452516 matches found
CVE-2026-84252 click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Arbitrary Options Update
The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to WPForms WordPress plugin through 1.0.3. As a result,...
CVE-2026-84253 click5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Arbitrary Options Update
The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3. As a...
EUVD-2026-96755
The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3. As a...
CVE-2026-104680 Envira Gallery < 1.16.2 - Multisite Subsite Admin+ Arbitrary Plugin Installation via Onboarding Wizard
The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard Envira Gallery WordPress plugin before 1.16.2-installation request, and does n...
CVE-2026-106029 WeddingCity Lite <= 1.0.4 - Unauthenticated Arbitrary Post and Attachment Deletion
The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, allowing unauthenticated attackers to permanently delete arbitrary content site-wide...
CVE-2026-104680
The Envira Gallery WordPress plugin versions prior to 1.16.2 is vulnerable to a privilege escalation flaw. The plugin fails to verify that a user possesses the specific capability reserved by WordPress for installing its code before processing a setup-wizard installation request. Additionally, it...
CVE-2026-106029
The WeddingCity Lite WordPress plugin, in versions through 1.0.4 , is vulnerable to an authorization bypass. The plugin fails to perform necessary authorization or validity checks before processing requests to delete content. This flaw allows unauthenticated attackers to permanently delete arbitr...
CVE-2026-104028 Anton Extensions <= 1.2.2 - Unauthenticated Arbitrary File Upload to RCE
The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-supplied content to an attacker-chosen path, allowing unauthenticated attackers to upload arbitrary PHP files and achieve remote code...
CVE-2026-94235 Simple User Registration <= 6.9 - Subscriber+ Arbitrary Email Sending via wpr_send_email_to_user
The MemberHero WordPress plugin through 6.9 does not perform any capability or nonce check on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to make the site send arbitrary HTML emails to arbitrary recipients from its own mail system, which can be abused to relay...
CVE-2026-94235
The MemberHero WordPress plugin (version 6.9 and below) is vulnerable to an arbitrary email sending flaw due to a missing capability and nonce check on an AJAX action. Specifically, the wpr_send_email_to_user function allows any authenticated user , such as a subscriber, to force the site to send...
CVE-2026-104028
The Anton Extensions WordPress plugin, in versions up to and including 1.2.2 , is vulnerable to an unauthenticated arbitrary file upload. The flaw exists because the plugin fails to perform capability checks , nonce verification , or file-type validation when writing attacker-supplied content to ...
EUVD-2026-96738
The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-supplied content to an attacker-chosen path, allowing unauthenticated attackers to upload arbitrary PHP files and achieve remote code...
ShellShockHunter
ShellShockHunter v1.0 É uma ferramenta simples para testar a vulnerabilidade shellshock Autor: MrCl0wn Blog: http://blog.mrcl0wn.com GitHub: https://github.com/MrCl0wnLab Twitter: https://twitter.com/MrCl0wnLab Email: mrcl0wnlab@\gmail.com Shellshock bug de software Shellshock, também conhecido...
GZDoom-Arbitrary-Code-Execution-via-ZScript-PoC
GZDoom = 4.13.1 Execução Arbitrária de Código via ZScript Malicioso Uma prova de conceito para uma vulnerabilidade de execução arbitrária de código que encontrei na funcionalidade ZScript do GZDoom https://github.com/zdoom/gzdoom. Um atacante pode compartilhar um arquivo PK3 contendo um arquivo...
CVE-2024-2961
CVE-2024-2961 Usa CVE-2024-2961 para realizar uma leitura arbitrária de arquivos Uso Use com wrapwrap para máxima potência. usage: arbitrary-file-read.py -h -t TARGET -c CHAIN -ct CONTENTTYPE --prefix-len PREFIXLEN --suffix-len SUFFIXLEN options: -h, --help show this help message and exit -t...
CVE-2024-31835
CVE-2024-31835 फ्लैटप्रेस CMS Flatpress v1.3 में क्रॉस साइट स्क्रिप्टिंग भेद्यता एक दूरस्थ हमलावर को फ़ाइल नाम पैरामीटर में क्राफ्टेड पेलोड के माध्यम से मनमाना कोड निष्पादित करने की अनुमति देती है। प्रभावित घटक: FlatPress CMS एडमिन पैनल फ़ाइल अपलोड फ़ील्ड निश्चित संस्करण: Flatpress v1.3 - FlatPre...
foolav
foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...
CVE-2023-29343
CVE-2023-29343 यह Sysmon संस्करण 14.14 में मनमानी फ़ाइल लिखने की बग के लिए PoC है अंतिम पैच के बाद Sysmon जाँच करेगा कि Archive निर्देशिका मौजूद है या नहीं और यदि यह मौजूद है तो यह जाँच करेगा कि archive निर्देशिका का स्वामित्व NT AUTHORITY\SYSTEM के पास है और पहुँच केवल NT AUTHORITY\SYSTEM को दी ...
CVE-2019-11510
CVE-2019-11510 पल्स सिक्योर SSL VPN पर आर्बिट्ररी फ़ाइल रीड के लिए एक्सप्लॉइट CVE-2019-11510 आप एक एकल डोमेन या डोमेन की सूची का उपयोग कर सकते हैं। डोमेन के सामने https:// शामिल करना अनिवार्य है। Usage : cat targetlist.txt | bash CVE-2019-11510.sh / bash CVE-2019-11510.sh -d https://vpn.target.co...