Moodle-CVE-2024-43425-Exploit

ثغرة تنفيذ الأوامر عن بعد في Moodle CVE-2024-43425 يحتوي هذا المستودع على سكربت استغلال بلغة بايثون يستهدف ثغرة تنفيذ الأوامر عن بعد RCE في Moodle CVE-2024-43425. إخلاء مسؤولية: يتم توفير هذه الأداة كما هي لأغراض تعليمية وبحثية فقط. استخدمها فقط على الأنظمة التي لديك إذن صريح لاختبارها. المؤلف غي...

EUVD-2026-71015

phpMyFAQ before 4.1.8 contains an authorization bypass vulnerability in the question creation endpoint where the isAddingQuestionsAllowed method grants access to all callers when main.enableAskQuestions is enabled, ignoring the records.allowQuestionsForGuests setting. Unauthenticated attackers ca...

Missing Authorization

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Missing Authorization in the API endpoints responsible for category creation, FAQ creation, FAQ updating, and question creation due to missing permissio...

Ultimate FAQ < 2.1.2 - Subscriber+ Arbitrary FAQ Creation

The plugin does not have capability and CSRF checks in the ewdufaqwelcomeaddfaq and ewdufaqwelcomeaddfaqpage AJAX actions, available to any authenticated users. As a result, any users, with a role as low as Subscriber could create FAQ and FAQ questions...