adidnsdump

Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. For mo...

GestioIP - Reflected Cross-Site Scripting

GestioIP v3.5.7 contains a reflected cross-site scripting caused by unsanitized input in the ipdojob request, letting attackers execute scripts in the victim's browser, exploit requires specific user permissions. id: CVE-2024-50857 info: name: GestioIP - Reflected Cross-Site Scripting author:...

Musicbox WordPress - Reflected XSS

contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13327 info:...

GLPI - Blind SQL Injection in History Log Filter (LogBleed)

GLPI versions before 10.0.26 and 11.0.8 are vulnerable to a blind SQL injection in the history log filter. The Log::convertFiltersValuesToSqlCriteria function splits the affectedfields filter into key:operator:value parts and DBmysqlIterator::analyseCrit does not quote OR, AND and NOT as column...

WordPress WP Fastest Cache <= 0.9.0.2 - Authenticated Arbitrary File Deletion

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and including, 0.9.0.2 due to a lack of capability checking and insufficient path validation. This makes it possible for authenticated users with minimal permissions to delete...

iBuildApp <= 0.2.0 - Reflected Cross-Site Scripting

iBuildApp WordPress plugin through 0.2.0 contains a reflected cross-site scripting caused by unsanitized parameter output in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13326 info:...

ECT Home Page Products - Reflected XSS

ECT Home Page Products WordPress plugin through 1.9 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users such as admin, exploit...

Pheditor 2.0.1-2.0.3 - OS Command Injection

Pheditor 2.0.1 to - 2.0.4 contains an OS command injection caused by improper sanitization of the 'dir' POST parameter in the terminal action handler, letting authenticated users execute arbitrary OS commands with web server privileges. id: CVE-2026-48030 info: name: Pheditor 2.0.1-2.0.3 - OS...

DbGate - Remote Code Execution via Dynamic Import Bypass

DbGate versions = 7.1.8 are vulnerable to authenticated remote code execution via the POST /runners/load-reader endpoint. The functionName parameter is directly interpolated into a JavaScript code template without sanitization. The require=null mitigation is bypassed via dynamic import. id:...

EUVD-2026-39789

LXD has CreateCustomVolumeFromBackup nil-pointer dereference on volumes0.snapshots.expiresat...

CVE-2026-87784

The Cool Media Filter WordPress plugin through 1.0.1 does not perform any capability or nonce check when updating the capabilities of a role, allowing any authenticated user, such as a subscriber, to grant their own role administrator capabilities and take over the site...

EUVD-2026-117915

The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes WordPress plugin before 4.3.1 does not verify that a user is permitted to read a given post before returning its content through its revision-comparison feature, allowing any authenticated user, including a...

CVE-2026-87784 Cool Media Filter <= 1.0.1 - Subscriber+ Privilege Escalation via role_permission

The Cool Media Filter WordPress plugin through 1.0.1 does not perform any capability or nonce check when updating the capabilities of a role, allowing any authenticated user, such as a subscriber, to grant their own role administrator capabilities and take over the site...

EUVD-2026-117907

The Cool Media Filter WordPress plugin through 1.0.1 does not perform any capability or nonce check when updating the capabilities of a role, allowing any authenticated user, such as a subscriber, to grant their own role administrator capabilities and take over the site...

CVE-2025-68613

CVE-2025-68613 — n8n Workflow Automation Expression Engine Isolation Failure The author assumes no liability for misuse or damage caused by this research Provided strictly for educational and defensive purposes Description This repository contains a laboratory-grade analysis and a safe...

DELMIA Apriso - Command Injection

An Improper Control of Generation of Code code injection / file upload → RCE vulnerability affecting DELMIA Apriso Release 2020 → Release 2025. When an authenticated user can upload files and the upload handler fails to canonicalize filenames or enforce storage restrictions, an attacker may place...

CVE-2025-8110

RCE - CVE-2025-59528 Gogs = 0.13.3 Exploit $ python3 CVE-2025-8110.py -h usage: CVE-2025-8110.py -h -u URL -lh HOST -lp PORT -user USERNAME -pass PASSWORD -x CVE-2025-8110 Gogs Exploit options: -h, --help show this help message and exit -u, --url URL Gogs base URL e.g., http://127.0.0.1:3000 -lh,...

CVE-2026-114431

The Enable Media Replace WordPress plugin, in versions before 4.2.3 , is vulnerable to Stored Cross-Site Scripting (XSS) via SVG uploads. The root cause is that the plugin fails to pass replaced media files through the standard WordPress upload pipeline, causing the SVG-sanitizer prefilter to be ...

CVE-2026-105191

The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce WordPress plugin versions before 1.17.11 is vulnerable to a sensitive data disclosure. The root cause is a missing capability check on an AJAX action that returns the stored before-and-after values of a record change. This flaw al...

CVE-2026-121430: AzuraCast: AzuraCast before 0.24.0 contains a missing authorization vulnerability in the GET and POST…

AzuraCast before 0.24.0 contains a missing authorization vulnerability in the GET and POST /api/station/stationid/waveform/mediaid routes, which lack Permissions middleware. Any authenticated user without station assignment can read another station's cached waveform JSON and overwrite it with...