13166 matches found
CVE-2026-25632
CVE-2026-25632 — JSON Deserialization RCE in REST API Bugfix Challenge Inspired by a real 2026 vulnerability CVSS 10.0, actively exploited Based on: CVE-2026-25632 — Remote Code Execution via unsafe type-driven JSON deserialization discovered in the EPyT-Flow water-network simulation REST API and...
CVE-2026-57588-Nessus-XML-Import-SQL-Injection-PoC
🛡️ CVE-2026-57588 - Nessus SQL Injection Exploitation Framework 📋 Table of Contents Overview Vulnerability Details Features Installation Quick Start Usage Examples Payload Types Advanced Scenarios Reporting Troubleshooting Security Considerations...
CVE-2024-7514
CVE-2024-7514 WordPress Comments Import & Export = 2.3.7 - Lectura de archivos arbitraria autenticada Autor+ mediante Directory Traversal Descripción El plugin WordPress Comments Import & Export para WordPress es vulnerable a la lectura de archivos arbitraria debido a una validación insuficiente ...
CVE-2024-54262
CVE-2024-54262 Explotación de CVE-2024-54262: Carga arbitraria de archivos en Import Export para WooCommerce Resumen Este script explota una vulnerabilidad en el plugin "Import Export for WooCommerce" de WordPress. La vulnerabilidad permite a usuarios no autorizados subir archivos arbitrarios, lo...
CVE-2024-9698
CVE-2024-9698 Exploit de Carga Arbitraria de Archivos en Crafthemes Demo Import = 3.3 📌 Resumen Este exploit aprovecha una vulnerabilidad crítica CVE-2024-9698 en el plugin Crafthemes Demo Import para WordPress. La vulnerabilidad permite a administradores autenticados cargar archivos arbitrarios ...
CVE-2026-96515
The Netlink ICT HG323RW router is susceptible to a command injection vulnerability due to insufficient authorization and input validation controls within the diagnostic script import functionality . An authenticated attacker can exploit this by uploading and executing a specially crafted script v...
WordPress Import and export users and customers plugin <= 2.5.2 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Intrudify in WordPress Plugin Import and export users and customers versions = 2.5.2...
CVE-2025-64027
Product Info Snipe-IT is a free and open-source IT asset management system FOSS built on Laravel. It provides hardware asset tracking, software license management, accessories, and consumables inventory features for IT operations teams. It is actively maintained and updated frequently. Summary A...
CVE-2026-88845
The MasterStudy LMS WordPress Plugin versions before 3.7.50 is vulnerable to an unauthorized action due to a lack of capability or nonce checks on an administrative maintenance action. This flaw allows any authenticated user , such as a subscriber, to trigger the action and create published conte...
CVE-2026-88845 MasterStudy LMS 2.3.0 - < 3.7.50 - Subscriber+ Course and Lesson Creation via Demo Import
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform any capability or nonce checks on an administrative maintenance action, allowing any authenticated user, such as a subscriber, to trigger it and create published content on the site attributed to their own accoun...
reconvault
ReconVault 🔍 El organizador de notas de reconocimiento que los cazadores de bugs realmente pidieron. ReconVault es una aplicación de escritorio de estética terminal con tema oscuro para Linux, construida para investigadores de seguridad, cazadores de bugs y jugadores de CTF. Deja atrás los archiv...
CVE-2022-1565
WordPress Plugin WP All Import = 3.6.7 - Ejecución remota de código RCE Autenticado root@kitploit: Fecha: 05 de noviembre de 2023 Autor del exploit: Việt HÙng https://github.com/phanthibichtram12 Sitio web del proveedor: https://www.wpallimport.com/ Enlace del software:...
EUVD-2026-85704
The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plugin's own export and re-import workflow. The vulnerability exists because the exporter writes CSV cells using fputcsv with a NUL byte \0 as...
CVE-2025-9776
CVE-2025-9776: Authenticated SQL Injection in CatFolders WordPress Plugin Keywords: CVE-2025-9776, CatFolders WordPress vulnerability, SQL injection WordPress, authenticated SQL injection, WordPress security, CSV import vulnerability, WordPress plugin exploit, CWE-89, WordPress database attack,...
CVE-2026-86583
The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plugin's own export and re-import workflow. The vulnerability exists because the exporter writes CSV cells using fputcsv with a NUL byte \0 as...
CVE-2026-86583
The Import and export users and customers plugin for WordPress (versions up to and including 2.4.17 ) is vulnerable to Privilege Escalation . The root cause is an escape character mismatch during the plugin's export and re-import workflow: the exporter uses fputcsv() with a NUL byte as an escape ...
CVE-2026-86583 Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile Fields
The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plugin's own export and re-import workflow. The vulnerability exists because the exporter writes CSV cells using fputcsv with a NUL byte \0 as...
CVE-2026-63274
A flaw was found in LibreOffice. When a user imports a specially crafted PDF document with LibreOffice Draw, a heap-based buffer overflow can occur due to improper validation of the stream length. This issue can cause memory corruption, resulting in an application crash. Mitigation Do not import...