CVE-2026-3844

CVE-2026-3844 批量利用工具 CVE-2026-3844 – Breeze Cache WordPress =2.4.4 在启用本地 Gravatar 托管时，允许通过 fetchgravatarfromremote 进行未认证文件上传。 安装 下载仓库 root@kitploit: git clone https://github.com/im-hanzou/CVE-2026-3844 进入仓库文件夹 root@kitploit: cd CVE-2026-3844 安装依赖 root@kitploit: pip install -r requirements.txt 使用方...

CVE-2026-3844

root@kitploit: ╔════════════════════════════════════════════════════════════╗ ║ CVE-2026-3844 ║ ║ Breeze Cache = 2.4.4 Arbitrary File Upload ║ ║ Unauthenticated RCE | Authorized Lab Use Only ║ ╚════════════════════════════════════════════════════════════╝ 概述 CVE-2026-3844 是一个任意文件上传漏洞，影响存在漏洞版本的...

Exploit for CVE-2026-3844

CVE-2026-3844 Mass Exploit CVE-2026-3844 – Breeze Cache Word...

CVE-2026-3844

The CVE-2026-3844 issue affects Breeze Cache for WordPress (≤2.4.4). It enables unauthenticated file uploads via fetch_gravatar_from_remote when Host Files Locally – Gravatars is enabled, allowing remote content (e.g., PHP webshells) to be saved to the server (e.g., wp-content/cache/breeze-extra/...