CVE-2026-1529-PoC-keycloak-unauthorized-registration-via-improper-invitation-token-validation

Herramienta de Explotación CVE-2026-1529 para Keycloak Keycloak: Registro no autorizado de organizaciones mediante validación incorrecta de tokens de invitación Aviso Legal Esta herramienta es solo para fines educativos y de pruebas de seguridad. Úsela únicamente en sistemas para los que tenga...

CVE-2026-7401-XSS

CET 自动化评分系统中的存储型 XSS — 学生注册（未认证 → 管理员仪表盘） 详细信息 字段| 值 ---|--- 供应商| SourceCodester 供应商 URL| https://www.sourcecodester.com 产品| 基于 PHP 和 MySQL 的 CET 自动化评分系统（含 AI 预测分析） 产品 URL| https://www.sourcecodester.com/php/18686/cet-automated-grading-system-ai-predictive-analytics-php-and-mysql.html 版本| 1.0 漏洞类...

CVE-2026-1529

Herramienta de Explotación CVE-2026-1529 Keycloak CVE-2026-1529 : Keycloak - Registro de organización no autorizado mediante validación incorrecta del token de invitación ⚠️ ADVERTENCIA : Esta herramienta es solo para fines educativos y de pruebas de seguridad autorizadas. El acceso no autorizado ...

PT-2026-89294

The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration form, reading the permitted-role allow-list from an arbitrary attacker-controlled post instead. A user able to create a post Contributor...

CVE-2025-59287-WSUS

CVE-2025-59287-WSUS hawktrace POC 漏洞利用的 powershell 版本 https://hawktrace.com/blog/CVE-2025-59287-UNAUTH 1: 编辑脚本中的变量（url、port 等） 2: 启动 netcat 监听器 3: 运行脚本 - 它将自动下载 ysoserial.net，生成 payload 并将漏洞利用发送到 WSUS 服务器 这将在你的控制台中生成一个名为 hawktrace.local 的新计算机 4: （重新）打开 WSUS 控制台以触发漏洞利用。 控制台将报错 但这会触发反向 shell 并连接到你的...

CVE-2026-54694

SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a single exploitable attack chain, with three distinct exploitation paths of escalating impact. StringHighlighter.js builds an HTML string by interpolating raw value substrings...

CVE-2026-54694

CVE-2026-54694 affects SkillTree (NationalSecurityAgency/skills-service), a micro-learning gamification platform, in versions prior to 4.4.2 . Two flaws chain into a Stored XSS that enables admin account takeover : StringHighlighter.js interpolates unencoded user input into HTML rendered via v-ht...

CVE-2026-54694 NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover

SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a single exploitable attack chain, with three distinct exploitation paths of escalating impact. StringHighlighter.js builds an HTML string by interpolating raw value substrings...

CVE-2026-54694 NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover

SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a single exploitable attack chain, with three distinct exploitation paths of escalating impact. StringHighlighter.js builds an HTML string by interpolating raw value substrings...

EUVD-2026-75116

SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a single exploitable attack chain, with three distinct exploitation paths of escalating impact. StringHighlighter.js builds an HTML string by interpolating raw value substrings...

GHSA-PQQC-8V73-9GG2 LF Edge eKuiper: SSRF in External Service

Summary Server-side request forgery SSRF vulnerability in eKuiper allows an attacker with permissions to register external services or create rules to induce the eKuiper server to make requests to unintended network locations, such as internal services, loopback interfaces localhost, or cloud...

WP-CVE-2025-6934

WP-CVE-2025-6934 | Opal Estate Pro = 1.7.5 - 未经认证的权限提升 这是一个Python脚本，用于利用WordPress插件Opal Estate Pro = 1.7.5中的CVE-2025-6934漏洞。该工具允许未经认证的攻击者注册新用户，并将其权限提升至管理员，无需授权。 使用方法 1. 确保已安装依赖： root@kitploit: pip install requests beautifulsoup4 2. 使用目标列表文件运行脚本： root@kitploit: python2 CVE-2025-6934.py targets.txt...

CVE-2026-47156 MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator

MantisBT is an open source bug tracker. Versions 2.28.3 and earlier contain a critical authentication bypass in the SOAP API's mcichecklogin function. Any user knowing any valid cookiestring can authenticate as any other user knowing their username, including the administrator, without knowing th...

CVE-2025-70899

Este repositorio contiene la Prueba de Concepto que demuestra la vulnerabilidad de protección CSRF faltante en el Sistema de Registro de Cursos en Línea de PHPgurukul. 📄 Vea el PoC completo aquí: MissingCSRFprotectionpoc.md...

CVE-2026-6145

CVE-2026-6145 — User Registration & Membership for WordPress: 未认证管理员审批绕过 针对 CVE-2026-6145 的概念验证漏洞利用，这是一个存在于 WordPress 插件 User Registration & Membership（≤ 5.1.5）中的缺失授权漏洞，允许未认证攻击者在创建新账户时绕过管理员审批要求。 摘要 | ---|--- CVE ID| CVE-2026-6145 CNA| Wordfence 漏洞类型| 缺失授权 — 管理员审批绕过 CWE| CWE-862（缺失授权） CVSS 3.1| 5....

CVE-2022-44830

建议描述 Sourcecodester Event Registration App v1.0 被发现通过 First Name、Contact 和 Remarks 字段存在多个 CSV 注入漏洞。这些漏洞允许攻击者通过精心制作的 Excel 文件执行任意代码。 附加信息 Proof of Concept: https://drive.google.com/file/d/17rSb8GLFPQfqnVFI56AYffbVMDg8z75t/view?usp=sharing Vendor Homepage:...

CVE-2021-22210

0x01 前言 声明:本项目仅供学习和交流使用，请勿用于非法未授权测试！ 更新记录 10.30 增加了burp代理池 重写了命令行参数 增加了gitlab未授权批量以及单个检测功能 0x02 使用说明 安装 root@kitploit: pip3 install - r requirements.txt 使用方法 root@kitploit: usage: CVE-2021-22205.py -h -w WAY -u URL -f FILE CVE-2021-22205 optional arguments: -h, --help show this help message and...

CVE-2025-2563

CVE-2025-2563 User Registration & Membership = 4.1.1 - 未認証の権限昇格 免責事項！ このCVE（Common Vulnerabilities and Exposures）に関する記述で提示される情報は、教育目的および情報提供のみを目的としています。提供される詳細は、公開されているリソース、調査、および著者による分析に基づいています。本コンテンツは、ハッキング、悪用、またはシステムへの不正アクセスを含む違法行為を促進または奨励することを意図したものではありません。...

SAP NetWeaver Missing Authentication (3759472)

The version of the SAP NetWeaver kernel detected on the remote host is affected by a missing authentication vulnerability as referenced in SAP Security Note 3759472: - SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during...

CVE-2026-86075

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the OAuth Dynamic Client Registration endpoint bounded redirecturis but accepted arbitrarily large clientname and granttypes values. An unauthenticated remote caller could repeatedly persist oversized values in...