CVE-2026-72578 FreePBX Framework - Missing CSRF Protection in Admin Panel Ajax Dispatcher

A cross-site request forgery CSRF vulnerability in FreePBX Framework 17.0 allows an unauthenticated remote attacker to perform administrative actions on behalf of an authenticated administrator...

EUVD-2026-55228

A cross-site request forgery CSRF vulnerability in FreePBX Framework 17.0 allows an unauthenticated remote attacker to perform administrative actions on behalf of an authenticated administrator...

CVE-2026-72578

CVE-2026-72578 concerns FreePBX Framework 17.0. The vulnerability is a CSRF weakness in the /admin/ajax.php dispatcher (amp_conf/htdocs/admin/libraries/BMO/Ajax.class.php) where no CSRF tokens are implemented; protection relies solely on a Referer header, which can be bypassed when no Referer hea...

GHSA-vwf4-m7j8-wcjf

GHSA-vwf4-m7j8-wcjf — Metabase Pre-Auth SQL Injection Unaut...

Metabase-Exploit

Metabase SQL Injection Zero-Day Exploit GHSA-vwf4-m7j8-wcjf...

xss2shell

XSS2Shell — WordPress Pre-Auth XSS → RCE Chain PoC CVE-2026...

EUVD-2026-55113

DEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certificate validation disabled. A man-in-the-middle attack may allow to obtain and/or alter communications of the affected products. As a result, arbitrary code may be executed with the administrative privilege...

CVE-2026-18786

The CheckView WordPress plugin before 2.3.2 does not restrict its REST API authentication filter to its own routes and unconditionally discards the authentication error raised for any request whose URI merely contains a CheckView WordPress plugin before 2.3.2-specific string, making it possible f...

CVE-2026-16298

The FoodBoxBooker WordPress plugin before 1.0.7 does not properly validate the password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover...

CVE-2026-16299

The Single Sign On For TNG WordPress plugin before 2.2.0 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover...

CVE-2026-13600

The AutoNetTV Relay WordPress plugin before 3.0.14 does not perform any capability or authentication check before setting a WordPress administrator authentication cookie during its scheduled content-synchronization task. On server configurations where the scheduled task executes before the HTTP...

CVE-2026-13701

The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators including those without the unfilteredhtml capability, such as on multisite to perform Stored Cross-Site Scripting...

Apache ActiveMQ - Double-Slash Source Disclosure Detection (CVE-2010-1587)

Detects CVE-2010-1587 by requesting //admin/queues.jsp and matching the raw JSP expression $sessionScope"secret" in the response body. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CVE-2010-1587 by requesting //admin/queues.""" import re from kittysploit import from...

GlassFish - Admin Console TRACE Bypass Detection (CVE-2011-1511)

Detects CVE-2011-1511 by issuing TRACE to manageUserNew.jsf and matching ConfirmPassword / NewPassword form fields. !/usr/bin/env python3 -- coding: utf-8 -- """Oracle GlassFish Admin Console TRACE auth bypass CVE-2011-1511.""" from kittysploit import from lib.protocols.http.httpclient import...

NETGEAR - passwordrecovered.cgi Disclosure (CVE-2017-5521)

Detects CVE-2017-5521 by extracting unauth.cgi?id= token and requesting passwordrecovered.cgi to recover admin credentials without auth. !/usr/bin/env python3 -- coding: utf-8 -- """NETGEAR passwordrecovered.cgi password disclosure CVE-2017-5521.""" import re from kittysploit import from...

NETGEAR DGND3700v2 - Unauth Password Recovery Dump

Retrieves admin username/password from /setup.cgi?nextfile=passwordrecovered.htm on NETGEAR DGND3700v2 PSV-2021-0343. !/usr/bin/env python3 -- coding: utf-8 -- """Dump NETGEAR DGND3700v2 admin credentials via password recovery page.""" import re from kittysploit import from...

CVE-2026-18786

The CheckView WordPress plugin (versions prior to 2.3.2 ) is vulnerable to a REST API authentication bypass because it fails to restrict its authentication filter to its own routes. The plugin unconditionally discards authentication errors for any request where the URI contains a plugin-specific ...

CVE-2026-18786

The CheckView WordPress plugin before 2.3.2 does not restrict its REST API authentication filter to its own routes and unconditionally discards the authentication error raised for any request whose URI merely contains a CheckView WordPress plugin before 2.3.2-specific string, making it possible f...

CVE-2026-14238

The vitepos WordPress plugin prior to version 3.6.0 is vulnerable to SQL injection due to improper neutralization of special elements. The root cause is the failure to sanitize or parameterize an identifier received from a REST request body before its use in a database query within one of the plu...

CVE-2026-14238 Vitepos < 3.6.0 - Admin+ SQL Injection via product-details-report

The vitepos WordPress plugin before 3.6.0 does not sanitize or parameterize an identifier taken from a REST request body before using it in a database query in one of its report endpoints, allowing users with administrator-level access to perform SQL injection...