AMSIDetection

Author: Aden Chung Wee Jing [email protected] Company: Countercept @countercept Website: https://countercept.com How to Compile/execute Program must be compiled in x64 and run with adminstrative privliges...

CVE-2024-57778

CVE-2024-57778 Description : An issue in Orbe ONetView Roteador Onet-1200 allows a remote attacker to escalate privileges via the servers response from status code 500 to status code 200. Versions : Discovered in Orbe ONetView Roteador Onet-1200 Orbe 1680210096, but applicable to all versions up...

CVE-2026-8181-Lab

CVE-2026-8181 — Burst Statistics Authentication Bypass Lab Local-only Docker lab for CVE-2026-8181 , an authentication bypass in the WordPress plugin Burst Statistics – Privacy-Friendly WordPress Analytics. This lab compares a vulnerable plugin version against the patched version and uses a...

CVE-2021-22911-rust

CVE-2021-22911 Un proof of concept en Rust para esta CVE. Se utiliza como parte de https://tryhackme.com/room/rocket, un CTF boot to root en la plataforma de aprendizaje TryHackMe. Para usarlo, actualiza las constantes en main.rs y ejecútalo, y debería funcionar directamente. Requiere que tengas ...

CVE-2020-25078

CVE-2020-25078 Instructions instructions Place the attack URLs in the same directory as ip.txt The attack IP is placed in the same directory as ip.txt Terminal log root@localhost:/CVE-2020-25078ls CVE-2020-25078.py ip.txt root@localhost:/CVE-2020-25078cat ./ip.txt https://xxx.xxx.xxx.xxx:3128...

CVE-2024-49328-exploit

CVE-2024-49328-exploit 🌟 Description: This script exploits a privilege escalation vulnerability in the WP REST API FNS Plugin for WordPress. The vulnerability affects all versions up to and including 1.0.0, allowing unauthenticated attackers to gain administrator privileges. ⚙️ Usage options: -h,...

CVE-2019-9053-port-py3

Exploit CVE-2019-9053 - Python 3 Este es un port a Python 3 del exploit CVE-2019-9053, que afecta a versiones de CMS Made Simple CMSMS anteriores a la 2.2.10. La vulnerabilidad permite inyección SQL a través del módulo News. Salida de ejemplo Probado en el TryHackMe Simple CTF Challenge...

CVE-2026-59788 Stored XSS vulnerability in OAuth configuration form

The email media type OAuth form passes the Authorization endpoint value to window.open without validating the URL scheme, so a javascript: URL is executed in the browser. This means a crafted media type configuration, deliverable as an import file, runs arbitrary JavaScript as the Super Admin who...

CVE-2026-59788 Stored XSS vulnerability in OAuth configuration form

The email media type OAuth form passes the Authorization endpoint value to window.open without validating the URL scheme, so a javascript: URL is executed in the browser. This means a crafted media type configuration, deliverable as an import file, runs arbitrary JavaScript as the Super Admin who...

EUVD-2026-92400

The email media type OAuth form passes the Authorization endpoint value to window.open without validating the URL scheme, so a javascript: URL is executed in the browser. This means a crafted media type configuration, deliverable as an import file, runs arbitrary JavaScript as the Super Admin who...

CVE-2026-59788

A Stored XSS vulnerability exists in the email media type OAuth form because the application passes the Authorization endpoint value to window.open() without validating the URL scheme. This allows for the execution of a javascript: URL in the browser. An attacker can deliver a crafted media type ...

CVE-2023-0157

ID de CVE : CVE-2023-0157 Tipo de Vulnerabilidad : Directory Traversal Descripción : El plugin All-In-One Security AIOS para WordPress es vulnerable a directory traversal en versiones hasta la 5.1.4 inclusive. Esto permite a atacantes autenticados con permisos de administrador leer el contenido d...

CVE-2023-22515-Scan.

Escaneo CVE-2023-22515 Acerca de Este es un escáner simple para CVE-2023-22515, una vulnerabilidad crítica en Atlassian Confluence Data Center y Server que está siendo explotada activamente en la naturaleza por actores de amenazas para "crear cuentas de administrador de Confluence no autorizadas ...

CVE-2024-27198

CVE-2024-27198 Bypass de autenticación para TeamCity Server versión 2023.11.3 y anteriores. NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-27198 Publicación del blog de Rapid7:...

CVE-2026-105263

A security flaw has been discovered in Shaarli up to 0.16.3. The affected element is the function MetadataController of the file application/front/controller/admin/MetadataController.php of the component Admin Metadata Endpoint. Performing a manipulation of the argument url results in server-side...

CVE-2026-105062

Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Admin Audit: from n/a through 1.2.17...

CVE-2026-105254

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

CVE-2026-105253

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

CVE-2017-13872-Patch

CVE-2017-13872-Patch Descargue este software y ejecútelo; luego le solicitará una nueva contraseña para el usuario root. La contraseña podría ser diferente, pero creo que, en la opción predeterminada, es igual a la contraseña de Administrador. Actualización Puede corregir el error actualizando su...

CVE-2024-57429

CVE-2024-57429 Una vulnerabilidad de falsificación de solicitudes entre sitios CSRF en la función pjActionUpdate de PHPJabbers Cinema Booking System v2.0 permite a atacantes remotos escalar privilegios engañando a un administrador autenticado para que envíe una solicitud no autorizada. Impacto: L...