4789 matches found
Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
The Uncanny Automator - Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.0.2. This is due to addrole and userrole functions missing proper capability checks performed through the...
archerysec
Support. Your generous donations will keep us motivated. Paypal: Archery Overview of the tool Note Requirements OpenVAS OWASP Zap Burp Scanner SSLScan Nikto NMAP Vulners Installation Windows Installation Note on installation for developers and contributors Note on manual and automated installatio...
surf
Surf - Escalate your SSRF vulnerabilities on Modern Cloud Environments surf allows you to filter a list of hosts, returning a list of viable SSRF candidates. It does this by sending a HTTP request from your machine to each host, collecting all the hosts that did not respond, and then filtering th...
CVE-2026-107786
The CatFolders WordPress plugin before 2.5.7 does not properly sanitize and escape a user-controlled sort setting before using it in a SQL query, allowing authenticated users with upload capability Author and above to perform SQL injection attacks...
lk_scraper
LinkedIn Scraper Scrapes Any LinkedIn Data Installation $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a Selenium server $ docker run -d -...
CVE-2026-122007
The Oqtane Framework (versions prior to 10.3.0 ) is vulnerable to a broken access control issue in SettingController.cs . The root cause is that the IsAuthorized and FilterPrivate methods fail to verify if a requested site matches the current alias SiteId . This allows an authenticated site admin...
EUVD-2026-115827
An out-of-bounds read and write in NTS client extension field parsing extensclientrecv in NTPsec before 1.2.5 allows a remote attacker who can send NTP server-mode replies to an NTS client to corrupt heap memory and crash ntpd, and, combined with the NTS-KE client out-of-bounds read fixed in 1.2....
CVE-2026-121506: NTPsec: An out-of-bounds read and write in NTS client extension field parsing (extens_client_recv) in NTPsec before 1.2.5…
An out-of-bounds read and write in NTS client extension field parsing extensclientrecv in NTPsec before 1.2.5 allows a remote attacker who can send NTP server-mode replies to an NTS client to corrupt heap memory and crash ntpd, and, combined with the NTS-KE client out-of-bounds read fixed in 1.2....
CVE-2026-105600
The Joomla Extension by php-web-design.com is vulnerable to Remote Code Execution (RCE) in the StageIt component. The flaw is caused by improper control of generation of code (CWE-94) when processing setting strings. This vulnerability affects StageIt versions 1.0-5.7.5 and 6.0-6.3.5 . The impact...
EUVD-2026-115178
Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5...
CVE-2026-105600 Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5
Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5...
CVE-2026-105600 Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5
Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5...
CVE-2026-102801
The Users Anywhere extension for Joomla (versions prior to 3.0.1 ) is vulnerable to the exposure of sensitive information (usernames and email addresses). The root cause is that attributes supplied within {user} or [email] / [username] tags can override global plugin settings. For instance, using...
EUVD-2026-115175
Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla 3.0.1 - An administrator can disable output of user email addresses or usernames in Users Anywhere. In affected code, attributes supplied inside a user or email /...
CVE-2026-105600: php-web-design.com StageIt extension for Joomla: Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5
Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5...
CVE-2026-102801: regularlabs.com: Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere…
Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla 3.0.1 - An administrator can disable output of user email addresses or usernames in Users Anywhere. In affected code, attributes supplied inside a user or email /...
PT-2026-135422
Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5...
CVE-2022-24734
CVE-2022-24734 PoC An RCE can be obtained on MyBB's Admin CP in Configuration - Add New Setting. The user must have a rights to add or update setting. This is tested on MyBB 1.8.29. Sources: https://github.com/mybb/mybb/ https://vulners.com/cve/CVE-2022-24734...
CVE-2018-8414-POC
CVE-2018-8414 POC Windows Shell Package Setting Remote Code Execution Vulnerability Since : Windows 10 Version 1703 to 1803 / Windows Server Version 1709 to 1803 Note : Some time the exploit fail depending of the file location default policy settings, so for that just copy the file in the Package...