CVE-2025-34096

🐞 CVE-2025-34096: Easy File Sharing Web Server 7.2 – Stack-basierter Pufferüberlauf SEH SEH-basierter Pufferüberlauf im Easy File Sharing Web Server 7.2, erreichbar über den Endpunkt zur Passwortwiederherstellung. 📑 Inhaltsverzeichnis Warum dieses Repository existiert Warum diese Schwachstelle...

CVE-2026-78267

CVE-2026-78267 is an unauthenticated privilege escalation vulnerability in the TranslatePress WordPress plugin, affecting versions 3.3.2 and earlier . With a CVSS 3.1 score of 9.8 (Critical) , the flaw is exploitable over the network with low complexity, requiring no prior authentication or user ...

CVE-2026-78266 WordPress AutomatorWP plugin <= 5.8.3 - Broken Access Control vulnerability

Subscriber Broken Access Control in AutomatorWP = 5.8.3 versions...

CVE-2026-78263

Event Tickets WordPress plugin versions

CVE-2026-78259

CVE-2026-78259 is an unauthenticated Broken Authentication vulnerability in the WPLegalPages WordPress plugin, affecting versions ≤ 3.7.0 . A remote, unauthenticated attacker can exploit this over the network with low complexity and no user interaction, resulting in low-impact compromises to conf...

CVE-2026-32561

CVE-2026-32561 is a Subscriber Privilege Escalation vulnerability in the WordPress Booking Hub plugin, affecting versions 1.3.0 and earlier . The flaw allows a low-privileged Subscriber user to escalate privileges, rated CVSS 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indica...

CVE-2026-32561 WordPress Booking Hub plugin <= 1.3.0 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Booking Hub = 1.3.0 versions...

CVE-2026-32559

UltimateAI is a WordPress plugin affected by an arbitrary file upload vulnerability in versions ≤ 3.1.0 . A user with Subscriber privilege level can upload arbitrary files without user interaction, with a scope change that allows full compromise of confidentiality, integrity, and availability (CV...

CVE-2026-32554 WordPress WooBeWoo Product Filter Pro plugin <= 3.1.8 - SQL Injection vulnerability

Unauthenticated SQL Injection in WooBeWoo Product Filter Pro = 3.1.8 versions...

CVE-2026-32554 WordPress WooBeWoo Product Filter Pro plugin <= 3.1.8 - SQL Injection vulnerability

Unauthenticated SQL Injection in WooBeWoo Product Filter Pro = 3.1.8 versions...

CVE-2026-27364

Broken Access Control vulnerability in the WordPress Style Kits plugin (AnalogWP) versions ≤ 2.6.5 . A Subscriber -level authenticated user can exploit insufficient access controls, resulting in a high impact on integrity (CVSS 3.1: 6.5 MEDIUM, vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). No conf...

CVE-2026-78284

CVE-2026-78284 is an unauthenticated arbitrary file deletion vulnerability in the MasterStudy LMS WordPress plugin, affecting versions 3.7.42 and earlier . An attacker can delete files on the server without any authentication or user interaction. The CVSS 3.1 base score is 8.6 (HIGH) , driven by ...

Important: Red Hat Security Advisory: RHACS 4.10.7 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

CVE-2025-11844-smolagents

🔐 Framework de Simulação de Injeção XPath do Smolagents CVE-2025-11844 Um sandbox educacional de auditoria e scanner dinâmico de prova de conceito que demonstra a vulnerabilidade de Injeção XPath encontrada na biblioteca smolagents da Hugging Face até a versão 1.2.0. 🔍 Perfil da Vulnerabilidade...

GHSA-Q8GQ-377P-JQ3R vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0...

CVE-2024-34470

CVE-2024-34470 HSC Mailinspector 5.2.17-3 a 5.2.18 - Inclusione Locale di File...

CVE-2017-8917-Joomla

CVE-2017-8917-Joomla Script Python per sfruttare la vulnerabilità di SQL injection CVE-2017-8917 in Joomla! 3.7.0 Creato solo per scopi educativi. Utilizzato per il TryHackMe Dailybugle CTF Avviso Tutti gli script/binary in questo repository dovrebbero essere utilizzati solo per test di...

CVE-2025-65670

CVE-2025-65670 Un Riferimento Diretto a Oggetto Insicuro IDOR in classroomio 0.1.13 permette agli studenti di accedere a endpoint sensibili di admin/docente manipolando gli ID dei corsi negli URL, causando la divulgazione non autorizzata di dati sensibili del corso, dell'admin e degli studenti. L...

Exploit-Joomla

ep4-redes CVE-2017-8917 Vulnerabilità di SQL injection in Joomla! 3.7.0 exploit Spiegazione della vulnerabilità: https://blog.sucuri.net/2017/05/sql-injection-vulnerability-joomla-3-7.html...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...