lab-cve-2025-3515

CVE-2025-3515 Laboratorio WordPress Drag and Drop Multiple File Upload for Contact Form 7 Levanta un entorno vulnerable de WordPress para reproducir y validar CVE-2025-3515 — subida de archivos sin restricciones a través de ddmuuploadfile en el plugin...

CVE-2019-14234

POC-Django Exploit de Vulnerabilidad de Inyección SQL en JSONField/HStoreField CVE-2019-14234 Django publicó una actualización de seguridad el 1 de agosto de 2019, que corrige una vulnerabilidad de inyección SQL en los dos campos de modelo JSONField y HStoreField. Enlace de referencia:...

CVE-2021-44228

CVE-2021-44228 Usando la librería Log4j 2.14 Vulnerable en User-Agent, método POST y punto de entrada /admin/cores?foo= Lo he subido a Docker Hub: puedes hacer pull y ejecutarlo https://hub.docker.com/repository/docker/iamnewbie/log4j-vuln...

EUVD-2026-91906

The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author' parameter in all versions up to, and including, 1.0.34 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to injec...

CVE-2026-101928 Magic Tooltips For Contact Form 7 <= 1.0.34 - Unauthenticated Stored Cross-Site Scripting via 'esc_html' Filter Override via Comment Author

The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author' parameter in all versions up to, and including, 1.0.34 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to injec...

CVE-2026-101928

The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.0.34 . The root cause is insufficient input sanitization and output escaping in the 'author' parameter. Specifically, the plugin's esc_html filter ca...

CVE-2026-41452-PoC

CVE-2026-41452 — Omisión de autenticación en el instalador de Krayin CRM → Toma de control del administrador CVSS 9.8 Crítico · CWE-287 / CWE-306 · Informe de Jiva · Aviso de VulnCheck Resumen El instalador de Krayin CRM expone POST /install/api/admin-config-setup además de run-migration,...

CVE-2025-67315

CSRF para Desactivar Cualquier Empleado Resumen La funcionalidad Gestionar Empleados es vulnerable a Cross-Site Request Forgery CSRF. Un atacante puede engañar a un administrador con sesión iniciada para que envíe una solicitud falsificada que inactiva a un empleado p. ej., inid=1 sin el...

CVE-2026-15989

█████╗ ███╗ ██╗ ████████╗ ██╗ ██████╗ ██████╗ ██████╗ ████████╗ ██╔══██╗ ████╗ ██║ ╚══██╔══╝ ██║ ██╔══██╗ ██╔═████╗ ██╔═████╗ ╚══██╔══╝ ███████║ ██╔██╗ ██║ ██║ ██║ ██║ ██║ ██║██╔██║ ██║██╔██║ ██║ ██╔══██║ ██║╚██╗██║ ██║ ██║ ██║ ██║ ████╔╝██║ ████╔╝██║ ██║ ██║ ██║ ██║ ╚████║ ██║ ██║ ██████╔╝...

CVE-Newgen-Software-Advisories

Newgen Software – CVE 概念验证 此仓库包含多个在 Newgen Software Technologies Limited 开发的产品中发现的 CVE 漏洞 的 概念验证（PoC） 材料和技术文档。 此处记录的漏洞已公开分配 CVE 编号，并被 MITRE 和 NVD 引用。 包含的 CVE CVE-2025-65742 – Newgen OmniDocs LDAP 管理员功能级别授权缺陷（BFLA） CVE-2025-69907 – Newgen OmniDocs 未授权信息泄露 CVE-2025-69908 – Newgen OmniApp 特权用户名泄露 研究...

CVE-2023-3460_POC

CVE-2023-3460 Exploit para CVE-2023-3460 - Acceso de administrador no autorizado para el plugin Ultimate Member. Hecho con Golang ╔══════════════════════════════════════════════════╗ ╔══════════════════════════════════════════════════╗ ║ DISCLAIMER ║ ║ ABOUT THE PROJECT ║ ║ ║ ║ ║ ║ This Proof of...

cve-2025-24472-fortinet_authbypass_reproduction

CVE-2025-24472 — Bypass de autenticación en Fortinet FortiOS / FortiProxy Descripción general CVE-2025-24472 es una vulnerabilidad de bypass de autenticación en Fortinet FortiOS y FortiProxy. Un atacante no autenticado puede crear solicitudes proxy CSF Central Security Fabric especialmente formad...

CVE-2026-96270

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formid' parameter in all versions up to, and including, 2.13.1 due to insufficient input sanitization and...

CVE-2023-7028

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...

EUVD-2026-91876

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formid' parameter in all versions up to, and including, 2.13.1 due to insufficient input sanitization and...

CVE-2026-96270

The Ultimate Member plugin for WordPress (versions up to and including 2.13.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the 'form_id' parameter. The root cause is insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts...

CVE-2026-75816

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-75816 CVE-2026-75816 Frontend Admin by DynamiApps 3.29.11 - shabti I am @abraxasnull. Loopback lab. The client is CVE-2026-75816-Abraxas-Labs.py. user1 is not a post. Unauthenticated admin-ajax.php...

CVE-2024-10924-Bypass-MFA-Wordpress-LAB

CVE-2024-10924 绕过 MFA WordPress - 利用实验 该仓库提供了一个用于利用 WordPress 中 CVE-2024-10924 漏洞的实验环境，旨在绕过双因素认证（MFA）并获取 WordPress 管理面板的访问权限。 前提条件 要在您的环境中部署该实验，请按照以下步骤操作： 在 VMware 上部署 WordPress 您需要解压实验的 zip 文件，然后在 VMware 中点击 Open 导入虚拟机，选择名为 Ubuntu-Bypass-MFA-Wordpress.vmx 的文件，最后点击 Power 启动易受攻击的虚拟机。 下载实验 配置 Kali...

CVE-2026-18143

CVE-2026-18143 — Request a Quote for WooCommerce Addify Carga Arbitraria de Archivos PoC en Python 3 para CVE-2026-18143 en Request a Quote for WooCommerce woocommerce-request-a-quote, Addify / WooCommerce.com. Descripción PoCbit / GitHub CVE-2026-18143 — Request a Quote for WooCommerce ≤ 2.9.2...

CVE-2026-104474

OpenLiteSpeed before 1.9.3 contains a local privilege escalation vulnerability in admin/misc/lsup.sh that runs unverified update packages from a nobody-writable directory as root. Attackers controlling the nobody web process can replace the package in /usr/local/lsws/autoupdate/ before extraction...