CVE-2025-3102

CVE-2025-3102 The SureTriggers WordPress plugin contains a critical authentication bypass vulnerability CVE-2025-3102 that affects all versions up to and including 1.0.78...

CVE-2024-3293-Poc

CVE-2024-3293-Poc rtMedia for WordPress, BuddyPress and bbPress get \buddypress-media\app\helper\RTMediaModel.php:61 RTMediaModel-getmedia \buddypress-media\app\helper\RTMediaModel.php:227 RTMediaQuery-populatemedia \buddypress-media\app\main\routers\query\RTMediaQuery.php:869...

EXPLOIT-CVE-2026-8832-

EXPLOIT-CVE-2026-8832 An exploitation tool to test for Remote Code Execution RCE vulnerabilities in the WordPress plugin WPCode Lite Insert Headers and Footers v2.3.5. This vulnerability stems from registering the Custom Post Type CPT wpcode without defining a custom capabilitytype. This oversigh...

BinAIVulHunter

BinAIVulHunter Плагин для IDA PRO, помогающий находить уязвимости в бинарных файлах. Используйте декомпилятор HexRays из IDA PRO вместе с OpenAI ChatGPT для поиска возможных уязвимостей в бинарных файлах Отказ от ответственности: ответы, полученные при попытке найти уязвимости в бинарных файлах с...

CVE-2024-9935

CVE-2024-9935 - PDF Generator Addon for Elementor Page Builder Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all...

CVE-2026-106563

The Backstage open framework is vulnerable in the @backstage/plugin-kubernetes-backend package (prior to version 0.21.8 ) due to improper entity validation within a deprecated Kubernetes services endpoint. An authenticated user with Kubernetes read permissions can exploit this by supplying crafte...

CVE-2026-106563 Backstage: Improper entity validation in deprecated Kubernetes services endpoint

Backstage is an open framework for building developer portals. Prior to 0.21.8, the @backstage/plugin-kubernetes-backend package is affected by improper entity validation in deprecated kubernetes services endpoint. An authenticated user with Kubernetes read permissions could access Kubernetes...

EUVD-2026-94376

Backstage is an open framework for building developer portals. Prior to 0.21.8, the @backstage/plugin-kubernetes-backend package is affected by improper entity validation in deprecated kubernetes services endpoint. An authenticated user with Kubernetes read permissions could access Kubernetes...

jsdeob-workbench

jsdeob-workbench Un atelier visuel pour désobfusquer du JavaScript. Construisez des chaînes de transformations, parcourez-les, écrivez vos propres plugins. Démo YouTube https://www.youtube.com/watch?v=7zuqKoJT2BM https://www.youtube.com/watch?v=bOVnPIfjoco Qu'est-ce que c'est ? Cette application...

EUVD-2026-94375

Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in @backstage/plugin-search-backend-module-elasticsearch, search engine permission filtering could return documents denied by policy. An authenticated Backstage user subject...

CVE-2026-106562 Backstage: Incorrect authorization in search engine permission filtering

Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in @backstage/plugin-search-backend-module-elasticsearch, search engine permission filtering could return documents denied by policy. An authenticated Backstage user subject...

CVE-2026-106562

The Backstage developer portal framework contains an incorrect authorization vulnerability in its search engine permission filtering. Specifically, in versions prior to 2.1.6 of @backstage/plugin-search-backend and 1.8.7 of @backstage/plugin-search-backend-module-elasticsearch, the system could r...

CVE-2026-106561

The Backstage open framework, specifically the @backstage/plugin-kubernetes-backend package, is vulnerable to sensitive information disclosure in versions prior to 0.21.9 . An authenticated user with standard Kubernetes resource read permissions can retrieve sensitive values that the plugin is in...

EUVD-2026-94374

Backstage is an open framework for building developer portals. Prior to 0.21.9, the @backstage/plugin-kubernetes-backend package is affected by sensitive information disclosure in kubernetes resource queries. An authenticated user holding the standard Kubernetes resource read permission could...

CVE-2026-106561 Backstage: Sensitive information disclosure in Kubernetes resource queries

Backstage is an open framework for building developer portals. Prior to 0.21.9, the @backstage/plugin-kubernetes-backend package is affected by sensitive information disclosure in kubernetes resource queries. An authenticated user holding the standard Kubernetes resource read permission could...

CVE-2026-106561 Backstage: Sensitive information disclosure in Kubernetes resource queries

Backstage is an open framework for building developer portals. Prior to 0.21.9, the @backstage/plugin-kubernetes-backend package is affected by sensitive information disclosure in kubernetes resource queries. An authenticated user holding the standard Kubernetes resource read permission could...

CVE-2024-7856

CVE-2024-7856 ★ CVE-2024-7856 Arbitrary File deletion PoC ★ Description CVE-2024-7856 : MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar -f python3 CVE-2024-7856.py -u -f -i -p Example python3 CVE-2024-7856.py -u http://example.com/ -f /tmp/test python3 CVE-2024-7856.py -u...

CVE-2025-6934

CVE-2025-6934 – WordPress Opal Estate Pro Exploit 📖 Description This repository contains a Proof of Concept PoC exploit for CVE-2025-6934 , a critical vulnerability in the WordPress Plugin: Opal Estate Pro = 1.7.5, which allows creating an administrator account without authentication. ⚠️ Disclaime...

CVE-2023-32243

CVE-2023-32243 Essential Addons for Elementor - Prise de compte non autorisée. Le PoC est maintenant publié. Il a été créé à des fins éducatives et de recherche uniquement ! Utilisez-le à vos propres risques !...

EUVD-2026-94373

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...