180 matches found
WordPress Burst Statistics 3.4.0-3.4.1.1 - Authentication Bypass
Burst Statistics β Privacy-Friendly WordPress Analytics plugin 3.4.0 to 3.4.1.1 contains an authentication bypass caused by incorrect return-value handling in ismainwpauthenticated function, letting unauthenticated attackers impersonate administrators, exploit requires knowledge of an administrat...
CVE-2026-8181
CVE-2026-8181 exploit Burst Statistics WordPress Plugin β Authentication Bypass to Administrator Privilege Escalation Exploit for the CVE-2026-8181 discovered by Chloe Chamberland and PRISM. β οΈ Disclaimer This repository is provided for research and defensive security purposes only. The author...
CVE-2026-8181
CVE-2026-8181 β Burst Statistics Authentication Bypass to Admin Account Takeover π Vulnerability Information...
CVE-2026-8181
EN: Controlled PoC and brief technical notes for authorized security testing of the authentication bypass in Burst Statistics. TR:...
CVE-2026-8181-Lab
CVE-2026-8181 β Burst Statistics Authentication Bypass Lab Local-only Docker lab for CVE-2026-8181 , an authentication bypass in the WordPress plugin Burst Statistics β Privacy-Friendly WordPress Analytics. This lab compares a vulnerable plugin version against the patched version and uses a...
CVE-2026-8181-PoC
π¨ CVE-2026-8181 | Burst Statistics Authentication Bypass -brightgreen.svg?style=for-the-badge !CAUTION CRITICAL ALERT: This vulnerability allows an unauthenticated remote attacker to bypass authentication and gain full Administrator privileges on the target WordPress site by simply injecting a...
CVE-2026-8181
CVE-2026-8181 Proof of Concept Research β’ Validation β’ Security Testing "roses a red, violet are blue, i think i just shat my pant thinking about you. rizz" CVE Overview Field| Value ---|--- CVE ID| CVE-2026-8181 Type| Authentication Bypass Impact| Privilege Escalation / Full Site Takeover Attack...
CVE-2026-8181
CVE-2026-8181 - Burst Statistics Authentication Bypass CVSS 9.8 Critical β Authentication Bypass to Admin Account Takeover Description CVE-2026-8181 is an Authentication Bypass vulnerability in the Burst Statistics WordPress plugin version 3.4.0 to 3.4.1.1. This plugin is used by 200,000+ WordPre...
CVE-2026-23918
CVE-2026-23918 Apache modhttp2 Double-Free Detector https://github.com/user-attachments/assets/d6c30e58-548c-4b6d-9ba3-baa667238a58 root@kitploit: python3 h2ghost.py -h usage: h2ghost.py -h --host HOST --port PORT --tls --no-tls --iterations ITERATIONS --burst-n BURSTN --timeout TIMEOUT...
CVE-2026-8181
| Authentication Required π₯ CVE-2026-8181 - Burst Statistics Authentication Bypass Unauthenticated Privilege Escalation via MainWP Authentication Bypass π¨βπ» Author !0xTerrorhttps://assets.kitploit.com/production/public/readmes/50604/f036bd5517ab1ec023381e336e314b53384b618d5a934600f6128...
CVE-2026-8181
CVE-2026-8181 β Burst Statistics 3.4.0 β 3.4.1.1 β Authentication Bypass to Admin Account Takeover Vulnerability Summary The WordPress plugin Burst Statistics versions 3.4.0 to 3.4.1.1 is vulnerable to an unauthenticated authentication bypass vulnerability that leads to full administrator account...
conn-burst
Connection Burst Identification This package identifies "bursting connections" which are considered to be connections which transfer a large amount of data quickly. Once a bursty connection is identified it is no longer watched for being bursty. When a bursty connection is identified, the event...
CVE-2026-8181
CVE-2026-8181 - Burst Statistics Authentication Bypass Exploit Python 2.7 exploit for the Burst Statistics plugin vulnerability CVE-2026-8181 that allows unauthenticated attackers to bypass REST API authentication, retrieve application passwords, and create new administrator users on vulnerable...
CVE-2026-8181
CVE-2026-8181 Burst Statistics | Authentication Bypass to Admin Account Takeover Description : Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover The Burst Statistics β Privacy-Friendly WordPress Analytics Google Analytics Alternative plugin for WordPress is...
Astra Linux β Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: Converted the raw to noinc versions of regmap functions for FIFO operations. The SC16IS7XX IC supports a burst mode for accessing FIFOs, where the initial register address is sent first $00$, followed by all th...
Astra Linux β Vulnerability in unbound
The DNS protocol in RFC 1035 and its updates allows remote attackers to cause a denial of service resource consumption by arranging for DNS queries to be accumulated over seconds. As a result, responses are sent in a pulsing burst, which can be considered traffic amplification in some cases. This...
Exploit for CVE-2026-8181
CVE-2026-8181 β Burst Statistics Authentication Bypass to Admin...
SUSE CVE-2026-72149
In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra: Fix burst size calculation Currently, the Tegra GPC DMA hardware requires the transfer length to be a multiple of the max burst size configured for the channel. When a client requests a transfer where the length...
Astra Linux β Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: spi: imx: Reconfigure for PIO when DMA cannot be started When spiimxcandma selects DMA, the ECSPI is configured for DMA. spiimxsetupxfer sets CTRL.SMC and clears dynamicburst, and spiimxdmatransfer programs the dynamic-burst...
Astra Linux β Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra: Fix burst size calculation Currently, the Tegra GPC DMA hardware requires that the transfer length be a multiple of the maximum burst size configured for the channel. When a client requests a transfer whose leng...