CVE-2026-8732

⚔️ CVE-2026-8732 WP Maps Pro ≤ 6.1.0 — Escalada de Privilegios sin Autenticación Automatización de Explotación en 8 Fases | Multiprocessing + Asyncio | Creación de Admin Verificada 🎯 Acerca de la Vulnerabilidad El plugin de WordPress WP Maps Pro versión ≤ 6.1.0 tiene una vulnerabilidad de escalada...

CVE-2025-50363_BXSS_CVE

项目名称和仓库URL: Maid Hiring Management System using PHP and MySQL 漏洞类型: 通过盲XSS进行特权提升 受影响版本:v1.0 💣漏洞描述: 在女佣招聘管理系统中发现了一个盲跨站脚本 XSS 漏洞，允许普通用户（如女佣或雇主）提升权限，并可能控制管理员账户。 👩‍💻影响: 完全接管管理员账户、访问敏感数据以及系统操纵。 🛜PoC（概念验证） 1. 在 mhms/maid-hiring.php 中，用户可以申请职位。 2. 填写表单，在姓名 字段中放入盲XSS payload，然后提交表单。 3. 当管理员查看申请时，盲XSS...

CVE-2018-15365

Reflected XSS en Deep Discovery Inspector 3.8 He encontrado una vulnerabilidad XSS reflejada en la interfaz web de administración de Deep Discovery Inspector 3.8 Service Pack 5 Build: 3.85.1165. La ruta del script vulnerable es /php/detectiondetailfilter.php. Este script solo es accesible por un...

CVE-2021-22911

CVE-2021-22911 Si ya has registrado un usuario, esto solo restablecerá la contraseña del administrador, y no ambas. Haciendo que el exploit se ejecute mucho más rápido. python3 exploit.py -u test -a [email protected] -t http://chat.rocket.thm -i 10.10.4.24 -p 80...

JoomlaCVE20168869

Exploit para Joomla 3.4.4 - 3.6.4 CVE-2016-8869 y CVE-2016-8870 con subida de archivos web shell Esta es una versión en PHP, el código fuente original en Python fue proporcionado por @link https://github.com/XiphosResearch/exploits/tree/master/Joomraa Usage: php exploit.php --username hacker -p...

CVE-2021-40101

Survey XSS 与 CSRF 结合导致 Concrete5 8.5.4 管理员帐户接管 在版本低于 9 的 Concrete CMS 中，管理员在更改其他用户密码时无需提供自己的密码。 结合 CVE-2021-28145（"Concrete CMS（前身为 concrete5）8.5.5 之前的版本允许远程认证用户通过精心设计的调查区块执行 XSS 攻击。这至少需要编辑者权限"：该修复包含在 8.5.5 版本中），低权限用户（例如开发者或能够创建调查的公共用户）可以插入恶意 JavaScript 代码到 Web 应用程序中。调查结果可由管理员在其 Web 界面（报告调查）中查看。恶...

CVE-2026-76554

The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an import is permitted to create or modify user accounts and assign roles, allowing users granted a delegated WP Import Export Lite WordPress plugin before 3.9.35 permission, who cannot otherwise manage...

CVE-2026-76554 WP Import Export Lite < 3.9.35 - Authenticated Privilege Escalation via User Import

The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an import is permitted to create or modify user accounts and assign roles, allowing users granted a delegated WP Import Export Lite WordPress plugin before 3.9.35 permission, who cannot otherwise manage...

Exploit for CVE-2026-12793

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2026-12793

The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.6.2. This is due to the plugin not validating that a submitted form ID belongs to a JetFormBuilder form before parsing the referenced post's content ...

CVE-2026-12793 JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter

The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.6.2. This is due to the plugin not validating that a submitted form ID belongs to a JetFormBuilder form before parsing the referenced post's content ...

PT-2026-93267

The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.6.2. This is due to the plugin not validating that a submitted form ID belongs to a JetFormBuilder form before parsing the referenced post's content ...

CVE-2026-85131: Cross-Site Request Forgery (CSRF)

The WPLP Cookie Consent WordPress plugin before 4.4.4 does not perform CSRF or capability checks when processing bulk actions on its administration screens, and does not restrict the targeted items to its own records, allowing attackers to make a logged in admin permanently delete arbitrary posts...

CVE-2026-18116 Concrete CMS 8.3.0 to 9.5.2 is vulnerable to Stored XSS in Calendar Event Name via Workflow Approval Notifications

Concrete CMS 8.3.0 to 9.5.2 stored calendar event names without sanitization and rendered them without HTML escaping in the workflow approval and deletion notifications shown in the dashboard "Waiting For Me" block. A registered user permitted to add events to a calendar governed by an approval...

Exploit for SQL Injection in Metabase

Metabase SQL Injection RCE !Exploitation Demoexploitoutpu...

CVE-2026-90562

LangBot before 4.10.11 is vulnerable to authentication bypass via a weak password recovery key mechanism. The application generates recovery keys with only 24 bits of entropy and applies no rate limiting to the unauthenticated reset-password endpoint. A remote attacker who knows the administrator...

CVE-2026-90562 LangBot before 4.10.11 Authentication Bypass via Weak Recovery Key

LangBot before 4.10.11 generates password recovery keys with only 24 bits of entropy and applies no rate limiting to the unauthenticated reset-password endpoint. Remote attackers knowing the administrator email can exhaust the keyspace through concurrent requests to reset the admin password and...

CVE-2026-53952

GetSimple CMS (v3.4.0a and below) and GetSimpleCMS-CE (v3.3.22 and below) are affected by a logic flaw that allows unauthenticated attackers to create a new administrator account . The root cause is a self-exclusion bug in the post-installation deletion logic for admin/setup.php, which fails to r...

CVE-2026-53952 GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flaw

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. A logic flaw in GetSimple CMS v3.4.0a and below and GetSimpleCMS-CE v3.3.22 and below allows unauthenticated attackers to create a new administrator account. The application features an...

CVE-2026-53952 GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flaw

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. A logic flaw in GetSimple CMS v3.4.0a and below and GetSimpleCMS-CE v3.3.22 and below allows unauthenticated attackers to create a new administrator account. The application features an...