WordPress MasterStudy LMS WordPress Plugin plugin < 3.7.46 - Unauthenticated Student Statistics Disclosure vulnerability

Unauthenticated Student Statistics Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin MasterStudy LMS versions 3.7.46...

CVE-2026-6469

A flaw was found in PostgreSQL where the ALTER TABLE ALTER TYPE command incorrectly reassigns ownership of dependent statistics objects to the current user. This grants the table owner unauthorized privileges to execute DROP STATISTICS and ALTER STATISTICS while locking out the legitimate owner...

CVE-2026-8181

EN: PoC controlado y notas técnicas breves para pruebas de seguridad autorizadas del bypass de autenticación en Burst Sta...

pocsploit

pocsploit 中文 README pocsploit is a lightweight, flexible and novel open source poc verification framework Pain points of the POC framework in the market 1. There are too many params, I don't know how to get started, but only some of them are commonly used...

kbd-audio

kbd-audio Esta es una colección de herramientas de línea de comandos y GUI para capturar y analizar datos de audio. Keytap La herramienta más interesante se llama keytap - puede adivinar las teclas del teclado presionadas solo analizando el audio capturado desde el micrófono del computador...

nginx_log_check

nginxlogcheck Nginx log security analysis script Features Top 20 address statistics SQL injection analysis Scanner alert analysis Vulnerability exploitation detection Sensitive path access File inclusion attack Webshell Find Top 20 URLs by response length Find rare script file access Find 302...

CVE-2026-8181

CVE-2026-8181 — Burst Statistics 3.4.0 – 3.4.1.1 — Bypass de Autenticación para Toma de Control de Cuenta de Administrador Resumen de la Vulnerabilidad El plugin de WordPress Burst Statistics versiones 3.4.0 a 3.4.1.1 es vulnerable a una vulnerabilidad de bypass de autenticación no autenticado qu...

sdnpwn

What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git root@kitploit: git clone...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

CVE-2026-8181-PoC

🚨 CVE-2026-8181 | Bypass de Autenticación en Burst Statistics -brightgreen.svg?style=for-the-badge !CAUTION ALERTA CRÍTICA: Esta vulnerabilidad permite a un atacante remoto no autenticado eludir la autenticación y obtener privilegios completos de Administrador en el sitio WordPress objetivo...

WordPress Plugin WP Statistics <= 13.1.5 - SQL Injection

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the currentpagetype parameter found in the /includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain...

CVE-2025-9816

CVE-2025-9816 XSS Almacenado en el Plugin WP-Statistics Escáner Detección y PoC "El plugin WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del encabezado User-Agent en todas las versiones hasta, e incluyend...

CVE-2026-8181

CVE-2026-8181 - Exploit de Bypass de Autenticación en Burst Statistics Python 2.7 exploit para la vulnerabilidad del plugin Burst Statistics CVE-2026-8181 que permite a atacantes no autenticados evadir la autenticación de la API REST, recuperar contraseñas de aplicación y crear nuevos usuarios...

CVE-2026-8181

Exploit del CVE-2026-8181 Plugin Burst Statistics de WordPress — omisión de autenticación que conduce a la escalada de privilegios a administrador Exploit del CVE-2026-8181 descubierto por Chloe Chamberland y PRISM. ⚠️ Aviso legal Este repositorio se proporciona únicamente con fines de...

WordPress Visitor Statistics (Real Time Traffic) <4.8 -SQL Injection

WordPress Visitor Statistics Real Time Traffic plugin before 4.8 does not properly sanitize and escape the refUrl in the refDetails AJAX action, which is available to any authenticated user. This could allow users with a role as low as subscriber to perform SQL injection attacks. id: CVE-2021-247...

WordPress Plugin WP Statistics <= 13.1.5 - SQL Injection

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the IP parameter found in the /includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive...

CVE-2026-8181

CVE-2026-8181 Burst Statistics | Authentication Bypass to Admin Account Takeover Description : Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover The Burst Statistics – Privacy-Friendly WordPress Analytics Google Analytics Alternative plugin for WordPress is...

msnm-sensor

説明 MSNM-S （Multivariate Statistical Network Monitoring-Sensor）は、PCA-MSNM や Hierarchical PCA-MSNM...

CVE-2026-8181

CVE-2026-8181 — Burst Statistics Authentication Bypass to Admin Account Takeover 📋 Información de Vulnerabilidad...

CVE-2026-8181-Lab

CVE-2026-8181 — Laboratorio di Bypass dell'Autenticazione di Burst Statistics Laboratorio Docker locale per CVE-2026-8181 , un bypass dell'autenticazione nel plugin WordPress Burst Statistics – Privacy-Friendly WordPress Analytics. Questo laboratorio confronta una versione vulnerabile del plugin...