sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

CVE-2026-92980

HortusFox-Web prior to version 6.1 contains a remote code execution vulnerability in its Import/Export functionality. The feature, intended solely for data portability, can be abused by authenticated administrators to deploy and execute arbitrary OS commands as the web server user on the underlyi...

EUVD-2026-81910

HortusFox-Web prior to version 6.1 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary OS commands as the web server user by abusing the Import/Export functionality. Attackers can leverage the Import/Export feature, which is intended solely...

CVE-2025-9215

StoreEngine 強力なWordPress eコマースプラグイン（支払い、メンバーシップ、アフィリエイト、販売など）= 1.4.0 - 認証済み（購読者以上）任意ファイルダウンロード StoreEngineプラグインのCSVインポート/エクスポート機能には、認証されたすべてのユーザー...

CVE-2026-17566

CVE-2026-17566 — pgAdmin 4 Import/Export Data RCE PoC pgAdmin 4 Import/Export Data 工具远程代码执行 PoC。利用 isqueryparensbalanced 括号检查器与 psql 的反斜杠转义语义分歧 ,注入 \copy ... TO PROGRAM 在运行 pgAdmin 的服务器上执行任意命令。 背景攻击链:CVE-2026-17349Workspaces 凭据泄露→ CVE-2026-17351AI Assistant 只读绕过→ 本漏洞RCE 。三者均只需低权限已认证用户。 漏洞简述...

CVE-2026-87836

The Comments Import & Export WordPress plugin before 2.5.4 does not restrict its comment export to users able to moderate comments, nor scope the export to content owned by the requesting user, allowing users with the Author role and above to retrieve every comment on the site, including commente...

CVE-2026-87836

The Comments Import & Export WordPress plugin (versions 2.1.11 through 2.5.3 ) fails to restrict its comment export function to users with comment-moderation privileges and does not scope the export to content owned by the requesting user. As a result, any user with the Author role or higher can ...

EUVD-2026-81345

The Comments Import & Export WordPress plugin before 2.5.4 does not restrict its comment export to users able to moderate comments, nor scope the export to content owned by the requesting user, allowing users with the Author role and above to retrieve every comment on the site, including commente...

CVE-2026-87836 Comments Import & Export 2.1.11 - 2.5.3 - Author+ Comment PII Disclosure via Export

The Comments Import & Export WordPress plugin before 2.5.4 does not restrict its comment export to users able to moderate comments, nor scope the export to content owned by the requesting user, allowing users with the Author role and above to retrieve every comment on the site, including commente...

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

pecli

PEcli PEファイルを解析するPython 3用ツール。現在の機能 : ファイルに関する情報を表示（インポート、エクスポート、リソース） ファイル内の興味深い情報を検索（異常なリソース、PEiDなど） セクションやリソースをダンプ サイズをチェック ファイル内の文字列を検索 インストール インストールはpypiから行えます：pip install pecli またはコードから直接： root@kitploit: git clone https://github.com/Te-k/pecli.git cd pecli pip install . 使い方...

WordPress WP Import Export Lite plugin < 3.9.33 - Authenticated Arbitrary Directory Deletion vulnerability

Authenticated Arbitrary Directory Deletion vulnerability discovered by mak3breadMinseong Kim in WordPress Plugin WP Import Export Lite versions 3.9.33...

WordPress WP Import Export Lite plugin < 3.9.33 - Authenticated Arbitrary File Upload vulnerability

Authenticated Arbitrary File Upload vulnerability discovered by mak3breadMinseong Kim in WordPress Plugin WP Import Export Lite versions 3.9.33...

WordPress WP Import Export Lite plugin < 3.9.33 - Authenticated RCE vulnerability

Authenticated RCE vulnerability discovered by Erwan LR WPScan in WordPress Plugin WP Import Export Lite versions 3.9.33...

WordPress WP Import Export Lite plugin < 3.9.34 - Authenticated RCE vulnerability

Authenticated RCE vulnerability discovered by mak3breadMinseong Kim in WordPress Plugin WP Import Export Lite versions 3.9.34...

CVE-2024-54262

CVE-2024-54262 利用CVE-2024-54262漏洞：WooCommerce导入导出插件中的任意文件上传 概述 此脚本利用WordPress插件"Import Export for WooCommerce"中的漏洞。该漏洞允许未授权用户上传任意文件，可能导致远程代码执行（RCE）。 功能： 版本检测 ：自动检查WordPress站点是否运行存在漏洞的插件版本。 身份验证 ：支持WordPress登录以进一步利用。 文件上传 ：允许上传恶意PHP文件以实现RCE。 前提条件： 1. Python 3.x 2. 所需的Python库： requests argparse...

CVE-2026-76555

The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a user-supplied file path before reading it and copying it into a publicly accessible directory, allowing any user whose role an administrator has granted the WP Import Export Lite WordPress plugin before 3.9.33's import...

CVE-2026-76558

The WP Import Export Lite WordPress plugin before 3.9.33 does not escape custom field names retrieved from the database before inserting them into the DOM of one of its administration screens, allowing users with a role as low as contributor to perform Stored XSS attacks which will trigger in the...

CVE-2026-76553

The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a path taken from stored, user-supplied data before recursively deleting the directory it resolves to, allowing users to whom an administrator has delegated a WP Import Export Lite WordPress plugin before 3.9.33 capability...

CVE-2026-76559

The WP Import Export Lite WordPress plugin before 3.9.33 does not properly validate URLs before requesting them during the import process, allowing users with the import capability, which administrators hold by default, to make the site issue requests to internal hosts and services and read their...