128 matches found
exploit_cve-2023-26326_using_cve-2024-2961
利用 Iconv（CVE-2024-2961）攻击 BuddyForms（CVE-2023-26326） 这项工作由我、Omar Elshopky 和 Nour El Dien Bassiouny 完成。 该仓库包含针对 WordPress BuddyForms 插件（CVE-2023-26326）的漏洞利用代码，最初由 Joshua Martinelle 在 安全公告 中报告。该漏洞利用利用了 Iconv，设置字符集实现 RCE：利用 glibc 攻击 PHP 引擎 博客中提出的技术，并由 @ambionics 在 cnext-exploits 仓库中实现。...
CVE-2024-2961
Buddyforms 2.7.7 CNEXT RCE 利用 CVE-2024-2961 和 CVE-2023–26326 实现远程代码执行（RCE） 用法 root@kitploit: git-clone https://github.com/suce0155/CVE-2024-2961buddyforms2.7.7 pip install -r requirements.txt python3 buddyforms2.7.7cnextexploit.py http://site/wp-admin/admin-ajax.php ip port 分析与技术细节 查看我的 博客文章 POC...
CVE-2026-81785
Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...
CVE-2026-81785
CVE-2026-81785 affects the WordPress BuddyForms plugin , versions 2.9.0 and earlier . The vulnerability is an unauthenticated Broken Access Control flaw, meaning an attacker can exploit it over the network without any credentials or user interaction. The CVSS v3.1 score is 6.5 (Medium) , with low...
EUVD-2026-75518
Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...
CVE-2026-81785 WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...
CVE-2018-21003
The buddyforms plugin before 2.2.8 for WordPress has SQL injection...
CVE-2025-62973
Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...
CVE-2025-62973
Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...
CVE-2025-62973
Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...
CVE-2025-62973 WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...
EUVD-2025-35972
Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...
CVE-2025-62973 WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...
CVE-2025-62973
CVE-2025-62973 is a Missing Authorization / Broken Access Control vulnerability in Themekraft BuddyForms WordPress plugin, affecting BuddyForms versions from the earliest through 2.9.0. The issue allows Accessing Functionality Not Properly Constrained by ACLs. Public records (NVD, Red Hat, CIRCL,...
PT-2025-43845
Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...
WordPress plugin BuddyForms 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin BuddyForms versions = 2.9.0...
EUVD-2018-13527
Malware in sbrugna...