659153 matches found
CVE-2024-4577-PHP-RCE
CVE-2024-4577-PHP-RCE 项目简介与原理 全球首款利用PHP默认环境（XAMPP）的CVE-2024-4577 PHP-CGI RCE 漏洞 EXP。 The world's first CVE-2024-4577 PHP-CGI RCE exploit utilizing the default PHP environment. Sharing original exploit, supports SSRF, supports WAF bypass. 实现PHP默认环境RCE。原理：cgi.forceredirect + REDIRECT-STATUS。...
CVE-2026-85658
ProfilePress (Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content) for WordPress is vulnerable to arbitrary shortcode execution in all versions up to and including 4.17.2 . The root cause is improper validation of a value before passing it to do_...
CVE-2026-85658 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'eup_bio' Biography Field (Entity-Encoded Shortcode Bracket)
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.17.2 This is due to the software allowing users to execute an actio...
EUVD-2026-83554
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.17.2 This is due to the software allowing users to execute an actio...
CVE-2026-85658 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'eup_bio' Biography Field (Entity-Encoded Shortcode Bracket)
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.17.2 This is due to the software allowing users to execute an actio...
CVE-2026-4327 The Welcomizer <= 2.8.1 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via 'twiz_custom_logic' Parameter
The The Welcomizer plugin for WordPress is vulnerable to Remote Code Execution in all versions up to and including 2.8.1. This is due to missing authorization checks on the twizajaxcallback AJAX action's 'savesection' handler combined with the use of eval to execute user-supplied 'custom logic'...
CVE-2026-2422 WP Composer <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pbwp_raw_shortcode' Shortcode
The WP Composer – The Easiest Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pbwprawshortcode' shortcode in all versions up to, and including, 1.0.5. This is due to the shortcode handler decoding Base64-encoded content and outputting it directly without an...
Langflow-RCE-CVE-2025-3248
CVE-2025-3248 — Langflow Unauthenticated RCE PoC A clean, tested proof-of-concept for CVE-2025-3248 , an unauthenticated remote code execution vulnerability in Langflow versions prior to 1.3.0. What is CVE-2025-3248? Langflow's /api/v1/validate/code endpoint accepts Python code for static...
CVE-2022-36234
Descripción de CVE-2022-36234 Se descubrió que la confirmación 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 del Servidor TCP SimpleNetwork contiene una vulnerabilidad de doble liberación double free que se explota mediante paquetes TCP manipulados. Provocar la doble liberación permitirá a los cliente...
CVE-2019-19356
Enrutador NETIS WF2419 RCE CVE-2019-19356 Contexto La vulnerabilidad es una Ejecución Remota de Código RCE autenticada como root a través de la página de gestión web del enrutador NETIS WF2419. La vulnerabilidad se ha encontrado en la versión de firmware V1.2.31805 y en la última versión de...
CVE-2024-6330
CVE-2024-6330 GEO my WordPress ivv900fnzbln0dem43z7zmzjjgigz...
CVE-2026-32475
CVE-2026-32475 PoC: Elementor Pro Subida Arbitraria de Archivos No Autenticada a RCE Subida Arbitraria de Archivos Pre-Autenticación en Elementor Pro que Conduce a Ejecución Remota de Código Prueba de concepto para CVE-2026-32475, una subida arbitraria de archivos no autenticada crítica en el...
MGASA-2026-0418 Updated gstreamer1.0-plugins-base packages fix a security vulnerability
GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. CVE-2026-18297...
Updated gstreamer1.0-plugins-base packages fix a security vulnerability
GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. CVE-2026-18297...
CVE-2017-12615-Home-Lab
CVE-2017-12615 Tomcat: Ejecución Remota de Código mediante Subida de JSP Este laboratorio simula la vulnerabilidad CVE-2017-12615 Tomcat: Ejecución Remota de Código mediante Subida de JSP Se produce por la configuración readonly=false, que permite subir archivos mediante HTTP PUT , incluyendo...
CVE-2024-50482
CVE-2024-50482 WooCommerce Product Design = 1.0.0 - 未认证的任意文件上传 描述： WordPress 的 WooCommerce Product Design 插件在所有版本（包括 1.0.0）中由于缺少文件类型验证，存在任意文件上传漏洞。这使得未认证的攻击者能够在受影响站点的服务器上上传任意文件，可能导致远程代码执行。 root@kitploit: Published: 2024-10-25 00:00:00 CVE: CVE-2024-50482 CVSS:...
CVE-2026-85680
The Ultimate Member WordPress plugin before 2.13.1 does not escape a value derived from user supplied profile names before outputting it in the page title, and decodes HTML entities in it after its own sanitisation has already run, allowing unauthenticated attackers who register an account to sto...
LetsDefend-SOC173-Follina-0-Day-Detected
LetsDefend-SOC173-Follina-0-Day-Detected 我们收到一个安全告警，提示检测到 Follina（CVE-2022-30190）漏洞。一个恶意 Word 文档触发了 msdt.exe 的执行，表明主机 JonasPRD 可能已被远程代码执行。我们的任务是调查此告警，确认漏洞利用情况，评估影响，并提出修复建议。 案例详情 2022 年 6 月 2 日 15:22，触发了一条安全告警，来源为 SOC173 – Follina 0-Day 检测 SIEM 规则 。该告警涉及名为 'JonasPRD' 的端点，IP 地址为...
CVE-2025-39538
🛡️ CVE-2025-39538 - WordPress WP-Advanced-Search = 3.3.9.3 Subida Arbitraria de Archivos CVE-2025-39538 Publicado: 2025-04-16 Tipo de Vulnerabilidad: Subida Arbitraria de Archivos Subida sin Restricciones de Archivos con Tipo Peligroso Plugin Afectado: WP-Advanced-Search por Mathieu Chartier...