CVE-2021-29447

CVE-2021-29447 PoC Dieses Repository enthält einen Proof-of-Concept-Exploit PoC für die Schwachstelle CVE-2021-29447 , die WordPress 5.6 und 5.7 unter PHP 8 betrifft. Der Exploit zeigt, wie ein Angreifer mit Datei-Upload-Berechtigung eine XML-Parsing-Schwachstelle in der Mediathek ausnutzen kann,...

blind-xxe-controller-CVE-2021-29447

Blind XXE Controller Ich habe diesen Controller erstellt, während ich die Metatwo-Maschine auf HackTheBox gelöst habe, um CVE-2021-29447 auszunutzen. Diese Schwachstelle ist eine WordPress-XXE-Sicherheitslücke in der Medienbibliothek, die die Versionen 5.7, 5.6.2, 5.6.1, 5.6, 5.0.11 betrifft. Dab...

WordPress Media Library Assistant <= 3.34 - SQL Injection

David Lingren Media Library Assistant = 3.34 contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input. id: CVE-2026-34885 info: name: WordPress Media Library Assistant = 3.34 -...

Media Library Assistant < 2.82 - Unauthenticated Limited Local File Inclusion

Media Library Assistant plugin for WordPress before 2.82 contains a local file inclusion caused by unsanitized mlagallery link parameter, letting attackers include arbitrary local files, exploit requires access to the vulnerable link. id: CVE-2020-11732 info: name: Media Library Assistant 2.82 -...

CVE-2023-4634

CVE-2023-4634 WordPress Media-Library 插件 3.10 的 RCE 利用 CVE-2023-4634 信息 Patrowl 在 Wordpress 插件 Media-Librairy-Assistant 版本 3.10 中发现了一个未认证的 RCE 漏洞。 该利用并非易事，只需要按照下方说明进行简单设置即可。 完整的漏洞发现与利用可参考我们的博客：https://patrowl.io/blog-wordpress-media-library-rce-cve-2023-4634/ 利用前提 已安装 Wordpress（所有版本均可）...

CVE-2021-29447

CVE-2021-29447 वर्डप्रेस 5.6-5.7 - प्रमाणित Author+ XXE https://blog.wpsec.com/wordpress-xxe-in-media-library-cve-2021-29447/ उपयोग: -l LHOST उदाहरण: 127.0.0.1 -n NAME उदाहरण: payload.wav -dn DTDNAME उदाहरण: evil.dtd -r READ उदाहरण: ../wp-config.php evil-wav-dtd-xxe.py: error: the following...

CVE-2021-29447

CVE-2021-29447 POC to exploit WordPress 5.6-5.7 PHP 8+ Authenticated XXE Injection. More about this CVE here 示例 示例用法针对 HackTheBox 的 MetaTwo 机器，该机器托管了一个 WordPress 网站，其媒体库容易受到 XXE 注入攻击。 root@kitploit: python lfi.py -u manager -p partylikearockstar -t metapress.htb -lh 10.10.XX.XX -lp 8081 -w...

CVE-2023-4634-PoC

CVE-2023-4634 - WordPressプラグインMedia Library AssistantのRCE脆弱性 1. 環境の構築と起動 root@kitploit: cd Stand docker-compose up --build -d 2. サービスの起動待機60秒 root@kitploit: sleep 60 curl -I http://localhost:8080 3. 脆弱性スキャンの実行 root@kitploit: cd ../PoC/src python3 scanner.py http://localhost:8080 4. RCEの手動テスト...

CVE-2021-29447

CVE-2021-29447 - Exploit della vulnerabilità XXE di WordPress Descrizione Questo repository contiene un exploit per CVE-2021-29447, una vulnerabilità XXE XML External Entity presente in WordPress 5.7.0 e versioni precedenti. La vulnerabilità risiede nella libreria multimediale che elabora file WA...

Project-Project-Chimera-Exploiting-a-Modern-WordPress-XXE-to-Pillage-Secrets-

Projektziel: Demonstration einer vollständigen Angriffskette auf eine verwundbare WordPress-Installation unter Ausnutzung von CVE-2021-29447 XXE in der Medienbibliothek zur Erlangung von Remote-Codeausführung und vollständiger Systemkompromittierung. Phase 1: Aufklärung & Enumeration Netzwerkscan...

wordpress-cve-2021-29447

Exploit WordPress CVE-2021-29447 Exploit dell'iniezione di entità esterne XXE autenticata XML nella libreria multimediale di WordPress per esfiltrare file. Corretto in WordPress 5.7.1. Richiede credenziali WordPress valide per interagire con la libreria multimediale. Utilizzo root@kitploit: pytho...

CVE-2021-29447

Vulnerabilità XXE in WordPress: CVE-2021-29447 Un utente con la possibilità di caricare un file WAVE dannoso come un Autore può sfruttare un problema di parsing XML nella Libreria multimediale di WordPress, portando ad attacchi XXE e potenzialmente alla divulgazione del filesystem. Codice...

Media Library Assistant < 3.09 - Remote Code Execution/Local File Inclusion

A vulnerability in the Wordpress Media-Library-Assistant plugins in version 3.09 is vulnerable to a local file inclusion which leading to RCE on default Imagegick installation/configuration. id: CVE-2023-4634 info: name: Media Library Assistant 3.09 - Remote Code Execution/Local File Inclusion...

cve-2021-29447_auto-script

CVE-2021-29447: WordPress Media Library XXE-Schwachstelle Dieses Repository beschreibt die CVE-2021-29447-Schwachstelle, einen kritischen Sicherheitsfehler in WordPress, der authentifizierte XML-External-Entity-Angriffe XXE über die Media Library ermöglichte. Es enthält außerdem ein automatisches...

CVE-2022-32114

Strapi v4.1.12 Explicação da Vulnerabilidade: Uma vulnerabilidade de upload de arquivo irrestrito na função Add New Assets do Strapi v4.1.12 permite que atacantes executem código arbitrário por meio de um arquivo criado Vetores de Ataque: Após fazer upload de um arquivo contendo conteúdo malicios...

CVE-2021-29447-PoC

CVE-2021-29447 Prova de Conceito root@kitploit: ╔═╗╦ ╦╔═╗ ║ ╚╗╔╝║╣────2021-29447 ╚═╝ ╚╝ ╚═╝ Written By Isa Ebrahim - 0xRar on January, 2023 ═══════════════════════════════════════════════════════════════════════════ Title: Wordpress XML parsing issue in the Media Library leading to XXE Affected...

CVE-2026-16959

The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection...

EUVD-2026-63820

The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection...

CVE-2026-16959

CVE-2026-16959 affects the Media Library Assistant WordPress plugin prior to version 3.40 . The root cause is an unvalidated search parameter (identified as mla_search_connector ) that is concatenated directly into a SQL query within a media-library query handler, enabling SQL injection by authen...

CVE-2026-16959 Media Library Assistant < 3.40 - Author+ SQL Injection via mla_search_connector

The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection...