CVE-2026-88764

The Simple Membership WordPress plugin before 4.7.8 does not validate that the membership level supplied in a PayPal payment notification matches the level configured for the paid payment button, allowing members to pay for a lower-priced membership while being granted a higher, more privileged...

CVE-2026-88764 Simple Membership < 4.7.8 - Subscriber+ Membership Level Escalation via PayPal Standard subsc_ref

The Simple Membership WordPress plugin before 4.7.8 does not validate that the membership level supplied in a PayPal payment notification matches the level configured for the paid payment button, allowing members to pay for a lower-priced membership while being granted a higher, more privileged...

SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via form_id

The SureForms plugin for WordPress is vulnerable to payment amount validation bypass in versions up to, and including, 2.5.2. The createpaymentintent AJAX handler checks if $formid 0 && !empty$blockid before calling validatepaymentamount. By sending formid=0 the default intval of a missing/zero...

Elementor Pro <=4.2.1 - Unauthenticated Arbitrary File Upload via Form Handler

Elementor Pro plugin for WordPress in versions =4.2.1 is vulnerable to unauthenticated arbitrary file upload in the Forms module File Upload field. The validation and processfield methods iterate over submitted file entries with different early-exit logic for UPLOADERRNOFILE entries. When an...

CVE-2026-27626-POC

CVE-2026-27626: Inyección de comandos mediante argumento de contraseña en OliveTin OliveTin permite al administrador definir "acciones": comandos de shell con argumentos parametrizados que los usuarios pueden ejecutar desde una interfaz web o API. Antes de insertar un valor suministrado por el...

CVE-2026-8809

CVE-2026-8809 Advanced Custom Fields: Extended = 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to 'acfpostid' Parameter This critical security vulnerability CVSS 9.8 affects all versions of the popular WordPress plugin Advanced Custom Fields: Extended ACF Extended from...

CVE-2023-20198

CVE-2023-20198 PoC de exploit para CVE-2023-20198 Descripción CVE-2023-20198 se caracteriza por una validación de ruta incorrecta para eludir el filtrado de Nginx y alcanzar el endpoint web webuiwsmahttp sin requerir autenticación. Al eludir la autenticación en el endpoint, un atacante puede...

CVE-2026-34835-Black-box-Analysis

Este repositorio proporciona un análisis de seguridad de caja negra de CVE-2026-34835 desde la perspectiva de un probador de penetración externo. El objetivo no es realizar ingeniería inversa de la vulnerabilidad, sino documentar cómo un evaluador de seguridad puede identificar, validar y evaluar...

CVE-2022-46169

Vulnerabilidad de ejecución remota de comandos en Cacti remoteagent.php CVE-2022-46169 Descripción de la vulnerabilidad Cacti es una plataforma de monitoreo y gestión de servidores. En sus versiones 1.2.17-1.2.22 existe una vulnerabilidad de inyección de comandos que permite a un atacante omitir ...

CVE-2026-23744-poc

CVE-2026-23744 — Exploit de Ejecución Remota de Código RCE para mcpJam Un exploit de prueba de concepto en Python 3 para CVE-2026-23744 , una vulnerabilidad de ejecución arbitraria de comandos que afecta a mcpJam v1.4.2. Esta utilidad automatiza la entrega de payloads codificando de forma...

recollapse

REcollapse REcollapse es una herramienta auxiliar para el fuzzing de expresiones regulares en caja negra con el fin de evitar validaciones y descubrir normalizaciones en aplicaciones web. También puede ser útil para evadir WAF y mitigaciones débiles de vulnerabilidades. Para más información, echa...

cve-2026-32475-elementor-pro-lab

CVE-2026-32475 — Elementor Pro Forms unauthenticated arbitrary file upload → RCE A/B Docker lab that reproduces CVE-2026-32475 CVSS 9.x, Patchstack; Elementor Pro Forms File Upload field, affected ≤ 4.2.1, fixed 4.2.2 on 2026-08-19; reported by Tin Pham / TF1T. Unauthenticated, no user interactio...

CVE-2022-0165-EXPLOIT

CVE-2022-0165 - Page Builder KingComposer WordPress Plugin - ID Parameter Validation Bypass The Page Builder KingComposer WordPress plugin, versions up to and including 2.9.6, is susceptible to a security vulnerability that allows an attacker to bypass ID parameter validation. This could lead to...

CVE-2023-49052

CVE-2023-49052 - Microweber CMS v2.0.4 - Subida de Archivos Maliciosos Descripción En la versión 2.0.4 de Microweber CMS, cuando la opción de subida de archivos está activa en los formularios creados, es posible enviar archivos HTML maliciosos, incluso cuando se aplican ciertos tipos de...

CVE-2024-42850

CVE-2024-42850 Un problema en la función de cambio de contraseña de Silverpeas v6.4.2 y versiones anteriores permite omitir los requisitos de complejidad de la contraseña. Informe Al cambiar la contraseña, al enviar la nueva contraseña, esta se envía primero en una solicitud POST a un endpoint qu...

CVE-2026-84171

The WP images upload on piclect WordPress plugin through 1.0 does not validate the name or type of uploaded files before writing them to a publicly accessible directory, allowing unauthenticated attackers to upload arbitrary files and execute arbitrary code on the server...

CVE-2020-7247-POC

서문 익스플로잇에 대한 주요 사실 취약한 서버 설치 설정 환경 관련 주의사항 익스플로잇 수동 익스플로잇 스크립트를 이용한 익스플로잇 서문 이 저장소는 통제된 개인 환경에서 CVE-2020-7247을 설정하고 익스플로잇하기 위한 기반을 제공합니다. 게시된 모든 코드와 설정은 오직 이 취약점을 테스트하기 위한 목적이며, 자신의 시스템이 아니거나 익스플로잇 허가를 받지 않은 시스템을 남용하기 위한 것이 아닙니다. 이 저장소의 소유자는 제3자가 이 도구를 사용하는 것에 대해 책임을 지지 않습니다. 익스플로잇에 대한 주요 사실 코드의 ...

CVE-2026-54166

Shelf , a physical asset tracking platform, contains a Server-Side Request Forgery (SSRF) in its Asset CSV Content Import feature prior to version 1.20.3 . Authenticated users with the asset:import permission can bypass imageUrl validation using image-extension suffixes, path keywords, domain sub...

CVE-2026-54166 Shelf Vulnerable to Server-Side Request Forgery (SSRF) via Asset CSV Import imageUrl Validation Bypass

Shelf is a platform for tracking physical assets. Prior to version 1.20.3, authenticated users with the asset:import permission can trigger server-side HTTP requests to attacker-controlled URLs through the Asset CSV Content Import feature. The imageUrl validation logic can be bypassed through...

CVE-2018-1263-Demo

익스플로잇 데모 이 가이드는 취약한 구성 요소를 설치하고 CVE-2018-1263에 언급된 phpMyAdmin 버그와 관련된 공격을 수행하는 데 도움을 줍니다. CVE 설명 취약점이 존재하는 이유 공격 작동 방식 취약한 구성 요소 설치 방법 공격 수행 방법 CVE 설명 이 익스플로잇은 phpMyAdmin 버전 4.8.x 4.8.2 미만에서 발견된 문제와 관련 있습니다. 이 문제를 악용하면 공격자가 서버에서 원격 코드 실행 및 로컬 파일 포함을 수행할 수 있습니다. 취약점은 phpMyAdmin 내에서 페이지를 리디렉션하고 로드하...