Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication Bypass

The compromised Advanced Responsive Video Embedder WordPress plugin releases 10.8.7 and 10.8.8 accept a hardcoded token through the wplogin parameter and establish an authenticated administrator session before normal authentication. A single unauthenticated GET request triggers the backdoor. This...

Login Configurator <=2.1 - Cross-Site Scripting

Login Configurator WordPress plugin = 2.1 contains a reflected cross-site scripting caused by improper escaping of URL parameter before outputting it to the page, letting attackers execute scripts in the context of site administrators, exploit requires victim to visit a malicious URL. id:...

Arcserve UDP <= 9.0.6034 - Authentication Bypass

Arcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at WebServiceImpl/services/FlashServiceImpl leaks the AuthUUID token. This token can be used at /WebServiceImpl/services/VirtualStandbyServiceImpl to obtain a valid session. This session can be used to execute a...

EUVD-2026-124660

XWEB EVO 5.6.2 through 5.8.8 contains a hardcoded credential vulnerability where the Administrator web account is configured to use passwordmode dailypassword with no stored password, as the Users.authenticate function in lualibusers.lua synthesizes the Administrator configuration without...

CVE-2024-10924

CVE-2024-10924 - Authentication Bypass in Really Simple Security OVERVIEW This project demonstrates the exploitation and mitigation of CVE-2024-10924, a critical authentication bypass vulnerability in the WordPress "Really Simple Security" plugin. STEP 1: ENVIRONMENT SETUP Start the vulnerable...

CVE-2026-124012: Copeland XWEB EVO: XWEB EVO 5.6.2 through 5.8.8 contains a hardcoded credential vulnerability where the Administrator web account is…

XWEB EVO 5.6.2 through 5.8.8 contains a hardcoded credential vulnerability where the Administrator web account is configured to use passwordmode dailypassword with no stored password, as the Users.authenticate function in lualibusers.lua synthesizes the Administrator configuration without...

CVE-2026-2991

KiviCare = 4.1.2 - Authentication Bypass CVE-2026-2991 PoC 📜 Description CVE-2026-2991 is an authentication bypass vulnerability in the KiviCare – Clinic & Patient Management System EHR WordPress plugin affecting all versions up to and including 4.1.2. The plugin exposes a public REST endpoint at...

POC-WP-CORE-CVE-2026-93485

Pedagogical lab — CVE-2026-93485 "Comment2Shell" WordPress core · Unauthenticated stored XSS - RCE via admin session · zero-click CVSS 3.1 7.1 Patchstack · found by Rafie Muhammad Awesome Motive · fixed in WordPress 7.1.1 2026-09-17, backported down to 4.7.36 A self-contained Docker lab to...

CVE-2023-41425-RCE-WonderCMS-4.3.2

🚨 WonderCMS RCE Exploit Tool CVE-2023-41425 This Python-based offensive security tool automates the exploitation of a Remote Code Execution RCE vulnerability in WonderCMS 4.3.2 , specifically CVE-2023-41425. It streamlines the process of crafting a malicious ZIP theme module and delivering a...

CVE-2026-66917

IDOR + Stored XSS via Broken Object-Level Authorization in JoomGallery JoomGallery ≤ 4.3.0 — Editor-Role User Hijacks Any Gallery Image and Stores XSS Payload, Enabling Admin Session Takeover SUMMARY UserimageController::save in JoomGallery checks checkACL'edit', ... instead of checkACL'edit.own'...

CVE-2025-41646

CVE-2025-41646 - RevPi Webstatus = 2.4.5 Authentication Bypass Exploit Overview This is a Python3 exploit script for CVE-2025-41646 , an Authentication Bypass vulnerability affecting RevPi Webstatus = 2.4.5. Vulnerability Details: CVE ID : CVE-2025-41646 Affected Product : RevPi Webstatus = 2.4.5...

CVE-2025-34157

Stored XSS in Coolify delete flow CVE-2025-34157 Affects: Coolify ≤ v4.0.0-beta.420.6 Fixed in: v4.0.0-beta.420.7 Severity: Critical 9.4 CVSS 4.0 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE: CWE-79 Cross-Site Scripting, CWE-20 Improper Input Validation Summary A...

CVE-2026-37107

CVE-2026-37107: HTMLy v3.1.1 — Authenticated SSRF via getfeed Leads to Arbitrary File Read php://filter / file:// and Internal Network Probing CVE ID : CVE-2026-37107 Product : HTMLy https://www.htmly.com/ Affected Version : v3.1.1 latest release at time of discovery,...

DEBIAN-CVE-2026-121551

PostfixAdmin through 4.0.5 contains a stored cross-site scripting vulnerability that allows authenticated mailbox users to inject script by creating a TOTP exception with an unescaped description. When a global administrator views totp-exceptions.php, the script runs in the admin session and can...

CVE-2026-119660

MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin sessions by using the hard-coded default sessionkey 'musebotsessionkey'. Attackers can sign a MuseBot-session cookie carrying a userid to gain full administrative access,...

EUVD-2026-114076

MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin sessions by using the hard-coded default sessionkey 'musebotsessionkey'. Attackers can sign a MuseBot-session cookie carrying a userid to gain full administrative access,...

CVE-2026-119660 MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Key

MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin sessions by using the hard-coded default sessionkey 'musebotsessionkey'. Attackers can sign a MuseBot-session cookie carrying a userid to gain full administrative access,...

CVE-2026-119660

MuseBot versions prior to 2.0.0 are vulnerable to an authentication bypass caused by a hard-coded default session_key (muse_bot_session_key). This flaw allows unauthenticated attackers to forge valid MuseBot-session cookies by signing them with the known key and a specific user_id. Successful exp...

CVE-2026-119660 MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Key

MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin sessions by using the hard-coded default sessionkey 'musebotsessionkey'. Attackers can sign a MuseBot-session cookie carrying a userid to gain full administrative access,...

CVE-2026-119660: yincongcyincong MuseBot: MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge…

MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin sessions by using the hard-coded default sessionkey 'musebotsessionkey'. Attackers can sign a MuseBot-session cookie carrying a userid to gain full administrative access,...