480628 matches found
WordPress CatalogX plugin < 6.1.3 - Unauthenticated Email Content Injection vulnerability
Unauthenticated Email Content Injection vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Product Catalog Enquiry for WooCommerce by MultiVendorX versions 6.1.3...
EUVD-2026-69862
The Comments WordPress plugin before 7.6.66 does not validate a value used to build a database query, allowing unauthenticated users to inject SQL and read comments they are not entitled to see, including comments awaiting moderation, comments marked as spam or trashed, and comments on private an...
CVE-2026-19704
wpDiscuz (the Comments WordPress plugin) versions before 7.6.66 are vulnerable to an unauthenticated SQL injection caused by an unvalidated value used to build a database query. The injected text is interpreted as SQL grammar rather than as data, so an unauthenticated attacker can read comments t...
CVE-2026-19704 Comments – wpDiscuz < 7.6.66 - Unauthenticated Comment Disclosure via SQLi
The Comments WordPress plugin before 7.6.66 does not validate a value used to build a database query, allowing unauthenticated users to inject SQL and read comments they are not entitled to see, including comments awaiting moderation, comments marked as spam or trashed, and comments on private an...
CVE-2026-19116 WP User Frontend < 4.3.11 - Subscriber+ PHP Object Injection via Frontend Post Edit Form
The User Frontend WordPress plugin before 4.3.11 does not prevent user-supplied field values from being deserialized when a submitted post is reopened in its frontend editing form, allowing authenticated users with subscriber-level access and above to perform PHP Object Injection, which may lead ...
CVE-2026-19116
The User Frontend WordPress plugin before 4.3.11 allows PHP Object Injection via its frontend post editing form. When a submitted post is reopened, user-supplied field values are deserialized without proper sanitization, enabling any authenticated user with subscriber-level access or above to inj...
EUVD-2026-69865
The User Frontend WordPress plugin before 4.3.11 does not prevent user-supplied field values from being deserialized when a submitted post is reopened in its frontend editing form, allowing authenticated users with subscriber-level access and above to perform PHP Object Injection, which may lead ...
CVE-2025-15664 BEAF < 4.7.19 - Author+ Stored XSS via Before Label
The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's before-label value before its bundled client-side script re-injects it into the DOM, allowing users with the Author role and above to store a payload that executes in the browser ...
CVE-2025-15663
The Ultimate Before After Image Slider & Gallery (BEAF) WordPress plugin, in versions before 4.7.19 , suffers from a Stored XSS due to improper escaping of the slider's after-label value before the bundled client-side script re-injects it into the DOM. Users with the Author role or above can stor...
CVE-2025-15663 BEAF < 4.7.19 - Author+ Stored XSS via After Label
The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's after-label value before its bundled client-side script re-injects it into the DOM, allowing users with the Author role and above to store a payload that executes in the browser o...
EUVD-2025-210823
The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's after-label value before its bundled client-side script re-injects it into the DOM, allowing users with the Author role and above to store a payload that executes in the browser o...
CVE-2020-12124
CVE-2020-12124 An implementation of a proof-of-concept for CVE-2020-12124 https://vulners.com/cve/CVE-2020-12124 root@kitploit: 以下是CVE-2020-12124的一个实际化版本，这是一个漏洞，利用了Wavlink...
telnetd_CVE-2026-24061_tester
Telnetd CVE-2026-24061 测试脚本 一个用于检测 telnetd 服务器是否容易受到通过 NEW-ENVIRON telnet 选项进行环境变量注入攻击的 Python 安全测试工具。 概述 该脚本用于测试 telnetd 服务器是否存在 CVE-2026-24061 漏洞，该漏洞允许攻击者通过 NEW-ENVIRON telnet 选项注入环境变量。如果服务器未正确处理这些环境变量，则可能容易受到命令注入或身份验证绕过攻击。 该脚本提供详细、彩色编码的输出，包含逐步进度、全面的错误处理以及最终摘要，其中包括测试结果、风险评估和影响分析。 CVE-2026-24061...
CVE-2025-1094-Lab-Setup
🛠️ CVE-2025-1094 实验环境搭建 ⚠️ 免责声明 本实验仅用于教育和研究目的 。 请勿 将此处演示的任何信息或技术用于您不拥有或未经明确授权测试的系统。未经授权使用这些方法可能违反法律 并导致严重处罚。 📌 概述 CVE-2025-1094 是一个影响 PostgreSQL 交互式工具 psql 的严重漏洞，在 14.15 及更早版本中被发现。 攻击者可以利用该漏洞执行 SQL 注入 ，在特定条件下可导致远程代码执行（RCE） 。 🧨 根本原因 该漏洞源于 psql 对畸形 UTF-8 输入处理不当 。 由于验证不足，攻击者可以注入任意 SQL 或元命令（如 !（shell...
CVE-2025-59382-QNAP-Password-Reset-Account-Takeover
CVE-2025-59382: QNAP Password Reset to Account Takeover Unauthenticated attacker-controlled password reset URL in /cgi-bin/resetpassword.cgi. Tested against QuTScloud c5.2.4.3041 build 20250211 in a lab. QNAP later published this as CVE-2025-59382 in advisory QSA-26-10. Short version An...
CVE-2012-2982
CVE-2012-2982 Description file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | pipe character. Installation 1. git clone https://github.com/CpyRe/CVE-2012-2982.git 2. pip3 install -...
CVE-2025-25706
CVE-2025-25706 Description Item: root@kitploit: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Vulnerability Type: Remote Code...
CVE-2025-25705
CVE-2025-25705 Elemento de descripción: root@kitploit: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Tipo de vulnerabilidad:...
CVE-2024-4577
CVE-2024-4577 A Proof of Concept developed by @watchTowr exploiting the PHP CGI Argument Injection vulnerability CVE-2024-4577 to obtain RCE on a vulnerable PHP version running in a Windows environment. Detailed technical analysis for this vulnerability Orange Tsi 🍊 This vulnerability was found b...
