escaping of the 'comment' parameter. This allows authenticated attackers with editor-l...
Fermion
Fermion Fermion Γ¨ un'applicazione Electron che avvolge frida-node e monaco-editor. Offre un ambiente completamente integrato per prototipare, testare e perfezionare script Frida attraverso un'unica interfaccia. Con l'integrazione di Monaco arrivano tutte le funzionalitΓ che ti aspetteresti da...
LG Simple Editor <= v3.21.0 - Command Injection
LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...
CVE-2026-48907
CVE-2026-48907 β Unauthenticated RCE in Joomla Content Editor JCE β€ 2.9.99.4 Proof-of-concept exploit for CVE-2026-48907 β a CVSS 10.0 pre-authentication remote code execution vulnerability in the Joomla Content Editor JCE extension. Research by Grayxploit Security Team Table of Contents Overview...
CVE-2024-9932-POC
CVE-2024-9932-POC Description: The Wux Blog Editor WordPress plugin is vulnerable to arbitrary file uploads due to insufficient file type validation in the wuxbtinsertImageNew function. Versions up to and including 3.0.0 are affected. This vulnerability allows unauthenticated attackers to upload...