CVE-2026-74916

WP Fastest Cache WordPress plugin (versions 0.8.7.7 through 1.5.0 ) is vulnerable to unauthenticated cache poisoning via unkeyed tracking parameters. The plugin does not include certain tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing...

CVE-2026-74916 WP Fastest Cache 0.8.7.7 - 1.5.0 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters

The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served...

CVE-2026-33605

A flaw was found in Dovecot. An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. This can lead to a denial of service for Sieve script management, affecting either the attacker's connection or all connections handled by t...

CVE-2023-0214

SWG Exploit Generator root@kitploit: ██████╗ ██████╗ ████████╗███████╗ ██╔═████╗██╔══██╗╚══██╔══╝██╔════╝ ██║██╔██║██████╔╝ ██║ ███████╗ ████╔╝██║██╔═══╝ ██║ ╚════██║ ╚██████╔╝██║ ██║ ███████║ ╚═════╝ ╚═╝ ╚═╝ ╚══════╝ by 0PTS Skyhigh Secure Web Gateway पूर्व में McAfee Web Gateway में HTTP Respon...

CVE-2025-49388

CVE-2025-49388 مكوّن WordPress الإضافي Miraculous Core بإصدار OPTIONS مثال: root@kitploit: python CVE-2025-49388.py -u http://127.0.0.1/wordpress الخيارات الرئيسية: ملاحظة: إذا حذفت اسم المستخدم أو البريد الإلكت...

CVE-2026-78319

A service running on the affected products contains a potential Time-of-Check Time-of-Use TOCTOU race condition. An unauthenticated remote attacker could exploit this race condition to bypass intended security controls. This may result in the execution of unauthorized code...

WordPress Gravity Forms plugin <= 3.0.2 - Unauthenticated Arbitrary File Upload via State/Chunk Hash Confusion vulnerability

Unauthenticated Arbitrary File Upload via State/Chunk Hash Confusion vulnerability discovered by WordFence in WordPress Plugin Gravity Forms versions = 3.0.2...

WordPress Welcart e-Commerce plugin <= 2.12.1 - Unauthenticated Stored Cross-Site Scripting via 'custom_order' Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via 'customorder' Parameter vulnerability discovered by Afifudin Maarif in WordPress Plugin Welcart e-Commerce versions = 2.12.1...

Ashwesker-CVE-2025-60021

🛑 CVE-2025-60021 — Apache bRPC Injection de commandes à distance 📌 Vue d'ensemble CVE-2025-60021 est une vulnérabilité critique d'injection de commandes à distance découverte dans le service intégré de profilage du tas /pprof/heap d'Apache bRPC dans les versions antérieures à 1.15.0 , permettant ...

WordPress Nokri - Job Board WordPress Theme plugin <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter vulnerability

WordPress Nokri - Job Board WordPress Theme plugin = 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter vulnerability discovered by d.v4ns3c in WordPress Theme Nokri versions = 1.6.6...

WordPress Simple Membership plugin <= 4.8.1 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding vulnerability

Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding vulnerability discovered by Kittipat Jitphonchana in WordPress Plugin Simple Membership versions = 4.8.1...

CVE-2017-20192-formidable-forms

CVE-2017-20192 — Formidable Forms WordPress — مختبر Docker للثغرات مختبر Docker قابل لإعادة الإنتاج لثغرة CVE-2017-20192 Formidable Forms 2.05.03 — XSS مخزّنة. بدء سريع root@kitploit: docker compose up -d --build الهدف: http://127.0.0.1:18080 التحقق أداة مساعدة للمختبر هذا السكربت المساعد: يُرسل...

CVE-2026-40018

A flaw was found in Dovecot. A remote attacker with high attack complexity could exploit this vulnerability to gain access to sensitive information and modify data without requiring any user interaction or privileges. Mitigation Mitigation for this issue is either not available or the currently...

CVE-2026-78319 TOCTOU Vulnerability in file exchange

A service running on the affected products contains a potential Time-of-Check Time-of-Use TOCTOU race condition. An unauthenticated remote attacker could exploit this race condition to bypass intended security controls. This may result in the execution of unauthorized code...

EUVD-2026-68988

A service running on the affected products contains a potential Time-of-Check Time-of-Use TOCTOU race condition. An unauthenticated remote attacker could exploit this race condition to bypass intended security controls. This may result in the execution of unauthorized code...

CVE-2026-78319

CVE-2026-78319 affects a file exchange service on affected products (specific product names not stated in the provided documents). The root cause is a Time-of-Check Time-of-Use (TOCTOU) race condition , which allows an unauthenticated remote attacker to bypass intended security controls and poten...

CVE-2025-47646

CVE-2025-47646 PoC अनप्रमाणित विशेषाधिकार वृद्धि शोषण WordPress PSW फ्रंट-एंड लॉगिन रजिस्ट्रेशन प्लगइन ≤ 1.12 के लिए 📖 विवरण यह पायथन स्क्रिप्ट CVE-2025-47646 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट PoC शोषण है, जो WordPress PSW फ्रंट-एंड लॉगिन रजिस्ट्रेशन प्लगइन ≤ 1.12 में एक कमजोरी को लक्षित करता है। यह...

CVE-2024-11972-POC

विवरण नाम : CVE-2024-11972 CVSSv3 स्कोर : 9.8 प्रभावित संस्करण : Hunk Companion argparse, requests, urljoin उपयोग...

CVE-2020-14181

CVE-2020-14181 Atlassian Jira Server और Data Center के प्रभावित संस्करण, /ViewUserHover.jspa एंडपॉइंट पर सूचना प्रकटीकरण कमजोरी के माध्यम से एक बिना प्रमाणीकरण के उपयोगकर्ता को उपयोगकर्ताओं की गणना करने की अनुमति देते हैं। यह कमजोरी Positive Technologies के Mikhail Klyuchnikov द्वारा खोजी गई।...

CVE-2025-49132_HTB_SEASON10

CVE-2025-49132 - Pterodactyl Panel RCE शोषण HTB सीज़न 10 - Pterodactyl Machine राइटअप अवलोकन लक्ष्य: Pterodactyl HTB Machine मध्यम कठिनाई CVE: CVE-2025-49132 गंभीरता: क्रिटिकल CVSS 9.8 हमले का प्रकार: अप्रमाणित दूरस्थ कोड निष्पादन प्रभावित: Pterodactyl Panel v1.11.11 यह शोषण श्रृंखला निम्नलिखित क...