WordPress Fusion Builder <3.6.2 - Server-Side Request Forgery

WordPress Fusion Builder plugin before 3.6.2 is susceptible to server-side request forgery. The plugin does not validate a parameter in its forms, which can be used to initiate arbitrary HTTP requests. The data returned is then reflected back in the application's response. An attacker can...

Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure

The Formidable Form Builder plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.05.03 via the frmformspreview AJAX action. This makes it possible for unauthenticated attackers to export all of the form entries for a given form. id: CVE-2017-20194 info...

Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion

The Avada Fusion Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maybedeletefiles function. An unauthenticated attacker can delete arbitrary files on the server by manipulating the filepath parameter in the...

Divi Form Builder <=5.1.8 - Unauthenticated Arbitrary File Upload RCE

The Divi Form Builder plugin for WordPress versions 5.1.8 and prior contains an unauthenticated arbitrary file upload vulnerability in the doimageupload AJAX handler. The user-controlled acceptFileTypes POST parameter is injected unsanitized into a PHP regex for file extension validation. By...

Popup Builder < 4.0.7 - SQL Injection

The Popup Builder WordPress plugin before 4.0.7 does not validate and properly escape the orderby and order parameters before using them in a SQL statement in the admin dashboard, which could allow high privilege users to perform SQL injection. id: CVE-2022-0228 info: name: Popup Builder 4.0.7 -...

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

Schneider Electric U.motion Builder - Remote Code Execution

U.motion Builder 1.3.4 contains a remote code execution vulnerability caused by improper input sanitization, allowing attackers to execute arbitrary system commands through crafted input parameters. id: CVE-2018-7841 info: name: Schneider Electric U.motion Builder - Remote Code Execution author:...

Page Builder CK <= 3.5.10 - Unauthenticated Arbitrary File Upload

Joomla Page Builder CK contains an unrestricted file upload vulnerability caused by lack of proper validation, letting unauthenticated attackers upload executable files and achieve remote code execution. id: CVE-2026-56290 info: name: Page Builder CK = 3.5.10 - Unauthenticated Arbitrary File Uplo...

Cost Calculator Builder <= 3.2.15 - SQL Injection

The Cost Calculator Builder plugin for WordPress is vulnerable to SQL Injection via discount codes in versions up to, and including, 3.2.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

WordPress Visual Form Builder <3.0.8 - Information Disclosure

WordPress Visual Form Builder plugin before 3.0.8 contains a information disclosure vulnerability. The plugin does not perform access control on entry form export, allowing an unauthenticated user to export the form entries as CSV files using the vfb-export endpoint. id: CVE-2022-0140 info: name:...

Visual Composer <= 45.16.0 - Unauthenticated LFI

Visual Composer Website Builder for WordPress = 45.16.0 contains a local file inclusion vulnerability caused by improper validation of the vcv-template parameter, letting unauthenticated attackers include and execute arbitrary files, exploit requires no authentication. id: CVE-2026-12227 info:...

mkchain

mkchain Outil open source pour vous aider à construire une chaîne de certificats SSL valide. Description • Comment utiliser • Paramètres • Comment ça fonctionne • Prérequis • Autre • Licence Description Est un outil open source pour vous aider à construire une chaîne de certificats SSL valide. Il...

CVE-2026-5118

⚡ CVE-2026-5118 Divi Form Builder — Повышение привилегий без аутентификации "Security Research" • "Defensive Detection" • "Vulnerability Research" --- 🔥 Обзор CVE-2026-5118 — это уязвимость повышения привилегий без аутентификации, затрагивающая Divi Form Builder версий до 5.1.2 включительно...

fubucker

Fubucker | CVE-2022-1386 - Fusion Builder Автоматический массовый инструмент для проверки уязвимости CVE-2022-1386 - Fusion Builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh Установка JQ Linux : команда apt-get install jq -y Windows : Для...

ghidra-evm

Ghidra EVM Module In the last few years, attacks on deployed smart contracts in the Ethereum blockchain have ended up in a significant amount of stolen funds due to programming mistakes. Since smart contracts, once compiled and deployed, are complex to modify and update different practitioners ha...

CVE-2022-1386

CVE-2022-1386 - Fusion Builder 3.6.2 - Неаутентифицированный SSRF Описание Fusion Builder — это плагин WordPress, который позволяет пользователям создавать и редактировать страницы с помощью интерфейса перетаскивания. Он уязвим для неаутентифицированного SSRF, позволяющего злоумышленнику читать...

CVE-2023-38831-winrar

CVE-2023-38831 Builder Быстрый сборщик эксплойтов для CVE-2023-38831, уязвимости, затрагивающей версии WinRAR до 6.23. Я создал этот сборщик эксплойтов в основном для изучения языка Rust, так что не ждите чистого и оптимизированного кода. Информация об этой уязвимости...

pydictor

pydictor README.mdEnglish pydictor — Un puissant et utile générateur de dictionnaires pour les attaques par force brute | | | | ' | | | |/ | |/ | / | '| | | | || | | | | | || | | | ./ , |,|||\/|| || |/ Email : [email protected] Préface : Q : Pourquoi utiliser pydictor ? R : 1. Il peut...

EVCer

EVCer | CVE-2023-0159 - Extensive VC Addons для WPBakery page builder Автоматический массовый инструмент для проверки уязвимости CVE-2023-0159 - Extensive VC Addons для WPBakery page builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh Как...

CVE-2024-32462

CVE-2024-32462 CVE-2024-32462 - выполнение кода и побег из песочницы Как должна выглядеть директория для компиляции ├── org.exploit.SandboxEscape.yaml ├── exploit.py └── app/ └── exploit.desktop Как запустить и собрать 1.Установите Flatpak SDK если необходимо: flatpak install flathub...