metasploitable-pentest-lab

Explotación de vulnerabilidades en Metasploitable Ciclo completo de un ataque real sobre un entorno controlado y aislado: preparación del laboratorio, reconocimiento con nmap, priorización de superficie de ataque, mapeo a CVE, explotación con Metasploit, post-explotación, extracción y cracking de...

WordPress Tutor LMS plugin <= 4.0.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion via 'lesson_id' Parameter vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post Deletion via 'lessonid' Parameter vulnerability discovered by EUNHO KIM - Hyundai Autoever in WordPress Plugin Tutor LMS versions = 4.0.8...

WordPress Filter Gallery plugin 1.1.2-1.1.4 - Subscriber+ Arbitrary Post Overwrite and Plugin Option Deletion vulnerability

Subscriber+ Arbitrary Post Overwrite and Plugin Option Deletion vulnerability discovered by Seongwon Lee in WordPress Plugin Filter Gallery versions 1.1.2-1.1.4...

rust_citadel

Citadel Servidor de cifrado híbrido post-cuántico y gestión de claves. Citadel combina X25519 + ML-KEM-768 para encapsulación de claves y AES-256-GCM para cifrado de datos, siguiendo el enfoque híbrido del NIST para la transición post-cuántica. Las aplicaciones cifran y descifran datos a través d...

CVE-2026-85410

The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.2.2. This is due to the plugin not properly verifying that a user is...

CVE-2026-85410

The Master Addons for Elementor WordPress plugin is vulnerable to an authorization bypass in versions up to and including 3.2.2 . The plugin fails to properly verify user permissions, and the jltma_popup custom post type is registered with capability_type='post', making its admin edit screen acce...

EUVD-2026-82793

The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.2.2. This is due to the plugin not properly verifying that a user is...

CVE-2026-85410 Master Addons for Elementor <= 3.2.2 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Modification/Deletion via 'popup_id' Parameter

The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.2.2. This is due to the plugin not properly verifying that a user is...

CVE-2026-85410 Master Addons for Elementor <= 3.2.2 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Modification/Deletion via 'popup_id' Parameter

The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.2.2. This is due to the plugin not properly verifying that a user is...

QuantumLock

QuantumLock Specification Unbreakable, Quantum-Ready, Forever. HTML Mirror: https://roxanneardary.com/quantumlock-specification/ Vision QuantumLock is an open-source protocol specification designed to make Bitcoin more resilient against the development of quantum computing and other emerging...

CVE-2026-12739 WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion

The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-12739

The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable to authorization bypass in all versions up to and including 4.5.0 . The root cause is that the plugin does not properly verify user authorization before performing actions. An authenticated attacker ...

CVE-2026-89138 Filter Gallery <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'image_id' Parameter via ufg_save_gallery AJAX Action

The Filter Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2026-89138

The Filter Gallery plugin for WordPress is affected by an authorization bypass in all versions up to and including 1.1.4 . The root cause is a missing authorization check in the ufg_save_gallery AJAX action, specifically via the image_id parameter. This allows authenticated attackers with subscri...

EUVD-2026-82726

The Filter Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...

Pentest-Command

Antecedentes del proyecto Durante el proceso de pruebas de penetración, utilizamos varios tipos de frameworks, por ejemplo: MSF、CS、Empire、Impacket, etc. El propósito principal de este proyecto es recopilar los comandos comúnmente utilizados en la etapa de post-explotación. Conocimientos básicos...

Monitor

Descripción del proyecto Se utiliza para mantener privilegios en la fase de post-explotación. Uso del proyecto Paso 1 : Descargue el proyecto y compile Monitor.cpp con Visual Studio; también puede usar el ya compilado. El código de Monitor.cpp es el siguiente: root@kitploit: include "Windows.h" i...

CVE-2026-90978

The Filter Gallery WordPress plugin before 1.1.5 does not verify the nonce on several of its AJAX handlers when the nonce field is omitted, and applies no capability check, allowing low-privileged users to overwrite the content of arbitrary posts and delete the Filter Gallery WordPress plugin...

CVE-2026-23006-Kyber-Ciphertext-Length-Side-Channel

CVE-2026-23006 – Canal lateral de longitud de texto cifrado de Kyber Código del programa Python root@kitploit: kyberlengthleak.py - Leaks secret key bit based on ciphertext length import random Simulate encapsulation: ciphertext length depends on message bit def encapsulatepk, bit: In a flawed...

MAL-003

MAL-003: Bypass de seguridad en Groovy y XSS almacenado en Apache OfBiz Se han identificado una RCE en Groovy y XSS en Apache OfBiz = 18.12.05. ¿Por qué no hay CVE? Apache OfBiz no crea CVEs para "ataques posteriores a la autenticación realizados con credenciales de demostración, especialmente co...