2196 matches found
EUVD-2026-50128
A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment overall answer endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...
CVE-2026-63233
A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment overall answer endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...
EUVD-2026-50127
A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment reinforcement endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...
CVE-2026-63232 SQL injection and unsafe deserialisation vulnerability
A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment reinforcement endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...
CVE-2026-63232
A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment reinforcement endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...
CVE-2026-63232
CVE-2026-63232 relates to a vulnerability in Koollab LMS described as a SQL injection and unsafe deserialization issue. The authenticated attacker can target the assessment reinforcement endpoint, influence data passed to unserialize(), write a webshell to a publicly accessible location, and pote...
CVE-2026-63227
An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server...
EUVD-2026-50122
An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server...
CVE-2026-63227 Unrestricted SCORM file upload vulnerability
An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server...
PT-2026-65705
A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the manual mark assessment endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...
PT-2026-65698
An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server...
PT-2026-65703
A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment reinforcement endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...
PT-2026-65704
A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment overall answer endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...
Exploit for Interpretation Conflict in Wordpress
CVE-2026-63030 / CVE-2026-60137 — "wp2shell" WordPress Core RC...
📄 WordPress YayExtra 1.3.6 Unauthenticated Shell Upload
WordPress YayExtra WooCommerce Extra Product Options plugin version 1.3.6 suffers from an unauthenticated shell upload vulnerability that achieves remote code execution. This proof of concept exploit demonstrates the vulnerable request flow against the affected plugin. !/usr/bin/env python3 Explo...
📄 WordPress Copymatic 1.6 Unauthenticated Shell Upload
WordPress Copymatic plugin version 1.6 contains an unauthenticated arbitrary file upload to remote code execution vulnerability. A remote attacker can upload executable PHP code and achieve remote code execution. This proof of concept exploit demonstrates the vulnerable request flow against the...
📄 WordPress Enable SVG, WebP and ICO Upload 1.1.2 Shell Upload
WordPress Enable SVG, WebP and ICO Upload plugin version 1.1.2 contains an authenticated Author+ arbitrary file upload to remote code execution vulnerability. A remote attacker can upload executable PHP code and achieve remote code execution. This proof of concept exploit demonstrates the...
Exploit for CVE-2026-60137
Compromise Scanner for wp2shell read-only A standalone, r...