wp2shell-poc

wp2shell PoC Der erste Proof-of-Concept der Pre-Auth-Timing-basierten SQL-Injection-PoC für die WordPress-REST-API-Batch-Route-Konfusionskette CVE-2026-63030 + CVE-2026-60137 Erreichte Befehlsausführung, ohne auch nur zu versuchen, das Admin-Passwort zu knacken. Betroffen: WordPress 6.9.0–6.9.4...

CVE-2024-4898

CVE-2024-4898-Poc CVE-2024-4898 InstaWP Connect – 1-click WP Staging & Migration = 0.1.0.38 - Falta de autorización para configuración de API no autenticada/Actualización arbitraria de opciones/Creación de usuario administrador...

CVE-2026-27344

Broken Access Control in Inseri Core WordPress Plugin Plugin: Inseri Core Affected Component: /includes/restapi.php Vulnerability Type: Broken Access Control Missing Authorization Status: Reported in August 2026– Closed as Duplicate. Summary Whilst testing this summer I came across a Broken Acces...

CVE-2026-48907

CVE-2026-48907 Description This file CVE-2025-9209.py is a mass exploitation tool targeting vulnerability CVE-2025-9209. Core functionalities: Scans a list of sites by calling /wp-json/wp/v2/users Analyzes the response to look for sensitive user data such as public and private keys, tokens, and...

kraker

Acerca de Configuración Servidor Configuración Agente Configuración Compilar desde el código fuente Usar la versión precompilada Contactos Acerca de Kraker es un sistema distribuido de fuerza bruta de contraseñas que te permite ejecutar y gestionar hashcat en diferentes servidores y estaciones de...

kraker

About Setup Server Setup Agent Setup Build from source Using release Contacts About Kraker is a distributed password brute-force system that allows you to run and manage the hashcat on different servers and workstations, focused on easy of use. There were two main goals during the design and...

DSpace__DSpace_CVE-2022-31192_5-100

DSpace DSpace Documentation | DSpace Releases | DSpace Wiki | Support Overview DSpace open source software is a turnkey repository application used by more than 2,000 organizations and institutions worldwide to provide durable access to digital resources. For more information, visit...

CVE-2025-1562

CVE-2025-1562 POST /index.php?restroute=%2Fautonami-app%2Fplugin%2Finstallandactivate&bwf-nonce=0f2449cddf9a7d692627071cfdef9ecf HTTP/2 Host: wp.192.168.31.110.nip.io User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/91.0.4472.124 Safari/537.36...

CVE-2024-25600

Bricks Builder RCE Exploit CVE-2024-25600 Este proyecto contiene un script de explotación en Python dirigido a la vulnerabilidad de ejecución remota de código RCE en el plugin Bricks Builder de WordPress, identificada como CVE-2024-25600. El exploit permite la ejecución remota de comandos no...

CVE-2024-9707-Poc

CVE-2024-9707-Poc 🌐 Descripción Este script explota la vulnerabilidad en el plugin Hunk Companion de WordPress CVE-2024-9707, permitiendo a atacantes no autorizados instalar y activar plugins arbitrarios a través del endpoint de la API REST /wp-json/hc/v1/themehunk-import. Características...

CVE-2026-53625-GLPI-PoC

CVE-2026-53625 - GLPI Privilege Escalation via authtype Manipulation PoC 📌 Overview This repository provides an ethical Proof-of-Concept PoC for CVE-2026-53625 , a High severity privilege escalation vulnerability in GLPI affecting all versions from 0.70 through 11.0.7. A low-privilege user...

CVE-2024-8522

CVE-2024-8522 LearnPress – WordPress LMS Plugin execute class-lp-course-db.php:564, LPCourseDB-getcourses Courses.php:241, LearnPress\Models\Courses::getcourses class-lp-rest-courses-v1-controller.php:502, LPJwtCoursesV1Controller-getcourses class-wp-rest-server.php:1230,...

CVE-2022-1388

CVE-2022-1388 - F5 BIG-IP iControl REST Authentication Bypass RCE This Python script exploits CVE-2022-1388, a critical vulnerability in F5 BIG-IP iControl REST that allows unauthenticated remote command execution via improper access control and HTTP header handling. ⚠️ For educational and...

CVE-2024-34444-Exploit-Poc

CVE-2024-34444 - Escáner de Autorización Faltante de Slider Revolution Escáner masivo profesional para CVE-2024-34444 que afecta al plugin de WordPress Slider Revolution 6.7.0 Banner 🎯 Descripción CVE-2024-34444 es una vulnerabilidad de Autorización Faltante en el plugin de WordPress Slider...

CVE-2023-35085-POC-EXP

PS: Todos los scripts están hechos por Gemini 2.5 pro y CLaude 3.7. Puede que no funcionen bien, porque yo no sé cómo usar la API "/mifs/rest/api/v2/command/exec", al igual que las IAs, que fingían que lo sabían muy bien...

CVE-2026-6723

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 1.6.11.11. This is due to the appointment update REST API endpoint not restricting which fields can be modified by...

CVE-2026-63030-Wp2Shell

CVE-2026-63030 wp2shell — WordPress Core Pre-Auth RCE REST API batch route confusion chained with CVE-2026-60137 SQL injection TL;DR — An unauthenticated attacker can chain a WordPress REST API batch-routing bug with a SQL injection in WPQuery to reach full remote code execution on a stock...

CVE-2026-6723 Appointment Booking Calendar <= 1.6.11.11 - Incorrect Authorization to Unauthenticated Sensitive Field Modification via Appointment Public Token

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 1.6.11.11. This is due to the appointment update REST API endpoint not restricting which fields can be modified by...

CVE-2026-6723

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to and including 1.6.11.11 . The root cause is an appointment update REST API endpoint that fails to restrict which fields can be modified by to...

EUVD-2026-96063

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 1.6.11.11. This is due to the appointment update REST API endpoint not restricting which fields can be modified by...