CVE-2025-10351-POC

CVE-2025-10351 POC - Exploit d'injection SQL 💉 POC pour CVE-2025-10351 : Une vulnérabilité d'injection SQL non authentifiée affectant un point de terminaison spécifique dans Melis Platform Framework. 🔗 Références 📄 CVE-2025-10351 sur MITRE 📄 Avertissement Melis Platform sur INCIBE Institut nation...

CVE-2017-11610

CVE-2017-11610 Неаутентифицированная обратная оболочка RCE для Supervisor 3.0a1 - 3.3.2 Автономный эксплойт на Python ≥3.6 для неаутентифицированного удаленного выполнения кода в Supervisor 3.0a1 - 3.3.2, переписанный из этого модуля Metasploit. Пояснительная запись здесь. Протестировано с Python...

CVE-2024-40348

CVE-2024-40348 PoC для CVE-2024-40348 Bazaar v1.4.3 и более ранних версий. Попытается прочитать /etc/passwd с целевой системы. Обзор Это инструмент для массового сканирования и эксплуатации CVE-2024-40348: Bazaar v1.4.3 позволяет неаутентифицированным злоумышленникам выполнять обход каталога. Эта...

cve-2025-24893-poc

CVE-2025-24893 — RCE non authentifiée sur XWiki PoC Exploit de preuve de concept pour CVE-2025-24893 , une vulnérabilité critique non authentifiée d'exécution de code à distance RCE dans XWiki. Cet exploit abuse d'une injection de template Groovy dans le point de terminaison SolrSearch pour...

CVE-2024-3400-Checker

CVE-2024-3400-Checker 中文版本 Un programme de vérification pour CVE-2024-3400, une vulnérabilité d'injection de commande non authentifiée dans Palo Alto PAN-OS. Utilisation : 1. Installer les dépendances. root@kitploit: python3 -m pip install -r requirements.txt 2. Exécuter root@kitploit: python3...

CVE-2026-78566

The Shuffle theme for WordPress is vulnerable to Local File Inclusion in all versions up to and including 1.8 . An unauthenticated attacker over the network can include and execute arbitrary files on the server, enabling execution of any PHP code contained in those files. This may be used to bypa...

EUVD-2026-65326

The Shuffle theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.8. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to...

CVE-2026-78566 Shuffle <= 1.8 - Unauthenticated Local File Inclusion

The Shuffle theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.8. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to...

CVE-2026-78562

CVE-2026-78562 is a Local File Inclusion (LFI) vulnerability in the Verdure Core plugin for WordPress, affecting all versions up to and including 1.2 . An unauthenticated attacker can include and execute arbitrary files on the server, enabling PHP code execution in files already present (e.g., up...

EUVD-2026-65324

The Total Donations plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.0.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to...

CVE-2026-78568 Total Donations <= 2.0.5 - Unauthenticated SQL Injection

The Total Donations plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.0.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to...

EUVD-2026-65325

The Verdure Core plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used...

CVE-2026-78568

The Total Donations plugin for WordPress is vulnerable to unauthenticated SQL Injection in all versions up to and including 2.0.5 . The root cause is insufficient escaping on a user-supplied parameter combined with lack of sufficient preparation on the existing SQL query, allowing an attacker to ...

CVE-2026-78563

The NotificationX Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 3.1.4 , caused by insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages, which execute whenev...

EUVD-2026-65323

The NotificationX Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.1.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will...

CVE-2026-78563 NotificationX Pro <= 3.1.4 - Unauthenticated Stored Cross-Site Scripting

The NotificationX Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.1.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will...

CVE-2023-6063-PoC

PoC pour CVE-2023-6063: WP Fastest Cache 1.2.2 Injection SQL aveugle non authentifiée -red Une preuve de concept pour CVE-2023-6063, une vulnérabilité d'injection SQL aveugle basée sur le temps dans WP Fastest Cache ≤1.2.2. Extrait les mots de passe hachés userpass et les e-mails useremail de la...

CVE-2026-24055-OAuth-Langfuse

CVE-2026-24055 — Неаутентифицированная установка Slack OAuth в Langfuse Курсовой проект по веб-безопасности и приложениям — Группа 06, класс NT213.Q21.ANTT Содержание Описание уязвимости Системные требования Подготовка перед запуском Демо эксплуатации — Vulnerable v3.146 Проверка исправления —...

WooRefer

WooRefer | CVE-2022-4047 - WooCommerce용 반품 환불 및 교환 CVE-2022-4047 - WooCommerce용 반품 환불 및 교환 install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh...

JBWPer

JBWPer | CVE-2022-4061 - JobBoardWP Outil de masse automatique pour vérifier et exploiter la vulnérabilité CVE-2022-4061 - JobBoardWP install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh...