2832 matches found
CVE-2025-52289
CVE-2025-52289: Broken Access Control in MagnusBilling v7.8.5.3 Description A Broken Access Control vulnerability exists in MagnusBilling versions prior to v7.8.5.3. Newly registered users can escalate their account status from pending to active without administrator approval by modifying a reque...
AndroRAT
AndroRAT Remote Administration Tool for Android Androrat is a client/server application developed in Java Android for the client side and in Java/Swing for the Server. The name Androrat is a mix of Android and RAT Remote Access Tool. It has been developed in a team of 4 for a university project. ...
CVE-2024-25092
CVE-2024-25092 NextMove Lite 2.18.0 - Subscriber+ Arbitrary Plugin Installation/Activation Description: The NextMove Lite โ Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'xladdoninstallation' functio...
PhantomCtx
PhantomCtx PhantomCtx is a tool that automates Activation Context hijacking with the objective of loading an arbitrary DLL into the vast majority of signed executables e.g. Microsoft, Adobe, Mozilla. The loader is presented as a modern alternative to traditional DLL Hijacking & Sideloading: unlik...
Tai-e
Tai-e โจNews Release v0.5.4: Tai-e ships with a new frontend, providing faster and more reliable conversion from Java programs to Tai-e IR. Android app analysis is supported through a PacDroid-powered plugin integrated with pointer analysis. Spring DI and WEC analysis is supported through the Spri...
CVE-2021-30005-POC
CVE-2021-30005-POC PoC for CVE-2021-30005. Details The vulnerability resides in the fact that PyCharm would automatically activate a virtual environment found in the project when opened for the first time. This allowed an attacker to create a repository containing a malicious virtual environment...
azpim
Azure PIM CLI azpim A command-line interface tool for managing Azure Privileged Identity Management PIM role activations directly from your terminal. Features ๐ Role Activation - Quickly activate eligible Azure PIM roles ๐ Role Deactivation - Deactivate active roles when no longer needed ๐...
rpc2wc
RPC ใใ WebClient ใธ ใใฎใณใผใใฎๆ ๅ ฑใฏใใกใใฎใใญใฐ่จไบใซใใใพใใใใใซใใใใฎใไฝฟ็จใใๅใซ่ชญใใใจใใๅงใใใพใใ RPC ๅผใณๅบใใไปใใฆ WebClient ใใใชใฌใผใใใใใฎใณใผใใงใใ็ตๅฑใใพใใใใชใใฃใใใใใณใผใใฏใใพใๆด็ใใใฆใใใใๆฆๅฟตๅฎ่จผ proof of concept ใฎ็ถๆ ใฎใพใพใงใใ ไปฅไธใฎ RPC ๅผใณๅบใใฏใใตใผใในใ้ๅงใใใณใผใใในใซๅฐ้ใงใใพใ: EfsRpcDuplicateEncryptionInfoFileDownlevel - EfsDuplicateEncryptionInfoRPCClient -...
CVE-2024-6769
Blogpost: CVE-2024-6769 Poisoning the activation cache to elevate from medium to high integrity This blog is about two chained bugs: Stage one is a DLL Hijacking bug caused by the remapping of ROOT drive and stage two is an Activation Cache Poisoning bug managed by the CSRSS server. The first sta...
RemotePotato0
RemotePotato0 UPDATE 21-10-2022: The main exploit scenario RPC- LDAP of RemotePotato0 has been fixed. More details at -- https://twitter.com/splintercode/status/1583555613950255104 Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin. RemotePotato0 is an exploit that...
ListingPro < 2.6.1 - Arbitrary Plugin Installation/Activation/Deactivation
The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Arbitrary Plugin Installation, Activation and Deactivation in versions before 2.6.1. This is due to a missing capability check on the lpccaddonsactions function. This makes it possible for unauthenticated attacker...
CVE-2024-42834
Exploit Title: INCOGNITO SAC STORED CROSS-SITE SCRIPTING XSS VULNERABILITY Date: 26 JULY 2024 Exploit Author: Etienne Supra Vendor Homepage: https://www.incognito.com/products/service-activation-center/ Version: 14.11 CVE : CVE-2024-42834 Vendor has been informed and acknowledge the vulnerability...
CVE-2024-30485
CVE-2024-30485 Exploit ๐ Overview CVE-2024-30485 is a high-severity vulnerability found in the Finale Lite plugin for WordPress versions = 2.18.0. The vulnerability allows authenticated users Subscriber+ to install and activate arbitrary plugins without proper authorization. Severity : HIGH CVSS...
CVE-2023-36531
CVE-2023-36531 LiquidPoll โ Advanced Polls for Creators and Brands = 3.3.68 - Missing Authorization via activateaddon Info Needs a subscriber level user and the plugin needs to be disabled. This will activate the plugin you provide. Usage usage: CVE-2023-36531.py -h -w URL -u USERNAME -p PASSWORD...
CVE-2024-9707-Poc
CVE-2024-9707-Poc ๐ Description This script exploits the vulnerability in the WordPress Hunk Companion plugin CVE-2024-9707, allowing unauthorized attackers to install and activate arbitrary plugins via the /wp-json/hc/v1/themehunk-import REST API endpoint. Features Feature| Description ---|---...
CVE-2026-97337
The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and sensitive information disclosure in versions up to, and including, 4.8.3 via the resend-activation and email-activation endpoints. The endpoints are dispatched from...
CVE-2026-97337
The Simple Membership plugin for WordPress is vulnerable to unauthorized data modification and sensitive information disclosure in versions up to and including 4.8.3 . The root cause is a missing authorization check (including no nonce, capability, or ownership verification) on the resend-activat...
EUVD-2026-91908
The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and sensitive information disclosure in versions up to, and including, 4.8.3 via the resend-activation and email-activation endpoints. The endpoints are dispatched from...
CVE-2026-102937
A flaw was found in virtualenv. An attacker can achieve arbitrary code execution by supplying specially crafted prompt values or environment configurations containing unescaped quote characters when generating Windows virtual environments. When a user executes the resulting activation script, the...
js-jobs
js-jobs JS Job Manager ํ๋ฌ๊ทธ์ธ์ ํ์ฑํํ๋ ค๋ฉด ์ฌ๊ธฐ์๋ ์ ํ์ด ์์ต๋๋ค. ํ๋ฌ๊ทธ์ธ์ /.php ํ์ผ์ด ์์ด์ผ ํ๋ฉฐ, ๊ทธ๋ ์ง ์์ผ๋ฉด ํ์ฑํ๋์ง ์์ต๋๋ค: POST /wp-admin/admin-ajax.php HTTP/1.1 Accept: / Accept-Language: en-GB,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With:...