CVE-2026-77701

The WCFM Marketplace WordPress plugin before 3.8.2 does not correctly verify that the person requesting a refund owns the order, allowing unauthenticated users to create refund requests against any guest checkout order on the site...

CVE-2026-76581

The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.1. This is due to inconsistent and ambiguous HMAC message construction between the unauthenticated wdpssostep1 and wdpssostep2 AJAX actions, where step 1 signs and disclose...

CVE-2026-14567

The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint, allowing unauthenticated attackers to retrieve the email address and phone number of every registered user, including administrators...

CVE-2026-4246

The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 's' parameter of the Advanced Search REST endpoint in all versions up to, and including, 4.10.1 due to insufficient input sanitization and output escaping. The REST endpoint at...

CVE-2026-19084

The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featured image, allowing unauthenticated attackers to read arbitrary files from the server and republish their contents at a public URL...

CVE-2026-19423

The Ultimate Member WordPress plugin before 2.13.0 does not validate a submitted role selection when it cannot resolve the set of roles a profile form permits, and screens the value against the site's registered role names rather than against the form's own allow-list, allowing unauthenticated...

CVE-2026-12513

The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.68 do not properly sanitize a file path taken from a frontend file submission and their single-pass traversal filter is bypassable, allowing unauthenticated users to store a path that points outside the...

CVE-2026-12514

The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do not perform a capability check in their file-upload handler, which is registered for unauthenticated users and protected only by a nonce that is output on public pages, so an unauthenticated visito...

CVE-2023-20198-Exploit

Cisco IOS XE Bypass dell'autenticazione CVE-2023-20198 Questo repository contiene un exploit proof-of-concept per CVE-2023-20198 , una vulnerabilità di bypass dell'autenticazione che colpisce Cisco IOS XE Web UI. La vulnerabilità consente a attaccanti non autenticati di eseguire comandi arbitrari...

CVE-2017-12542-Exploit

HP iLO Authentication Bypass CVE-2017-12542 Questo repository contiene un exploit proof-of-concept per CVE-2017-12542 , una vulnerabilità di bypass dell'autenticazione che interessa alcune versioni del firmware HP Integrated Lights-Out iLO. La vulnerabilità consente l'accesso non autenticato...

CVE-2023-25157-GeoServer-SQLi-Lab

GeoServer & GeoTools SQL Injection CVE-2023-25157 & CVE-2023-25158 — Laboratorio di Vulnerabilità & Report PoC Ambiente di laboratorio vulnerabile Vulnerable Lab e report dettagliato di analisi e sfruttamento della vulnerabilità SQL Injection Error-based in GeoServer CVE-2023-25157 e nella librer...

http-vuln-cve2020-3452.nse

http-vuln-cve2020-3452.nse CVE-2020-3452 : Script NSE di Nmap per lettura remota non autorizzata di file su Cisco ASA e FTD...

CVE-2025-61882-Oracle-BI-Publisher-RCE

Betroffene Software: Oracle BI Publisher Versionen 12.2.1.4.0, 12.2.1.3.0. Schwachstellentyp: Remote-Codeausführung durch unsichere Deserialisierung in der BI-Publisher-Integrationskomponente. Beschreibung: Die BI-Publisher-Integrationskomponente deserialisiert nicht vertrauenswürdige Daten ohne...

CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection

README.md Rilevamento di CVE-2025-60787: RCE motionEye tramite Config Injection Esecuzione remota di codice non autenticata in motionEye Immagini fisse - Nome file immagine Esempio di payload PoC: root@kitploit: $touch /tmp/test.%Y-%m-%d-%H-%M-%S Quando motion viene riavviato, il comando shell...

CVE-2025-12139-WordPress-Integrate-Google-Drive-Exploit

CVE-2025-12139: Plugin WordPress Integrate Google Drive - Exploit di Divulgazione di Informazioni Descrizione Questo è un exploit Proof of Concept PoC in Golang per CVE-2025-12139. La vulnerabilità è presente nel plugin Integrate Google Drive versioni = 1.5.3 per WordPress. Consente ad attaccanti...

CVE-2023-3460

🚨 CVE-2023-3460 - Exploit di Escalation dei Privilegi di Ultimate Member per WordPress Questo è un proof-of-concept PoC per CVE-2023-3460, una vulnerabilità critica nel plugin WordPress Ultimate Member. Consente a utenti non autenticati di elevare i propri privilegi ad Amministratore tramite una...

Big-IP-Next-CVE-2024-26026

CVE-2024-26026 BIG-IP Next Central Manager API INIEZIONE SQL NON AUTENTICATA link: https://eclypsium.com/blog/big-vulnerabilities-in-next-gen-big-ip/...

Cisco-IOS-XE-CVE-2023-20198

Cisco-IOS-XE-CVE-2023-20198 Exploit PoC für CVE-2023-20198 Sicherheitslückeninformationen und Nutzung des Exploits bereitgestellt von smokeintheshell Siehe Referenzen Endpunkt, HTTP-Content-Typ und Header-Management wurden gegenüber anderen bestehenden PoCs modifiziert, um in Situationen zu...

CVE-2025-14847-MongoBleed-Exploit

CVE-2025-14847 - MongoBleed 👨‍💻 Autore: Furkan KAYAPINAR @FurkanKAYAPINAR ⚠️ SOLO A SCOPO EDUCATIVO Ambiente di laboratorio e script di exploit per la critica vulnerabilità di perdita di memoria non autenticata in MongoDB Server. 📋 Indice Panoramica della vulnerabilità Versioni interessate...

CVE-2026-36826

CVE-2026-36826: SQL-Injection in genesisQL = 1.1.1 Zusammenfassung genesisQL 1.1.1 ist anfällig für SQL-Injection in der checkPassword-Funktion. Die vom Benutzer bereitgestellten Felder username und password werden direkt in den SQL-Abfragestring interpoliert, ohne Parametrisierung, was eine nich...