CVE-2019-11932-whatsApp-exploit

CVE-2019-11932-whatsap-exploit L'indirizzo di system e il gadget devono essere sostituiti con l'indirizzo effettivo trovato tramite una vulnerabilità di information disclosure. Dopo aver sostituito l'indirizzo di system e il gadget, esegui il codice per generare il file GIF corrotto: ora facciamo...

CVE-2015-4133

CVE-2015-4133 root@kitploit: usage: CVE-2015-4133.py -h --RHOST RHOST --RPORT RPORT -v YEAR MONTH FILE ReFlex Gallery WordPress plugin = 3.1.3 CVE-2015-4133 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2015-4133 positional arguments: YEAR подкаталог wp-content/uploads MONTH подкаталог...

CVE-2015-4133

CVE-2015-4133 CVE 2015-4133 - Reflex Gallery 3.1.3: मनमाना फ़ाइल अपलोड कर RCE प्राप्त करना विवरण Reflex Gallery एक Wordpress प्लगइन है जिसके 3.1.3 संस्करण में एक कमजोरी है जिसका हमलावर आसानी से शोषण कर सकते हैं ताकि मनमानी फ़ाइलें अपलोड कर सकें, उदाहरण के लिए PHP कोड ताकि रिमोट कमांड निष्पादन RCE...

CVE-2025-69460

CVE-2025-69460 – Simple Image Gallery 1.0 تنفيذ التعليمات البرمجية عن بُعد RCE بدون مصادقة – شرح فني CVE-2025-69460 – ExploitDB 50214...

ThingsBoard-IoT-Platform-CVE-2024-55466

ThingsBoard Privilege Escalation durch Stored XSS Während ich mit IoT-Technologie herumexperimentierte, fand ich eine Schwachstelle in der Thingsboard-Anwendung, die Möglichkeiten zur Privilegienausweitung bot. Thingsboard ist eine Open-Source-Anwendung, die Geräteverwaltung, Datenerfassung,...

CVE-2019-11932

CVE-2019-11932 system의 주소와 가젯gadget은 정보 공개 취약점으로 알아낸 실제 주소로 교체해야 합니다. system과 가젯의 주소를 교체한 후, 코드를 실행하여 손상된 GIF 파일을 생성하세요: root@kitploit: notroot@osboxes:/Desktop/gif$ make ..... ..... ..... notroot@osboxes:/Desktop/gif$ ./exploit exploit.gif buffer = 0x7ffc586cd8b0 size = 266 47 49 46 38 39 61 18 ...

CVE-2025-44108-SXSS

CVE-2025-44108 - FlatPress CMS 1.3.1의 저장형 XSS교차 사이트 스크립팅 취약점 설명 Flatpress CMS 1.3.1의 관리자 패널에 저장형 교차 사이트 스크립팅XSS 취약점이 존재합니다. 관리자 권한을 가진 공격자가 악성 JavaScript 페이로드를 시스템에 주입하면, 이 페이로드가 영구적으로 저장됩니다. 일반 사용자가 손상된 페이지예: 블로그 게시물를 방문하면, 주입된 페이로드가 피해자의 브라우저에서 자동으로 실행됩니다. 영향을 받는 제품 Flatpress 버전: 업로더 - 갤러리 캡션에서...

CVE-2025-62950-PoC

Descrizione Questa proof of concept PoC descrive una vulnerabilità di Cross-Site Request Forgery CSRF trovata nel plugin Contest Gallery – Upload, Vote & Sell with PayPal and Stripe v. 26.1.2. Il problema consente a un attaccante di ingannare un utente autenticato affinché esegua una richiesta...

CVE-2019-14314

CVE-2019-14314 CVE-2019-14314 - NextGEN Gallery 3.2.10 Iniezione SQL autenticata Utilizzo root@kitploit: usage: cve201914314.py -h url loginuser loginpass username CVE-2019-14314 Hash Extractor positional arguments: url Wordpress blog URL loginuser Username to login with loginpass Password to log...

cve-2026-3180

CVE-2026-3180 - WordPress Contest Gallery 28.1.4 - Injection SQL aveugle non authentifiée Description Une vulnérabilité d'Injection SQL aveugle Blind SQL Injection a été découverte dans le plugin WordPress Contest Gallery versions 28.1.4 et antérieures. Le problème survient en raison de...

monkey365

...

Gallery-Plugin-SQL-Injection

Exploit-Titel: Wordpress Video Gallery - YouTube Gallery and Vimeo Gallery Plugin SQL Injection Datum: 2024-07-05 Exploit-Autor: tmrswrr Kategorie : Webapps Hersteller-Homepage: https://total-soft.com/wp-video-gallery/ Version 2.3.6 1. Auf das Admin-Panel zugreifen: Navigieren Sie zum Admin-Panel...

windbg_js_scripts

Script JavaScript per WinDbg Installa come galleria di WinDbg Clona il repository root@kitploit: git clone https://github.com/hugsy/windbgjsscripts In windbgjsscripts\config.xml, modifica le righe Setting Name="LocalCacheRootFolder" per riflettere il percorso locale del repository. In WinDbg,...

CVE-2022-0169

CVE-2022-0169 — WordPress Photo Gallery SQLi PoC Dies ist ein einfacher Python-Proof-of-Concept PoC für CVE-2022-0169 , eine SQL-Injection-Schwachstelle im WordPress-Photo-Gallery-Plugin. Was es tut Prüft die WordPress-Version falls verfügbar Nutzt den verwundbaren admin-ajax.php-Endpunkt aus Dum...

WP-Contest-Gallery-28.1.4-Exploit

⚠️ In fase di test Questo PoC è attivamente in fase di test e miglioramento. Le funzionalità possono cambiare tra le versioni. CVE-2026-3180 WordPress Contest Gallery — SQL Injection cieca non autenticata Strumento di valutazione proof-of-concept per CVE-2026-3180 Autore: Sudeepa Wanigarathna ·...

CVE-2026-15366

A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page...

CVE-2026-15366

A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page...

CVE-2026-15366

A control logic defect in a specific built-in webpage of Kids Mode on vivo devices allows users to view local gallery photos directly within that page. The vulnerability is scored CVSS 4.0 base 2.4 (LOW) with a physical attack vector , indicating proximity access is required and no privileges or ...

EUVD-2026-66296

A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page...

NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure

The WordPress Gallery Plugin – NextGEN Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getitem function in versions up to, and including, 3.59. This makes it possible for unauthenticated attackers to extract sensitive data includi...