34835 matches found
PT-2026-91168
Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Upload in SP Page Builder Free and Pro 4.0.0 - 6.9.0 - The folder request parameter replaced the generated date-based destination folder in its entirety and was then passed to Folder::create and File::upload without either...
Linux Distros Unpatched Vulnerability : CVE-2026-38998
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in the SocketDescriptor::tcpReadHandler1 function liveMedia/RTPInterface.cpp of LIVE555 Streaming Media version 2026.02.26 allows attackers to...
PT-2026-91167
Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Rename Allowing Arbitrary File Rename in SP Page Builder Free and Pro 4.0.0 - 6.9.0 - The media rename task applied neither of the directory boundary checks used by the folder operations in the same controller, and its...
CVE-2026-36453
creationtimestamp| type| source ---|---|--- 2026-09-13 23:04:26+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mvgpffh7vv23...
wordpress-cve-2021-29447
Exploit de WordPress CVE-2021-29447 Explota la inyección de entidades externas XXE autenticada en la librería de medios de WordPress para exfiltrar archivos. Parcheado en WordPress 5.7.1. Requiere credenciales válidas de WordPress para interactuar con la librería de medios. Uso root@kitploit:...
CVE-2021-29447
CVE-2021-29447 PoC Este repositorio contiene un exploit de Prueba de Concepto PoC para la vulnerabilidad CVE-2021-29447 que afecta a WordPress 5.6 y 5.7 usando PHP 8. El exploit demuestra cómo un atacante, con la capacidad de subir archivos, puede explotar una vulnerabilidad de análisis XML en la...
CVE-2021-29447
WordPress XXE Vulnerability : CVE-2021-29447 A user with the ability to upload a malicious WAVE file like an Author can exploit an XML parsing issue in the Media Library in WordPress leading to XXE attacks and that could lead to file system disclosure Vulnerable code XML External Entity XXE...
CVE-2025-8889
Exploit Title: WordPress Compress Then Upload Plugin 1.0.3 Arbitrary File Upload to RCE Date: 2025-07-23 Exploit Author: Muhammed Çelik Vendor Homepage: https://wordpress.com/plugins/compress-then-upload Software Link: https://downloads.wordpress.org/plugin/compress-then-upload.latest-stable.zip...
CVE-2023-4634-PoC
CVE-2023-4634 - Vulnerabilidad RCE en el plugin de WordPress Media Library Assistant 1. Construcción y puesta en marcha del entorno root@kitploit: cd Stand docker-compose up --build -d 2. Espera a que los servicios estén listos 60 segundos root@kitploit: sleep 60 curl -I http://localhost:8080 3...
-CVE-2015-10137-WordPress-N-Media-Website-Contact-Form-with-File-Upload-1.3.4
WordPress N-Media Website Contact Form with File Uploader Análisis de la vulnerabilidad de carga de archivos 1. Análisis del código de la vulnerabilidad Archivo del plugin: classes/plugin.class.php, método: uploadfile root@kitploit: function uploadfile // ... if ! empty $FILES $tempFile = $FILES...
CVE-2024-53255
CVE-2024-53255 boid CMS 2.1.1 - Cross-Site Scripting reflejado XSS Descripción: Existe una vulnerabilidad de XSS reflejado en el endpoint /admin?page=media en el parámetro file, que permite a un atacante inyectar código JavaScript arbitrario. Pasos para explotar: 1- Iniciar sesión en el CMS y...
cve-2015-1538-1
Included is a python script that generates an MP4 exploiting the ‘stsc’ vulnerability otherwise known as CVE-2015-1538 1. This is one of the most critical vulnerabilities I reported in the Stagefright library. The expected result of the exploit is a reverse shell as the media user. As detailed in...
CVE-2026-90775
creationtimestamp| type| source ---|---|--- 2026-09-13 13:30:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/117263972638075018 2026-09-13 13:30:25+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvfpcyijdd2a...
CVE-2026-89689
creationtimestamp| type| source ---|---|--- 2026-09-13 12:00:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfkbktwx32t...
CVE-2026-85636
creationtimestamp| type| source ---|---|--- 2026-09-13 11:20:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvfhzupiqy2p 2026-09-13 11:20:03+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117263460113166406...
CVE-2026-90616
creationtimestamp| type| source ---|---|--- 2026-09-13 10:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117263264954155475 2026-09-13 10:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvffb6fut32p...
CVE-2026-80894
creationtimestamp| type| source ---|---|--- 2026-09-13 06:40:23+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117262360157893066 2026-09-13 06:50:02+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mveyx2b5dw2e...
Project-Project-Chimera-Exploiting-a-Modern-WordPress-XXE-to-Pillage-Secrets-
Objetivo del Proyecto: Demostrar una cadena de ataque completa sobre una instalación vulnerable de WordPress, explotando CVE-2021-29447 XXE en la biblioteca de medios para lograr ejecución remota de código y compromiso total del sistema. Fase 1: Reconocimiento y Enumeración Escaneo de Red con Nma...
spyder-osint
Spyder🕷 Spyder is a universal open-source intelligence OSINT research tool that performs searches using large global databases. Features 1. Phone number information 2. IP address information 3. SocialsFacebook, Instagram, Telegram, Twitter information 4. Email information & Email bomber 5. Person...