CVE-2026-78171

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2025-57819-POC

CVE-2025-57819 — FreePBX SQL Injection → RCE PoC CVE-2025-57819 ist eine kritische SQL-Injection-Schwachstelle in FreePBX, die es einem nicht authentifizierten Angreifer ermöglicht, durch die Verkettung einer SQL-Injection mit einer Cron-Job-Injection eine Remote Code Execution zu erreichen. ⚠️...

wp-cve-2026-63030-check

wp2shell-check Verificatore di esposizione non intrusivo per la catena RCE pre-autenticazione "wp2shell" di WordPress CVE-2026-63030 + CVE-2026-60137. ⚠️ Solo uso autorizzato. Esegui questo strumento solo su istanze WordPress di tua proprietà o per le quali hai esplicita autorizzazione al test. È...

SQL-Injection-and-RCE_CVE-2025-57819

FreePBX RCE PoC Não Autenticado Resumo As versões 15, 16 e 17 do FreePBX contêm uma vulnerabilidade de Execução Remota de Código RCE causada por sanitização insuficiente de dados fornecidos pelo usuário em endpoints. Um atacante não autenticado pode manipular o banco de dados e obter execução...

wp2shell-detect

wp2shell-detect Blackbox, rilevatore non intrusivo per wp2shell — la catena RCE pre-autenticazione nel core di WordPress divulgata il 2026-07-17: CVE-2026-63030 — confusione di route nell'endpoint REST batch /wp-json/batch/v1: una sub-request il cui percorso fa fallire wpparseurl finisce nell'arr...

wp2shell_scanner

wp2shellscanner हाल की WordPress कोर भेद्यताओं के लिए गैर-आक्रामक डिटेक्शन स्कैनर — जिसमें wp2shell प्री-ऑथेंटिकेशन RCE श्रृंखला भी शामिल है। wp2shellscanner.py किसी WordPress साइट के कोर संस्करण का फ़िंगरप्रिंट लेता है और उसकी सार्वजनिक रूप से विज्ञापित REST API सतह को पढ़ता है, फिर प्रत्येक ट्र...

CVE-2026-78171

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/processlogin.php. The manipulation of the User argument allows a remote, unauthenticated attacker to inject SQL queries, potentially compromising confidentiality, integrity, and availabilit...

CVE-2026-78171 itsourcecode Sales and Inventory System processlogin.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...

EUVD-2026-64693

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...

wordpress-cve-2026-63030

WordPress REST API Batch-Routen-Konfusion + SQL-Injection → RCE Pre-Authentifizierung, nicht authentifiziert, keine Plugins erforderlich. Funktioniert gegen eine Standard-WordPress-Installation über den Batch-Endpunkt der REST-API...

WP2Shell-CVE-2026-63030-POC

WP2Shell Rilevatore e PoC di Validazione Copertura CVE: CVE-2026-63030 e CVE-2026-60137 Uso previsto: Solo test di sicurezza autorizzati, validazione difensiva e lab locali usa e getta WP2Shell è una catena di vulnerabilità del core di WordPress che combina un bug di confusione batch-route dell'A...

Deep-Reaver

Deep Reaver Deep Reaver è un potente toolkit di valutazione delle vulnerabilità e sfruttamento potenziato dall'IA, costruito in Python. Ispirato a strumenti come Nmap e Nessus, Deep Reaver è progettato per una scansione approfondita e modulare di applicazioni web e servizi. Caratteristiche Analis...

CVE-2026-63030-wp2r00t

wp2r00t - Proof-of-Concept per SQL Injection Blind tramite Confusione di Rotta Batch in WordPress Un proof-of-concept autonomo per l'iniezione SQL blind non autenticata raggiungibile tramite l'endpoint batch REST di WordPress /wp-json/batch/v1. È un'implementazione indipendente costruita a partir...

wp2shell

wp2shell por: ek0ms savi0r Execução Remota de Código Não Autenticada para POC do WordPress Core CVE-2026-63030 + CVE-2026-60137 O exploit wp2shell para uma cadeia de vulnerabilidades críticas no núcleo do WordPress. Ele encadeia um bug de confusão de rota de lote batch da API REST com uma injeção...

WordPresShell

WordPresShell PoC de RCE pré-auth para CVE-2026-63030 + CVE-2026-60137 núcleo do WordPress. Confusão de rota REST /batch/v1 → SQLi via WPQuery authornotin → criação de admin sem autenticação → webshell. Arquivo único, apenas com stdlib do Python. Vulnerabilidade: Adam Kues Searchlight Cyber...

wp2shell-lab

wp2shell-lab PoC e laboratório educativo para CVE-2026-63030 + CVE-2026-60137 : injeção SQL pré-autenticação no core do WordPress via confusão de rota batch. Descoberto por Adam Kues Searchlight Cyber / Assetnote. Corrigido no WordPress 6.9.5 / 7.0.2. Início rápido root@kitploit: iniciar o...

vuln-bank

Applicazione Bancaria Vulnerabile 🏦 Un'applicazione web deliberatamente vulnerabile per esercitarsi nel testing della sicurezza applicativa di Web, API e LLM, nella revisione sicura del codice e nell'implementazione della sicurezza nelle pipeline CI/CD. ⚠️ AVVISO: Questa applicazione è...

EUVD-2026-64668

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...

PT-2026-81046

Name of the Vulnerable Software and Affected Versions WooBeWoo Product Filter Pro versions prior to 3.1.9 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes t...

PT-2026-81047

Name of the Vulnerable Software and Affected Versions Boost versions 2.0.4 and earlier Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database...