WordPress WPForms plugin 1.8.8.2-2.0.1 - Unauthenticated Stripe Refund and Subscription Cancellation vulnerability

Unauthenticated Stripe Refund and Subscription Cancellation vulnerability discovered by Charles Vosburgh in WordPress Plugin Contact Form by WPForms versions 1.8.8.2-2.0.1...

wnfexec

Overview WnfExec is a C proof of concept library that injects shellcode into a process by hijacking a WNF subscription callback then triggering a state change. There's nothing novel here and was built based on the research of others. My intent was to solidfy the concept in my head, document the...

Stormspotter

Stormspotter crea un “grafo de ataque” de los recursos en una suscripción de Azure. Permite a los equipos rojos y pentesters visualizar la superficie de ataque y las oportunidades de pivote dentro de un inquilino, y potencia a sus defensores para orientarse rápidamente y priorizar el trabajo de...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

Quiksand-CVE-2023-24012

DDS Security Test Entorno de prueba de seguridad DDS para ROS 2, basado en ROS 2 Foxy. Descripción del proyecto Este proyecto demuestra una vulnerabilidad de omisión de permisos en el marco de seguridad SROS2 de ROS 2. Al modificar el archivo de permisos firmados, un atacante puede hacer que un...

EDRUnChoker

EDRUnChoker Fileless WMI remediation forEDRChoker counters QoS abuse pacer.sys that throttles EDR agents to near-zero network bandwidth. Registers a permanent subscription in root\subscription no files on disk. A 5-second timer runs embedded VBScript that enumerates QoS policies with...

Gpt-Agreement-Payment

简体中文 | English Gpt-Agreement-Payment Herramienta de reproducción de extremo a extremo del protocolo de suscripción ChatGPT Plus / Team: desde la captura de paquetes hasta invertir toda la cadena Stripe Checkout → PayPal / GoPay / QRIS → ChatGPT manual-approval → Codex OAuth + PKCE, e implementarl...

CVE-2025-6792

Exploit: Unauthorized Pusher Channel Subscription Eavesdropping 1 Obtain Pusher credentials from browser console root@kitploit: console.log window.wpguppyscriptsvars.pusherKey, window.wpguppyscriptsvars.pusherCluster ; 2 Subscribe to a victim’s private channel root@kitploit: Pusher Eavesdrop Test...

PowerLurk

PowerLurk PowerLurk es un conjunto de herramientas de PowerShell para construir suscripciones maliciosas de eventos WMI. El objetivo es facilitar el lanzamiento de eventos WMI durante una prueba de penetración o un compromiso de equipo rojo. Consulte mi publicación Creeping on Users with WMI...

Popup Builder Plugin - SQL Injection and Cross-Site Scripting

The Popup Builder WordPress plugin before 4.1.1 is vulnerable to SQL Injection and Reflected XSS via the sgpb-subscription-popup-id parameter. id: CVE-2022-0479 info: name: Popup Builder Plugin - SQL Injection and Cross-Site Scripting author: ritikchaddha severity: critical description: | The Pop...

SharpStay

SharpStay - Persistencia .NET Compilación Para compilar, abre el proyecto de Visual Studio y compila para release. Opciones Claves de Registro Elevadas Clave de Registro UserInit Elevada Tarea Programada Elevada Crear Servicio Elevado Suscripción a Evento WMI Elevada Clave de Registro...

LiquidSnake

Liquid Snake Liquid Snake es un programa diseñado para realizar movimiento lateral contra sistemas Windows sin tocar el disco. La herramienta se basa en la Suscripción a Eventos WMI para ejecutar un ensamblado .NET en memoria; el ensamblado .NET escuchará un shellcode en una tubería con nombre y...

OffensiveCSharp

OffensiveCSharp Esta es una colección de herramientas y POCs en C que he creado para su uso en operaciones. Cada proyecto está diseñado para no utilizar bibliotecas externas. Abra el archivo .SLN de cada proyecto en Visual Studio y compile como "Release". Proyecto| Descripción| Versión Mínima de...

CVE-2026-74991

The WPForms WordPress plugin before 2.0.2 does not verify that a Stripe payment object supplied during a public form submission belongs to it before acting on it, allowing unauthenticated users to trigger a full refund and an immediate subscription cancellation against payments created by other...

EUVD-2026-85794

The WPForms WordPress plugin before 2.0.2 does not verify that a Stripe payment object supplied during a public form submission belongs to it before acting on it, allowing unauthenticated users to trigger a full refund and an immediate subscription cancellation against payments created by other...

CVE-2026-74991

The WPForms WordPress plugin, in versions before 2.0.2 , contains a vulnerability where it fails to verify that a Stripe payment object provided during a public form submission belongs to the plugin. This lack of validation allows unauthenticated users to trigger a full refund and an immediate su...

CVE-2026-74991 WPForms Lite 1.8.8.2 - 2.0.1.1 - Unauthenticated Stripe Refund and Subscription Cancellation via External PaymentIntent

The WPForms WordPress plugin before 2.0.2 does not verify that a Stripe payment object supplied during a public form submission belongs to it before acting on it, allowing unauthenticated users to trigger a full refund and an immediate subscription cancellation against payments created by other...

CVE-2026-95843 Moquette malformed shared subscriptions can crash command processing

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.subscribe parses a shared-subscription filter through SharedSubscriptionUtils.extractShareName before validating the complete $share/shareName/topicFilter structure. A remote client can send a filter such as $share/grp withou...

CVE-2026-96609

Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fil...

CVE-2026-93511

The Premium Packages WordPress plugin before 7.2.1 does not verify PayPal's webhook signature before processing payment and subscription notifications, allowing unauthenticated attackers to forge payment confirmations and subscription-cancellation events against any order whose transaction id the...