EUVD-2025-211018

The Viable URL Media Uploader plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access...

CVE-2025-14564

The Viable URL Media Uploader plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.0.0 . The root cause is insufficient input sanitization and output escaping during SVG file uploads. An authenticated attacker with Author-level access or hi...

termshark

Termshark A terminal user-interface for tshark, inspired by Wireshark. V2.4 is out now with packet search and profiles for colors and columns! See theChangeLog. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Rea...

openstego

OpenStego OpenStego is a steganography application that provides two functionalities: 1. Data Hiding: It can hide any data within an image file. 2. Watermarking: Watermarking image files with an invisible signature. It can be used to detect unauthorized file copying. Usage For GUI: Use menu...

CVE-2026-100243

The Wikimedia Foundation Mediawiki - WikiSEO Extension is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The flaw specifically affects the author and image properties when accessed via action=info. This vulnerability impacts ver...

WordPress_4.9.8_RCE_POC

Resumen Un PoC simple para RCE en WordPress privilegio de autor, consulte CVE-2019-8942 y CVE-2019-8943. Versión afectada WordPress " 3. Detecta el tema actual con WPScan wpscan -u -et, p.ej. twentyseventeen como predeterminado en WordPress 4.9.8 4. Sube el archivo de imagen de payload poc.jpg...

CVE-2021-24545

CVE-2021-24545 WP HTML Author Bio alert/XSS/ 然后查看该作者发布的文章以触发XSS。 视频POC： https://www.youtube.com/watch?v=fhzJZ5hSI-g...

subparse

subparse Subparse, is a modular framework developed by Josh Strochein, Aaron Baker, and Odin Bernstein. The framework is designed to parse and index malware files and present the information found during the parsing in a searchable web-viewer. The framework is modular, making use of a core parsin...

CVE-2021-24545

CVE-2021-24545 目前该插件已停止分发，是在该插件中发现的XSS漏洞。 WordPress Plugin HTML Author Bio description XSS 该漏洞是由于 /wp-admin/profile.php 中 description 参数的不当验证引起的。 远程攻击者可以通过发送恶意构造的HTTP请求进行攻击。 安装及运行步骤 1. WordPress 安装 进行安装时，请在 docker-compose.yml 文件中进行端口转发。 $ docker-compose up 2. WordPress initial & Plugin...

CVE-2024-4439

CVE-2024-4439 CVE-2024-4439 docker and poc 靶场设置 启动docker容器后还需要一些设置 访问127.0.0.1:8080，完成配置后 在后台-外观-主题中，选中一个主题，自定义，进行设置 进入设计-模版-单篇文章 右边选中头像，进入主题编辑器 先点击头像，然后右上方点击设置，右方有两个属性，链接到用户个人资料和在新窗口打开，把两个按钮勾选上 发布任意文章后，就可以进行评论，在评论中把作者的名字换成xss恶意语句 " onmouseover="alert1" 参考 CVE-2024-4439 Wordpress XSS存储型漏洞复现 - 先知社...

CVE-2026-86507

Improper neutralization of input in Apache Roller 6.1.5 allows an anonymous remote attacker to store a crafted comment-author URL that can execute script in the session of a weblog moderator or global administrator when the comment management page is viewed. This affects sites that permit comment...

zap-scripts

zap-scripts Zed Attack Proxy Scripts for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: root@kitploit: ./gradlew build in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/. Usage The easiest way to u...

CVE-2026-86507 Apache Roller: Stored XSS in comment moderation via comment author URL

Improper neutralization of input in Apache Roller 6.1.5 allows an anonymous remote attacker to store a crafted comment-author URL that can execute script in the session of a weblog moderator or global administrator when the comment management page is viewed. This affects sites that permit comment...

CVE-2026-86507

Apache Roller version 6.1.5 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw due to improper neutralization of input. An anonymous remote attacker can store a malicious comment-author URL that executes script in the session of a weblog moderator or global administrator when they view the...

EUVD-2026-88170

Improper neutralization of input in Apache Roller 6.1.5 allows an anonymous remote attacker to store a crafted comment-author URL that can execute script in the session of a weblog moderator or global administrator when the comment management page is viewed. This affects sites that permit comment...

CVE-2026-82546

Apache Roller version 6.1.5 is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. An unauthenticated remote attacker can store a crafted comment-author URL via the incoming Trackback endpoint on published entries that accept comment...

EUVD-2026-88127

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows an unauthenticated remote attacker to store a crafted comment-author URL through the incoming Trackback endpoint when a published entry accepts comments and Trackbacks. The shipped...

CVE-2026-82546 Apache Roller: Stored cross-site scripting through incoming Trackback links

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows an unauthenticated remote attacker to store a crafted comment-author URL through the incoming Trackback endpoint when a published entry accepts comments and Trackbacks. The shipped...

WCAPF WooCommerce Ajax Product Filter - SQL Injection

WCAPF WooCommerce Ajax Product Filter = 4.2.3 contains a time-based SQL injection caused by insufficient escaping of the 'post-author' parameter, letting unauthenticated attackers extract sensitive database information remotely. id: CVE-2026-3396 info: name: WCAPF WooCommerce Ajax Product Filter ...

WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion

WordPress core versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 are vulnerable to a pre-authentication route confusion issue in the REST API batch endpoint /?restroute=/batch/v1. A malformed nested batch request desynchronizes the batch router, allowing unauthenticated requests to reach...