CVE-2022-46169

CVE-2022-46169 Cacti Ejecución Remota de Código Ciega Pre-Autenticación Descargo de responsabilidad Esto es solo con fines educativos. No soy responsable de tus acciones. Úsalo bajo tu propio criterio. Explicación Este script realiza fuerza bruta en las variables necesarias para explotar esta...

CVE-2025-50363_BXSS_CVE

プロジェクト名 & リポジトリURL: Maid Hiring Management System using PHP and MySQL（PHPとMySQLを使用したメイド雇用管理システム） 脆弱性タイプ: ブラインドXSSによる権限昇格 影響を受けるバージョン:v1.0 💣脆弱性の説明: Maid Hiring Management System において、ブラインドXSSの脆弱性が発見されました。これにより、一般ユーザー（メイドや雇用者など）が権限を昇格させ、管理者アカウントを乗っ取る可能性があります。 👩‍💻影響:...

CVE-2024-13483

CVE-2024-13483 LTL Freight Quotes – SAIA Edition = 5.6 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause GTIDSUBSET Payload: action=enwdeditwarehouse&editid=1 AND GTIDSUBSETCONCAT0x7170787171,SELECT ELT3874=3874,1,0...

CVE-2023-23488-PoC

CVE-2023-23488-PoC 未认证SQL注入 - Paid Memberships Pro 2.9.8 WordPress插件 针对已安装Paid Membership Pro插件的WordPress实例运行此脚本，可告知目标是否存在漏洞。由于利用该漏洞所需的SQL注入技术是基于时间的盲注，因此脚本不会直接尝试利用漏洞，而是生成相应的sqlmap命令，用于转储整个数据库（可能非常耗时）或选择特定的数据，如用户名和密码。 使用示例： root@kitploit: python3 CVE-2023-23488.py http://127.0.0.1/wordpress 参考 致谢...

CVE-2025-11391

PPOM for WooCommerce prefix . PPOMTABLEMETA . " WHERE productmetaid = $metaid"; $res = $wpdb-getrow $qry ; return $res;...

CVE-2026-36670

CVE-2026-36670 针对 OpenSIPS 控制面板 的基于时间的盲 SQL 注入利用工具。 此漏洞利用程序利用了 OpenSIPS 中 aliasmanagement.php 模块的一个经过身份验证的 SQL 注入漏洞。table GET 参数未经过正确过滤，允许攻击者注入精心构造的派生表负载。 先决条件 Python 3.x requests 库（pip install requests） 后利用 该漏洞利用程序会转储管理用户的 ha1 哈希值。这些哈希值以 md5username:password 格式存储。你可以使用 hashcat 轻松破解它们：...

Blind-SSRF-CVE-2020-15002

概述 AddFileAction.getImageDataFromUrl 中用于在处理 /appsuite/api/oxodocumentfilter&action=addfile 时从外部URL获取图片的逻辑（实现在此）仅在遵循所有重定向后才验证重定向的URL。 root@kitploit: response = httpClient.executegetRequest, context; int statusCode = response.getStatusLine.getStatusCode; if statusCode == HttpStatus.SCOK List...

CVE-2026-4361

The Divi theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.27.6. This is due to the etpbsetvideooembedthumbnailresolution function using wpremoteget instead of wpsaferemoteget to fetch a remote image URL, which does not restrict requests to...

CVE-2026-4361 Divi <= 4.27.6 - Authenticated (Contributor+) Server-Side Request Forgery via 'image_src' Parameter

The Divi theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.27.6. This is due to the etpbsetvideooembedthumbnailresolution function using wpremoteget instead of wpsaferemoteget to fetch a remote image URL, which does not restrict requests to...

EUVD-2026-71887

The Divi theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.27.6. This is due to the etpbsetvideooembedthumbnailresolution function using wpremoteget instead of wpsaferemoteget to fetch a remote image URL, which does not restrict requests to...

CVE-2026-4361

The Divi theme for WordPress (versions ≤ 4.27.6) is vulnerable to Server-Side Request Forgery (SSRF) . The root cause is the et_pb_set_video_oembed_thumbnail_resolution() function using wp_remote_get() instead of wp_safe_remote_get(), which fails to restrict requests to private or reserved IP ran...

CVE-2026-4361 Divi <= 4.27.6 - Authenticated (Contributor+) Server-Side Request Forgery via 'image_src' Parameter

The Divi theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.27.6. This is due to the etpbsetvideooembedthumbnailresolution function using wpremoteget instead of wpsaferemoteget to fetch a remote image URL, which does not restrict requests to...

PT-2026-86329

The Divi theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.27.6. This is due to the et pb set video oembed thumbnail resolution function using wp remote get instead of wp safe remote get to fetch a remote image URL, which does not restrict...

CVE-2026-52771 YesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (`ApiController::deletePage`)

YesWiki is a wiki system written in PHP. From version 4.2.0 to before version 4.6.6, ApiController::deletePage interpolates a page tag retrieved from the database into a DELETE FROM …links WHERE totag = '$tag' query without escaping. The page tag is attacker-controlled — the POST /api/pages/tag A...

CVE-2026-52770

YesWiki , a PHP-based wiki system, is affected by an unauthenticated SQL injection in its public Bazar entry-listing APIs prior to version 4.6.6 . The root cause lies in SearchManager::buildQueriesConditions(), where attacker-controlled numeric query/queries filter values are escaped with mysqli_...

CVE-2026-53756

Emlog is an open source website building system. Prior to version 2.6.16, Emlog CMS Pro contains a blind SQL injection in UserModel::getUserDataByLogin. The $account parameter is directly interpolated into SQL queries without any filtering. The vulnerability is reachable through the auth cookie...

CVE-2026-53756 Emlog Blind SQL Injection via Authentication Cookie

Emlog is an open source website building system. Prior to version 2.6.16, Emlog CMS Pro contains a blind SQL injection in UserModel::getUserDataByLogin. The $account parameter is directly interpolated into SQL queries without any filtering. The vulnerability is reachable through the auth cookie...

CVE-2026-53756

Emlog CMS Pro, an open-source website building system, contains a blind SQL injection in the User_Model::getUserDataByLogin() method prior to version 2.6.16. The root cause is the $account parameter being directly interpolated into SQL queries without filtering. The vulnerability is reachable via...

CVE-2026-53756 Emlog Blind SQL Injection via Authentication Cookie

Emlog is an open source website building system. Prior to version 2.6.16, Emlog CMS Pro contains a blind SQL injection in UserModel::getUserDataByLogin. The $account parameter is directly interpolated into SQL queries without any filtering. The vulnerability is reachable through the auth cookie...

CVE-2026-18198

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TAC Information Services Internal and External Trade Inc. GOLDENHORN ONEIT allows Blind SQL Injection. This issue affects GOLDENHORN ONEIT: before Göbeklitepe...