cve-2023-40000

cve-2023-40000 That's a PoC of cve-2023-40000. Wordpress LiteSpeed Cache exploit. The CVE could be applied to all LiteSpeed Cache --------------------+"; echo "+----------------------------------------------------------------------+";...

CVE-2024-28000

CVE-2024-28000 CVE-2024-28000 Exploit for litespeed-cache =6.3 allows Privilege Escalation with creation of administrator account Build root@kitploit: git clone https://github.com/JohnDoeAnonITA/CVE-2024-28000 cd CVE-2024-28000 go build . Disclaimer This PoC is for educational purposes only. Do n...

HTTP3-attacks

HTTP3-attacks CVE-2022-30592 Based on the work: E. Chatzoglou, V. Kouliaridis, G. Kambourakis, G. Karopoulos, and S. Gritzalis,"A hands-on gaze on HTTP/3 security through the lens of HTTP/2 and a public dataset", Computers & Security, p. 103051, 2022. The current repository serves the purpose of...

CVE-2024-28000

LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000 🎤 README Translation English فارسی 📸 Screenshot 💎 Introduction This repository contains a Proof of Concept PoC for a critical privilege escalation vulnerability discovered in the LiteSpeed Cache WordPress plugin. The vulnerability,...

litespeed-cpanel-cve-2026-54420-fix

CVE-2026-54420 완화 툴킷 CVE-2026-54420 에 대한 방어적 수정, 감사 및 검증 툴킷으로, CloudLinux / CageFS 를 사용하는 공유 호스팅 환경에서 LiteSpeed cPanel 플러그인 에 영향을 미칩니다. ⚠️ 보안 공지 이 저장소는 시스템 관리자, 호스팅 제공자, 방어적 보안 연구 만을 대상으로 합니다. 익스플로잇 코드, 공격 도구 또는 무기화된 개념 증명은 포함되어 있지 않습니다. CVE-2026-54420 정보 CVE-2026-54420는 LiteSpeed cPanel 플러그인 / WH...

CVE-2024-28000

CVE-2024-28000 PoC This repository contains tools for exploiting the CVE-2024-28000 vulnerability affecting WordPress sites using the LiteSpeed Cache plugin. The included scripts automate the detection of exposed debug.log files and the exploitation of a privilege escalation vulnerability that...

CVE-2024-44000

CVE-2024-44000 LiteSpeed Unauthorized Account Takeover PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

CVE-2026-54420-LiteSpeed-Symlink-Exploit

CVE-2026-54420 - LiteSpeed cPanel Plugin Symlink Privilege Escalation ⚠️ ADVERTENCIA Este código es SOLO para fines educativos y pruebas de seguridad autorizadas. El uso no autorizado contra sistemas sin permiso explícito es ILEGAL. 📋 Descripción CVE-2026-54420 es una vulnerabilidad de escalada de...

CVE-2024-28000

LiteSpeed Cache Privilege Escalation Exp CVE-2024-28000Scan.py Ce script commence par identifier la version et déterminer si elle est vulnérable, puis tente de vérifier si le fichier log existe. S'il existe, il envoie un paquet et demande à nouveau le fichier log pour tenter de trouver une fuite ...

CVE-2024-44000-LiteSpeed-Cache

Poc LiteSpeed Cache CVE-2024-44000 Exploit CVE-2024-44000 is a vulnerability in the LiteSpeed Cache plugin, a popular WordPress plugin. This vulnerability affects session management in LiteSpeed Cache, allowing attackers to gain unauthorized access to sensitive data. The script works in the...

LiteSpeed Cache <= 6.4.1 - Sensitive Information Exposure

The LiteSpeed Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.4.1 through the debug.log file that is publicly exposed. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...

LiteSpeed Cache <= 6.5.0.2 - Stored XSS

LiteSpeed Technologies LiteSpeed Cache versions up to 6.5.0.2 contain a stored cross-site scripting caused by improper input neutralization during web page generation, letting attackers execute malicious scripts in victim browsers, exploit requires storing malicious input. id: CVE-2024-47374 info...

CVE-2024-44000-LiteSpeed-Cache

CVE-2024-44000-LiteSpeed-Cache CVE-2024-44000 est une vulnérabilité dans le plugin LiteSpeed Cache, un plugin WordPress populaire. Cette vulnérabilité affecte la gestion des sessions dans LiteSpeed Cache, permettant aux attaquants d'obtenir un accès non autorisé à des données sensibles. Aperçu...

litespeed-cache-xss-poc

LiteSpeed Cache XSS PoC PoC for XSS vulnerability in the LiteSpeed Cache WordPress plugin allowing elevated privileges. This vulnerability was fixed in version 5.7.0.1 of the plugin, and was assigned CVE-2023-40000. According to the plugin's advanced view page, about 35% of users are still using ...

CVE-2026-48172---LiteSpeed-cPanel-Plugin-Version-Auditor

CVE-2026-48172 - Auditor de Vulnerabilidad del Plugin LiteSpeed para cPanel Este repositorio contiene una herramienta local de cumplimiento de seguridad y auditoría diseñada para detectar instalaciones vulnerables del Plugin LiteSpeed User-End para cPanel afectado por CVE-2026-48172. El objetivo ...

LiteSpeed Cache <= 5.7 - Unauthenticated Stored XSS

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache- from n/a through 5.7. id: CVE-2023-40000 info: name: LiteSpeed Cache = 5.7 - Unauthenticated Stored XSS...

CVE-2024-28000

PoC de Escalada de Privilegios en LiteSpeed Cache - CVE-2024-28000 Este repositorio contiene un script de Prueba de Concepto PoC para explotar una vulnerabilidad de escalada de privilegios en el plugin LiteSpeed Cache de WordPress. La vulnerabilidad, identificada como CVE-2024-28000 , permite a...

CVE-2024-28000-Exploit-Lab

CVE-2024-28000 — WordPress LiteSpeed Cache Lab Authorized local-lab reproduction of CVE-2024-28000 , an unauthenticated privilege-escalation issue affecting vulnerable versions of the LiteSpeed Cache WordPress plugin. Scope: This repository documents testing performed only against an isolated,...

WordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to Admin

Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from 1.9 through 6.3.0.1. id: CVE-2024-28000 info: name: WordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to Admin...

litespeed-cpanel-cve-2026-54420-fix

Kit de Mitigación CVE-2026-54420 Kit de remediación, auditoría y verificación defensiva para CVE-2026-54420 que afecta al LiteSpeed cPanel Plugin en entornos de hosting compartido que utilizan CloudLinux / CageFS. ⚠️ Aviso de Seguridad Este repositorio está destinado únicamente a administradores d...