CVE-2025-31864

CVE-2025-31864 1️⃣ Tipo di componente Plugin WordPress 2️⃣ Dettagli del componente Nome del componente Beam me up Scotty – Back to Top Button Versione vulnerabile = 1.0.23 Slug del componente beam-me-up-scotty Link del componente https://wordpress.org/plugins/beam-me-up-scotty/ 3️⃣ OWASP 2017: TOP...

CVE-2021-21973-Automateme

CVE-2021-21973-Automateme automatizzami!...

Eternal-Blue-CVE-2017-0144-THM-Write-Up

Questo repository non contiene un README...

hide-me

Cambiatore casuale di MAC e hostname hide-me Ogni volta che cercavo di eseguire un Penetration Test di rete, avevo bisogno di compiere alcuni passaggi per assicurarmi di essere nascosto: mettere giù la mia interfaccia, cambiare l'indirizzo MAC, cambiare l'hostname, rimettere su l'interfaccia e...

PoC-for-ME-SAML-Vulnerability

PoC-for-ME-SAML-Vulnerability PoC para cve-2022-47966 Para testar, envie para /SamlResponseServlet como uma requisição POST. Codifique em Base64 e dê como valor ao parâmetro SAMLResponse e envie. Formato POST /SamlResponseServlet HTTP/1.0 Host: SAMLResponse=&RelayState=...

uefi-firmware-parser

Analisador de Firmware UEFI ============================== .. image:: https://travis-ci.org/theopolis/uefi-firmware-parser.svg?branch=master :target: https://travis-ci.org/theopolis/uefi-firmware-parser O analisador de firmware UEFI é um módulo simples e um conjunto de scripts para analisar,...

CVE-2024-43044-jenkins

Введение Это эксплойт для CVE-2024-43044 — произвольное чтение файлов, которое позволяет агенту получать файлы с контроллера. Эксплойт использует уязвимость для чтения файлов с целью подделки remember-me cookie для учётной записи администратора и получения доступа к скриптовому движку Jenkins...

ODH-BricksBuilder-CVE-2024-25600-THM

ODH-BricksBuilder-CVE-2024-25600-THM Übersicht Dieses Repository enthält einen in Python entwickelten Schwachstellenscanner von Oblivion Development & Hosting OD&H zur Erkennung von CVE-2024-25600 im Bricks Builder Plugin für WordPress. Dieses Tool ist hauptsächlich für die Verwendung in Try Hack...

Bulk Me Now! Plugin <= 2.0 - Cross-Site Scripting

Bulk Me Now! WordPress plugin = 2.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

CVE-2019-13272

CVE-2019-13272 - Escalação de Privilégio Local em Pkexec ⚠️ Apenas para fins educacionais e de pesquisa de segurança autorizada Autores do Exploit Original Muito grato ao autor original do PoC BCOLES Descrição No kernel Linux anterior à versão 5.1.17, ptracelink em kernel/ptrace.c lida...

ripple20-digi-connect-exploit

Ripple20 Exploit: Digi Connect ME 9210 Authors: Moshe Kol, Shlomi Oberman Questo repository contiene un exploit PoC per CVE-2020-11896, una critica vulnerabilità di buffer overflow basata su heap nello stack Track TCP/IP parte della suite di vulnerabilità Ripple20. L'exploit consente l'esecuzione...

Kimai-CVE-2026-49865-POC

Kimai CVE-2026-52824 — Default APPSECRET Authentication Bypass Note: The repository URL contains an outdated CVE ID CVE-2026-49865. The correct and current CVE tracked in this repository is CVE-2026-52824 GHSA-jr9p-4h4j-6c58. Proof-of-concept exploit toolkit for the hardcoded default APPSECRET...

osinteye

This will not receive any further updates. Instagram is deprecated, so I decided to just archive it. Username enumeration & reconnaisance suite Supported sites PyPI Github TestPypi About.me Instagram DockerHub Installation Clone project: root@kitploit: $ git clone...

CVE-2026-56750

A flaw was found in Gitea. An attacker who steals a user's "Remember Me" token can maintain unauthorized access to the user's account. This occurs because the system fails to invalidate the attacker's session even after the legitimate user logs out or changes their password. This vulnerability ca...

CVE-2026-76207

phpMyFAQ before 4.1.7 contains a two-factor authentication bypass vulnerability where remember-me tokens are issued before 2FA verification completes. Attackers with valid credentials can obtain a remember-me cookie, skip the 2FA challenge, and replay the cookie to gain full authenticated access...

EUVD-2026-62448

phpMyFAQ before 4.1.7 contains a two-factor authentication bypass vulnerability where remember-me tokens are issued before 2FA verification completes. Attackers with valid credentials can obtain a remember-me cookie, skip the 2FA challenge, and replay the cookie to gain full authenticated access...

CVE-2026-76207 phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookie

phpMyFAQ before 4.1.7 contains a two-factor authentication bypass vulnerability where remember-me tokens are issued before 2FA verification completes. Attackers with valid credentials can obtain a remember-me cookie, skip the 2FA challenge, and replay the cookie to gain full authenticated access...

CVE-2026-76207

phpMyFAQ before 4.1.7 issues remember-me cookies before 2FA verification, allowing attackers with valid credentials to skip the 2FA challenge and replay the cookie for full authenticated access. CVSS 8.1 HIGH. No in-the-wild exploitation reported. Upgrade to 4.1.7; advisory at https://github.com/...

CVE-2026-76207 phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookie

phpMyFAQ before 4.1.7 contains a two-factor authentication bypass vulnerability where remember-me tokens are issued before 2FA verification completes. Attackers with valid credentials can obtain a remember-me cookie, skip the 2FA challenge, and replay the cookie to gain full authenticated access...

CVE-2024-50491

CVE-2024-50491 RSVP ME = 1.9.9 - Iniezione SQL non autenticata Descrizione Il plugin RSVP ME per WordPress è vulnerabile a SQL Injection nelle versioni fino alla 1.9.9 inclusa, a causa di un escaping insufficiente sul parametro fornito dall'utente e della mancanza di una sufficiente preparazione...