CVE-2026-19775

The OpenStation — Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible f...

MakeMeEnterpriseAdmin

Example of successful execution: ====================================================================== /\ Elevated domain admins to Enterprise admins - version 1.0 || /||\ Require: domain admin right |:||:| or more specifically DS-Replication-Get-Changes-All |/||| Vincent LE TOUX...

EUVD-2026-86539

The OpenStation — Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible f...

CVE-2026-19775 OpenStation <= 1.1.7 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via AI Copilot Search Endpoint

The OpenStation — Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible f...

CVE-2026-19775

The OpenStation — Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to an authorization bypass in versions up to and including 1.1.7 . The root cause is the plugin's failure to properly verify user authorization before performing certain actions. This flaw a...

MAL-012

MAL-012: Reflected Cross-Site Scripting in Admin Console leading to Remote Code Execution in Payara Server A reflected Cross Site Scripting XSS attack was found in the Payara Admin Console. By convincing an admin user to access the malicious URL and click the “Choose File” button, an attacker can...

Lurkstrain

Lurkstrain Un rastreador de paneles de administración todo en uno para pentesters...

kong-pwn

kong-pwn Use Exposed KongAPI to act like a proxy and get metadata urls or internal urls. CVE-2020-11710 - It's not a vuln it's a misconfiguration. How to use usage: kong-pwn.py -h -u URL -s SSRF -p PROXY kong-pwn.py: error: the following arguments are required: -u/--url, -s/--ssrf Example $ pytho...

magnolia-rce

Exploit Title: Magnolia DX Core 6.3.8 - Command Injection Date: 05/16/2025 Exploit Author: tmrswrr Version: 6.3.8 Vendor home page: https://docs.magnolia-cms.com/home/ Product: https://docs.magnolia-cms.com/product-docs/6.3/releases/release-notes-for-magnolia-cms-6.3.8/ 1. Authenticate as an admi...

Gallery-Plugin-SQL-Injection

Exploit Title: Wordpress Video Gallery - YouTube Gallery and Vimeo Gallery Plugin SQL Injection Date: 2024-07-05 Exploit Author: tmrswrr Category : Webapps Vendor Homepage: https://total-soft.com/wp-video-gallery/ Version 2.3.6 1. Access the Admin Panel: Navigate to the admin panel of your...

CVE-2024-54363

CVE-2024-54363 Wp NssUser Register successful, just Check this: Login...

cve-2024-0012-poc

cve-2024-0012-poc CVE-2024-0012 is an authentication bypass vulnerability in Palo Alto Networks PAN-OS software. This vulnerability allows an unauthenticated attacker to access the management web interface over the network, obtain PAN-OS administrator privileges, and thereby perform administrativ...

sqlmate

sqlmate Hay algunas características que creemos que SQLMap debería tener. Como encontrar el panel de administración del objetivo, mejor cracking de hashes, etc. Si piensas lo mismo, SQLMate es para ti. ¿Qué hace? Aliméntalo con un dork de inyección SQL mediante la opción --dork y encontrará sitio...

gladius

Gladius Easy mode from Responder to Credentials Author: Cory Duplantis @ctfhacker / blog Blog post on Gladius asciicast Gladius provides an automated method for cracking credentials from various sources during an engagement. We currently crack hashes from Responder, secretsdump.py, and...

Tenda-F3-V4

Exploit del Router Tenda F3 y Descargador de Archivos Este proyecto es una herramienta para descargar varios archivos del router Tenda F3 v3/v4 a través de una vulnerabilidad sin autenticación CVE-2020-35391. Permite obtener el archivo de configuración, el registro del sistema y el volcado de la...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...

CVE-2026-97650

A vulnerability has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function echo of the file admin/fun/addLog.php. The manipulation of the argument reason/detail leads to cross site scripting. The attack can be...

CVE-2023-6329

CVE-2023-6329 — Control iD iDSecure Authentication Bypass A Python proof-of-concept exploit for CVE-2023-6329 , an improper access control vulnerability in Control iD iDSecure versions 4.7.43.0 and below. The flaw allows an unauthenticated remote attacker to reconstruct valid login credentials by...

CVE-2025-2563

CVE-2025-2563 — Registro de Usuario y Membresía | Escalada de Administrador de Cadena Completa ██╗ ██╗███████╗███████╗██████╗ ██████╗ ███████╗ ██████╗ ██║ ██║██╔════╝██╔════╝██╔══██╗ ██╔══██╗██╔════╝██╔════╝ ██║ ██║███████╗█████╗ ██████╔╝ ██████╔╝█████╗ ██║ ███╗ ██║ ██║╚════██║██╔══╝ ██╔══██╗...

LearnDash

LearnDash Sqli LearnDash = 4.25.6 - Inyección SQL Admin+ Descripción El complemento de WordPress LearnDash con versión inferior a 4.25.6 es vulnerable a inyección SQL Admin+. Detalles Tipo : plugin Slug : sfwd-lms Versión afectada : Puntuación CVSS : 9.8 Gravedad CVSS : Crítica Vector CVSS :...