cve-2017-12945

CVE-2017-12945 Exploit para CVE-2017-12945 Existe uma vulnerabilidade de injeção de comandos do sistema operativo remota autenticada cega nos Mersive Solstice Pods - uma plataforma sem fios de colaboração e apresentação concebida pela Mersive Technologies Inc. - que executam versões do firmware...

Pods <= 3.3.9 - Unauthenticated Privilege Escalation via pods_admin AJAX Router

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the podsadmin AJAX router funnels every access check — including the method allowlist, nonce...

poc_CVE-2018-1002105

CVE-2018-1002105 PoC PoC autenticato Demo Utilizzo PoC non autenticato Demo Utilizzo PoC autenticato Exploit proof-of-concept per CVE-2018-1002105. L'exploit attuale richiede i privilegi create e get su pods e pods/exec. È stato aggiunto il supporto per portforward e attach, che richiedono permes...

CVE-2026-19598-PoC

CVE-2026-19598-PoC Prova di concetto per CVE-2026-19598 che interessa Pods ⚠️ Solo Ricerca sulla Sicurezza / Test Autorizzati Questo repository contiene una Proof of Concept per CVE-2026-19598. Software Interessato WordPress Pods = 3.3.9 Vulnerabilità Escalation dei privilegi non autenticata. PoC...

CVE-2026-74851

The Pods WordPress plugin before 3.3.9.1 does not correctly compare a display callback against its list of blocked functions, allowing users with the author role and above to execute arbitrary code on the server. Only sites using the restricted display-callback mode are affected, which is the...

EUVD-2026-66277

The Pods WordPress plugin before 3.3.9.1 does not correctly compare a display callback against its list of blocked functions, allowing users with the author role and above to execute arbitrary code on the server. Only sites using the restricted display-callback mode are affected, which is the...

CVE-2026-74851

The Pods WordPress plugin before 3.3.9.1 contains a flaw in how it compares a display callback against its list of blocked functions, enabling users with the author role or above to achieve remote code execution on the server. The vulnerability only affects sites using the restricted display-call...

CVE-2026-74851 Pods < 3.3.9.1 - Author+ RCE via Shortcode Display Callback

The Pods WordPress plugin before 3.3.9.1 does not correctly compare a display callback against its list of blocked functions, allowing users with the author role and above to execute arbitrary code on the server. Only sites using the restricted display-callback mode are affected, which is the...

kubebox

= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal and Web console for Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...

popeye

Popeye: Kubernetes Live Cluster Linter Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestra...

CVE-2026-19598

🚨 CVE-2026-19598 https://plugins.trac.wordpress.org/browser/pods/tags/3.3.9/includes/general.phpL400 Il plugin Pods – Custom Content Types and Fields per WordPress è vulnerabile all'Escalation dei Privilegi tramite Bypass dell'Autorizzazione in tutte le versioni fino alla 3.3.9 inclusa. La...

kube-monkey

kube-monkey è un'implementazione del Chaos Monkey di Netflix per i cluster Kubernetes. Elimina in modo casuale i pod Kubernetes k8s nel cluster, incoraggiando e convalidando lo sviluppo di servizi resilienti ai guasti. Unisciti a noi su kube-monkey nello Slack di Kubernetes. kube-monkey viene...

100,000 WordPress Sites Affected by Privilege Escalation Vulnerability in Pods WordPress Plugin

On August 10th, 2026, we received a submission for an Unauthenticated Privilege Escalation vulnerability in Pods, a WordPress plugin with more than 100,000 active installations. This vulnerability allows unauthenticated attackers to escalate their privileges to administrator and perform various...

CVE-2026-19598

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the podsadmin AJAX router funnels every access check — including the method allowlist, nonce...

EUVD-2026-59778

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the podsadmin AJAX router funnels every access check — including the method allowlist, nonce...

CVE-2026-19598

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the podsadmin AJAX router funnels every access check — including the method allowlist, nonce...

CVE-2026-19598 Pods <= 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass to Admin Methods via 'pods_admin' AJAX Router

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the podsadmin AJAX router funnels every access check — including the method allowlist, nonce...

CVE-2026-19598

Pods plugin

WordPress Pods plugin <= 3.3.9 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Nhien Pham nhienit - GalaxyOne in WordPress Plugin Pods versions 3.3-3.3.9...

PT-2026-73042

Name of the Vulnerable Software and Affected Versions Pods – Custom Content Types and Fields versions prior to 3.3.9.1 Description The Pods – Custom Content Types and Fields plugin for WordPress contains a privilege escalation flaw allowing unauthenticated attackers to gain Administrator privileg...