CVE-2026-8732-EXPLOIT

CVE-2026-8732 – WordPress WP Maps Pro 漏洞利用 未经身份验证的管理员接管 | CVSS 9.8 | 可直接使用 🔥 您将获得 适用于 CVE-2026-8732 的完整可用 Python 漏洞利用 无需身份验证即可创建管理员账户 返回神奇登录 URL – 立即接管站点 适用于 WP Maps Pro ≤ 6.1.0 隐秘、干净，默认不留日志 ⚡ 为什么选择我们 已在 50+ 个易受攻击的目标上测试 无冗余代码 – 纯粹的漏洞利用 适用于红队、渗透测试、漏洞赏金 此 CVE 的终身更新 全天候支持 🎯 适用人群 渗透测试人员 安全审计人员 红队行动...

your-bot-my-inbox-cve-2026-68929-fastgpt-unauthenticated-wechat-channel-hijack

CVE-2026-68929 — FastGPT 微信频道劫持 PoC 未认证、跨租户接管 FastGPT 的微信（iLink）分享频道，仅需公开的 shareId 即可触发。...

CVE-2026-86814

The UsersWP – Social Login WordPress plugin before 1.5.10 fails to verify that a social login provider has confirmed ownership of an email address before using it to resolve an existing account. This allows unauthenticated attackers to log in as any user—including administrators—by asserting the ...

CVE-2026-21994

CVE-2026-21994 摘要 Oracle OKIT（oci-designer-toolkit）版本 0.3.0 包含两个严重的错误配置，可串联导致未经身份验证的完全接管。公开仓库中暴露的硬编码 Flask SECRETKEY 允许任何攻击者伪造有效的管理员会话 Cookie——无需任何凭据。此外，Docker 镜像完全禁用了 SSH 主机验证，使网络攻击者能够在基础设施部署期间拦截 OCI API 密钥和私钥。 漏洞 1. 硬编码SECRETKEY — okitclassic/okitserver/config.py:4 root@kitploit:...

kirki-wordpress-account-security-assessment

CVE-2026-8206 - Kirki WordPress 插件未授权账户接管 顾问式网络安全报告 针对 Kirki WordPress 账户安全风险的专业漏洞评估报告，包含技术影响、修复及缓解策略。 📍 报告快照 字段| 详情 ---|--- 报告类型| 漏洞评估报告 参与背景| 安全研究 主要关注点| WordPress / 内部服务 受众| 安全团队、工程团队、招聘经理 输出风格| 执行摘要、技术分析、业务影响、修复路线图 发布状态| 已脱敏，用于公开作品集审查 !IMPORTANT 本报告已特意脱敏，以便公开发布到...

Simulating-and-preventing-Zerologon-CVE-2020-1472-vulnerability-attacks.

模拟与防范Zerologon（CVE-2020-1472）漏洞攻击 模拟在Windows Server 2016上对Active Directory中Zerologon（CVE-2020-1472）漏洞的攻击，并使用Trend Micro Deep Security解决方案来防范此类攻击。 Zerologon漏洞是Netlogon协议中的一个弱点，可在无需密码的情况下被利用，使攻击者能够轻易控制Active Directory系统中的域控制器。 工具 VMware Workstation Windows Server 2016 Active Directory Kali Linux...

CVE-2026-83357

Oracle GraalVM for JDK / Oracle GraalVM (Oracle Java SE, component: Compiler ) contains a vulnerability in affected supported versions: GraalVM for JDK 17 (23.0.13.1), GraalVM for JDK 21 (23.1.12.1), and GraalVM 25.0.4.1. An unauthenticated attacker with network access via HTTP can exploit this f...

CVE-2026-87188

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-83463

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment...

CVE-2026-83462

Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite component: MWA Terminal Server. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Mobil...

CVE-2026-83283

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83256

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracl...

CVE-2026-83255

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracl...

CVE-2026-83254

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracl...

CVE-2026-83232

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Console / Repository Explorer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-83191

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Server Infrastructure. Supported versions that are affected are 17.0-26.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Siebel CRM Deployment...

CVE-2026-83061

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

CVE-2026-83035

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: WebCenter Sites. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83020

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-83021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...