WordPress Smash theme <= 1.12.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Smash versions = 1.12.0...

WordPress Tantra theme <= 2.9.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Tantra versions = 2.9.0...

WordPress Travesia theme <= 1.1.16 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Travesia versions = 1.1.16...

WordPress Veto theme <= 1.6.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Veto versions = 1.6.0...

WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Theme Buzz Stone | Magazine & Viral Blog WordPress Theme versions = 1.0.2...

WordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Theme Photolia versions = 1.0.3...

CVE-2026-85097 Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter

The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter during form submission. An unauthenticated...

CVE-2026-85097

The Bricksforge plugin for WordPress (versions up to and including 3.1.8.9 ) is vulnerable to unauthenticated arbitrary file upload . The root cause is insufficient validation of the attacker-controlled URL field within the 'temporaryFileUploads' parameter during form submission. An unauthenticat...

EUVD-2026-94793

The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter during form submission. An unauthenticated...

CVE-2023-3722

CVE-2023-3722 إثبات مفهوم POC بلغة بايثون لـ CVE-2023-3722 Avaya Aura Device Services رفع ملف غير مقيد يؤدي إلى تنفيذ تعليمات برمجية عن بعد RCE. يستخدم هذا السكريبت طلب PUT لرفع ملف php باسم مكون من ثمانية أرقام عشوائية. ثم يقوم بإرسال طلب GET لاسترداد هذا الملف وتحليل المخرجات للحصول على ناتج...

CVE-2026-103692

The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including...

WordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin YITH WooCommerce Affiliates versions = 3.31.0...

EUVD-2026-94762

The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including...

CVE-2026-11344-RCE

Système de gestion de véhicules en PHP - Exécution de code à distance non authentifiée via téléchargement de fichier dans newdriver.php Informations sur la vulnérabilité Champ| Détails ---|--- Produit| Système de gestion de véhicules en PHP Vendeur| code-projects.org Version| V1.0 Type de...

metasploit-payloads

metasploit-payloads Statut de build Appveyor : Il s'agit d'un dépôt unifié pour différents payloads du Metasploit Framework, qui fusionne ces dépôts : C Windows Meterpreter Java and Android Meterpreter and Payloads Python and PHP Meterpreter Un Meterpreter C multiplateforme alternatif, appelé...

CVE-2016-16113-POC

احصل على RCE - استغلال نظام Bludit CMS | | / / \ / | | \ \ / / ' | | | | ' | | | | | \ V /| | | | || | | | | | | | ,|/ / || ||/|| || ||| أداة استغلال آلية تجمع بين CVE-2019-17240 تجاوز المصادقة و CVE-2019-16113 رفع ملف عشوائي لتحقيق تنفيذ تعليمات برمجية عن بُعد على تركيبات Bludit CMS القابلة...

Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-

استغلال ثغرة تنفيذ الأوامر عن بُعد CVE-2024-7954 مشروع اختبار الثغرات البرمجية مقدم من: شيفانش كونتال نظرة عامة يوضح هذا المشروع استغلال ثغرة CVE-2024-7954 ، وهي ثغرة حرجة من نوع تنفيذ الأوامر عن بُعد RCE تؤثر على نظام إدارة المحتوى SPIP CMS من خلال إضافة porteplume. تسمح الثغرة للمهاجمين غير...

metasploit-javapayload

Ce dépôt a été fusionné dans metasploit-payloads Veuillez noter que ce dépôt a été fusionné dans un dépôt unifié pour les meterpreters : https://github.com/rapid7/metasploit-payloads L'historique a été préservé, ainsi que la préhistoire de metasploit-framwork :...

CVE-2026-82627

The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via deserialization of untrusted input. This makes it possible for authenticated...

Juniper J-Web - Remote Code Execution

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain environments variables to execute remote commands id: CVE-2023-36845 info: name: Juniper J-Web - Remote Code...