31400 matches found
CVE-2026-19197
CVE-2026-19197 is a broken access control vulnerability in Grafana 's dashboard snapshots feature. An organization administrator on a shared Grafana instance can delete snapshots belonging to other organizations and recover a snapshot's secret delete key using only its public share key , enabling...
CVE-2019-10708
Scms - SQL Injection exploit.py è un PoC per la vulnerabilità CVE-2019-10708, implementa l'iniezione tramite multiprocessing per ottenere i nomi dei database e le credenziali dell'amministratore del backend si consiglia una versione precedente al 20190401. Utilizzo root@kitploit: 測試是否可注入 python3...
CVE-2025-2563
CVE-2025-2563 User Registration & Membership = 4.1.1 - Escalatazione dei privilegi non autenticata Dichiarazione di non responsabilità! Le informazioni presentate in questo rapporto CVE Common Vulnerabilities and Exposures sono solo a scopo educativo e informativo. I dettagli forniti si basano su...
wp2shell-Hestia-Scanner
🛡️ wp2shell-Hestia-Scanner 🇬🇧 English | 🇬🇷 Ελληνικά Scanner di sicurezza WordPress in sola lettura per server HestiaCP. Rileva gli indicatori di compromissione wp2shell su tutti i siti ospitati — con report email per cliente, diff dei file del core, rilevamento webshell SHA256, punteggio di rischio...
CVE-2021-37580
CVE-2021-37580 Apache ShenYu: bypass dell'autenticazione dell'amministratore...
CVE-2023-0156
CVE ID : CVE-2023-0156 Vulnerability Type : Directory Traversal Description : Il plugin All-In-One Security AIOS per WordPress è vulnerabile a directory traversal nelle versioni fino alla 5.1.4 inclusa. Ciò consente a un attaccante autenticato con permessi di amministratore di leggere il contenut...
PAN-OS Management Web Interface - Authentication Bypass
An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege...
WordPress Events Manager – Calendar, Bookings, Tickets, and more! plugin <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion vulnerability
Authenticated Administrator+ Local File Inclusion vulnerability discovered by Wordfence PRISM in WordPress Plugin Events Manager versions = 7.3.7.4...
CVE-2026-8732
CVE-2026-8732 — WP Maps Pro ≤ 6.1.0 ♡ Escalation dei Privilegi non Autenticata tramite Creazione di un Account Amministratore ♡ === shadow ♡ & friska === 📋 Informazioni sulla Vulnerabilità Campo| Dettagli ---|--- CVE ID| CVE-2026-8732 Punteggio CVSS| 9.8 Critico Vettore CVSS|...
BIT-KEYCLOAK-2026-17048 Keycloak-services: keycloak-services: vault-resolved rotated client secrets leaked via admin rest api
A flaw was found in the Keycloak Admin REST API, which is used to manage security realms and clients. The issue occurs when the system processes requests for rotated client secrets that are stored in a secure vault. Due to improper boundary enforcement, a delegated administrator with view-only...
CVE-2026-77824
Media Sweep – WordPress Media Cleaner (all versions up to and including 1.1.3 ) is affected by a SQL Injection vulnerability in the 'fields' parameter of its REST API. The root cause is insufficient escaping of the user-supplied parameter combined with lack of proper query preparation, as seen in...
CVE-2026-77824 Media Sweep <= 1.1.3 - Authenticated (Administrator+) SQL Injection via 'fields' Parameter
The Media Sweep – WordPress Media Cleaner plugin for WordPress is vulnerable to generic SQL Injection via the 'fields' parameter in all versions up to, and including, 1.1.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...
CVE-2025-49388
CVE-2025-49388 Il plugin WordPress Miraculous Core Plugin OPZIONI Esempio: root@k...
EUVD-2026-65300
The Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator...
CVE-2026-78477
The Jawn theme for WordPress is vulnerable to unauthenticated privilege escalation in all versions up to and including 1.4.2 , allowing an attacker to gain administrator-level access . The CVSS 3.1 base score is 9.8 (Critical) , reflecting network-accessible, low-complexity exploitation with no r...
CVE-2025-6220
Ultimate Addons per Contact Form 7 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0...
CVE-2025-5961
CVE-2025-5961 Migrazione, Backup, Staging – WPvivid Backup & Migration 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft...
CVE-2025-10046
CVE-2025-10046 - ELEX WooCommerce Google Shopping Autore: Byte Reaper Descrizione CVE-2025-10046 è una vulnerabilità di iniezione SQL nel plugin ELEX WooCommerce Google Shopping Product Feed per WordPress, versioni 1.4.3 e precedenti. Il problema risiede nel file includes/elex-manage-feed-ajax.ph...
CVE-2023-6444-POC
CVE-202306444-POC Prova di concetto per la divulgazione dell'email dell'amministratore senza autenticazione CVE-2023-6444 Uso: python3 cve-2023-6444.py $URL https://vulners.com/cvelist/CVELIST:CVE-2023-6444...