CVE-2023-30486

CVE-2023-30486 Square = 2.0.0 - Autorización faltante mediante activateplugin Descripción El tema Square para WordPress es vulnerable a la activación no autorizada de plugins debido a una falta de verificación de capacidades en la función activateplugin llamada mediante una acción AJAX en version...

azpim

Azure PIM CLI azpim Una herramienta de línea de comandos para gestionar activaciones de roles de Azure Privileged Identity Management PIM directamente desde tu terminal. Características 🔐 Activación de roles - Activa rápidamente roles elegibles de Azure PIM 🔓 Desactivación de roles - Desactiva...

Tai-e

Tai-e ✨News Release v0.5.4: Tai-e ships with a new frontend, providing faster and more reliable conversion from Java programs to Tai-e IR. Android app analysis is supported through a PacDroid-powered plugin integrated with pointer analysis. Spring DI and WEC analysis is supported through the Spri...

CVE-2024-6769

Blogpost: CVE-2024-6769 Poisoning the activation cache to elevate from medium to high integrity This blog is about two chained bugs: Stage one is a DLL Hijacking bug caused by the remapping of ROOT drive and stage two is an Activation Cache Poisoning bug managed by the CSRSS server. The first sta...

RemotePotato0

RemotePotato0 UPDATE 21-10-2022: The main exploit scenario RPC- LDAP of RemotePotato0 has been fixed. More details at -- https://twitter.com/splintercode/status/1583555613950255104 Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin. RemotePotato0 is an exploit that...

PhantomCtx

PhantomCtx PhantomCtx is a tool that automates Activation Context hijacking with the objective of loading an arbitrary DLL into the vast majority of signed executables e.g. Microsoft, Adobe, Mozilla. The loader is presented as a modern alternative to traditional DLL Hijacking & Sideloading: unlik...

ListingPro < 2.6.1 - Arbitrary Plugin Installation/Activation/Deactivation

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Arbitrary Plugin Installation, Activation and Deactivation in versions before 2.6.1. This is due to a missing capability check on the lpccaddonsactions function. This makes it possible for unauthenticated attacker...

IntelTXE-PoC

Disclaimer All information is provided for educational purposes only. Follow these instructions at your own risk. Neither the authors nor their employer are responsible for any direct or consequential damage or loss arising from any person or organization acting or failing to act on the basis of...

CVE-2025-52289

CVE-2025-52289: Control de Acceso Roto en MagnusBilling v7.8.5.3 Descripción Existe una vulnerabilidad de Control de Acceso Roto en MagnusBilling en versiones anteriores a v7.8.5.3. Los usuarios recién registrados pueden escalar el estado de su cuenta de pending a active sin la aprobación del...

CVE-2024-25092

CVE-2024-25092 NextMove Lite 2.18.0 - Instalación/Activación Arbitraria de Plugins por Suscriptor+ Descripción: El plugin NextMove Lite – Thank You Page for WooCommerce para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta de comprobación de capacidades en la...

rpc2wc

RPC to WebClient The information for this code can be found at this blog post. Recommend reading before attempting to use anything here. Code for triggering WebClient through an RPC call. Since it did not end up panning out the code was never very cleaned up and very much remained in a proof of...

AndroRAT

AndroRAT Herramienta de administración remota para Android Androrat es una aplicación cliente/servidor desarrollada en Java Android para el lado del cliente y en Java/Swing para el servidor. El nombre Androrat es una mezcla de Android y RAT Remote Access Tool. Fue desarrollado por un equipo de 4...

CVE-2021-30005-POC

CVE-2021-30005-POC PoC para CVE-2021-30005. Detalles La vulnerabilidad reside en el hecho de que PyCharm activaba automáticamente un entorno virtual encontrado en el proyecto cuando se abría por primera vez. Esto permitía a un atacante crear un repositorio que contuviera un entorno virtual...

CVE-2024-42834

Título del Exploit: VULNERABILIDAD DE CROSS-SITE SCRIPTING XSS ALMACENADO EN INCOGNITO SAC Fecha: 26 DE JULIO DE 2024 Autor del Exploit: Etienne Supra Página web del proveedor: https://www.incognito.com/products/service-activation-center/ Versión: 14.11 CVE : CVE-2024-42834 Se ha informado al...

CVE-2024-30485

Exploit CVE-2024-30485 📌 Resumen CVE-2024-30485 es una vulnerabilidad de alta gravedad encontrada en el plugin Finale Lite para WordPress versiones = 2.18.0. La vulnerabilidad permite a usuarios autenticados Suscriptor+ instalar y activar plugins arbitrarios sin la autorización adecuada. Gravedad...

CVE-2023-36531

CVE-2023-36531 LiquidPoll – Advanced Polls for Creators and Brands = 3.3.68 - Missing Authorization via activateaddon Info Needs a subscriber level user and the plugin needs to be disabled. This will activate the plugin you provide. Usage root@kitploit: usage: CVE-2023-36531.py -h -w URL -u...

CVE-2024-9707-Poc

CVE-2024-9707-Poc 🌐 Description This script exploits the vulnerability in the WordPress Hunk Companion plugin CVE-2024-9707, allowing unauthorized attackers to install and activate arbitrary plugins via the /wp-json/hc/v1/themehunk-import REST API endpoint. Features...

Linux Distros Unpatched Vulnerability : CVE-2026-89574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm array: validate array block headers on read arrayblockcheck validates blocknr and csum and nothing else, while nodecheck, next to it, has bounded the...

DEBIAN-CVE-2026-89574

In the Linux kernel, the following vulnerability has been resolved: dm array: validate array block headers on read arrayblockcheck validates blocknr and csum and nothing else, while nodecheck, next to it, has bounded the structural fields since both were written. dmarraycursornext takes its loop...

CVE-2026-89574

In the Linux kernel, the following vulnerability has been resolved: dm array: validate array block headers on read arrayblockcheck validates blocknr and csum and nothing else, while nodecheck, next to it, has bounded the structural fields since both were written. dmarraycursornext takes its loop...