CVE-2025-54962

🔥 CVE-2025-54962 — Téléchargement de fichier non sécurisé dans le serveur web OpenPLC Runtime OpenPLC Runtime ≤ 2024-12-31 — XSS stocké, CSRF 📌 Résumé J'ai découvert une vulnérabilité dans le serveur web OpenPLC Runtime version publiée : 2024-12-31 qui permet aux utilisateurs authentifiés de...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

CVE-2025-26326

CVE-2025-26326 Vulnérabilité de sécurité critique dans les extensions de connexion NVDA Remote et Tele NVDA Remote. Cette vulnérabilité a été enregistrée sous la référence CVE-2025-26326 auprès du CNA MITRE. Cette CVE/vulnérabilité a été publiée dans les bases de données mondiales suivantes : NVD...

EvilnoVNC

EvilnoVNC EvilnoVNC est une plateforme de phishing prête à l'emploi. Contrairement aux autres techniques de phishing, EvilnoVNC permet de contourner l'2FA en utilisant un vrai navigateur via une connexion noVNC. De plus, cet outil nous permet de voir en temps réel toutes les actions de la victime...

GEVAUDAN

GEVAUDAN Gluster Environnement Vulnérable AUthentification Accès aux Données & Nuke. Démarrage Gevaudan est un exploit pour Red Hat GlusterFS ciblant les CVE 2018-1088 et 2018-1112. Disponible à la fois en version autonome et en module Metasploit. Présentations | Date| Conférence| Lien vers la...

EUVD-2026-65273

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cozyHoverEffect Block Attribute in all versions up to, and including, 2.2.16 due to insufficient input sanitization and output...

CVE-2026-75019 Cozy Blocks <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via cozyHoverEffect Block Attribute

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cozyHoverEffect Block Attribute in all versions up to, and including, 2.2.16 due to insufficient input sanitization and output...

CVE-2026-75019

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE WordPress plugin is vulnerable to Stored XSS via the cozyHoverEffect Block Attribute in all versions up to and including 2.2.16 . The root cause is insufficient input sanitization and output escaping : an authenticated attacker with contri...

WordPress Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Cozy Blocks versions = 2.2.16...

EUVD-2026-65271

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.4.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2025-9878

PPWP – Password Protect WordPress (a WordPress plugin) is vulnerable to Stored Cross-Site Scripting (XSS) via the plugin's ppwp shortcode in all versions up to and including 1.9.21 . The root cause is insufficient input sanitization and output escaping on user-supplied shortcode attributes. An au...

CVE-2026-10627

The Events Manager plugin for WordPress (versions up to and including 7.4.0 ) is vulnerable to an authorization bypass via the status , private , and private_only parameters, which are not properly validated. This allows unauthenticated attackers to view the titles, dates, descriptions, and locat...

EUVD-2026-65272

The LearnPress plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in versions up to, and including, 4.4.4 via the learnpresscreatepage AJAX action. The LPAdminAjax::createpage handler only checks the editpages capability and a wprest nonce both availabl...

CVE-2025-9878 Password Protect WordPress Lite <= 1.9.21 - Authenticated (Contributor+) Stored Cross-Site Scripting

The PPWP – Password Protect WordPress | 1 Most-Reviewed Password Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ppwp' shortcode in all versions up to, and including, 1.9.21 due to insufficient input sanitization and output escaping on user supplied...

HTC

Hack The CCTV Identifiants DVR exposés | CVE-2018-9995 | Le nom d'utilisateur CCTV divulgué pour obtenir l'accès de connexion Comment l'utiliser ? root@kitploit: Open The https://www.zoomeye.org/ Search This Keyword '/login.rsp' Wait To Get IP and Port $ python3 thecctv.py Plus d'informations OS|...

DirtyPipe

Dirty Pipe Exploit: CVE-2022-0847 Уязвимость Dirty Pipe, также известная как CVE-2022-0847, является существенным дефектом в ядре Linux. Этот репозиторий предоставляет адаптированную версию широко используемого эксплойта, чтобы сделать его более удобным и модульным. Очень хорошее объяснение этой...

CVE-2026-72697

Grav CMS before 2.0.16 contains a path traversal vulnerability in the mediadirectory Twig function that fails to validate filesystem paths, allowing authenticated users to enumerate and access files outside intended scope. Attackers with page authoring privileges can supply arbitrary filesystem...

CVE-2026-19801

The BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This...

CVE-2025-32463_chwoot

🛠️ CVE-2025-32463chwoot - Gérer les privilèges de manière sécurisée sous Linux 📋 Aperçu CVE-2025-32463chwoot vous aide à comprendre et à traiter une vulnérabilité de sécurité spécifique liée à l'escalade de privilèges dans les systèmes Linux. Cet outil permet aux utilisateurs d'explorer et de...

cornershot

What is CornerShot In warfare, CornerShot is a weapon that allows a soldier to look past a corner and possibly take a shot, without risking exposure. Similarly, the CornerShot package allows one to look at a remote host’s network access without the need to have any special privileges on that host...