67297 matches found
CVE-2021-21985
CVE202121985 Description This script check the CVE-2021-21985 vulnerability and patch on vCenter Server. Requirements Python3 Python3 Standard Library Installation root@kitploit: git clone https://github.com/mauricelambert/CVE202121985.git ./ Example To check IP 10.0.0.2, 10.0.0.3 and hostname...
CVE-2024-13800
CVE-2024-13800 Popup Plugin For WordPress - ConvertPlus = 3.5.30 - Missing Authorization to Authenticated Subscriber+ Limited Options Update Description The ConvertPlus plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing...
CVE-2024-52382
CVE-2024-52382 Matix Popup Builder = 1.0.0 - Actualización no autenticada de opciones arbitrarias Descripción El plugin Matix Popup Builder para WordPress es vulnerable a la modificación no autorizada de datos que puede provocar una escalada de privilegios debido a la falta de una verificación de...
CVE-2024-10124
CVE-2024-10124 Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce = 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation Description The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized...
CVE-2024-6387_Check
Este repositorio no tiene un README...
CVE-2023-45828
CVE-2023-45828 RumbleTalk Live Group Chat = 6.1.9 - Missing Authorization via handleRequest Description: The RumbleTalk Live Group Chat plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a missing capability check on the handleRequest...
CVE-2024-50475
CVE-2024-50475 Signup Page = 1.0 - Actualización no autenticada de opciones arbitrarias Descripción: El plugin Signup Page para WordPress es vulnerable a modificaciones no autorizadas de datos que pueden llevar a una escalada de privilegios debido a una falta de verificación de capacidades en tod...
CheckFlashPlayerVersion
CheckFlashPlayerVersion ブラウザの Flash Player バージョンを確認し、CVE-2016-7855 の脆弱性に対して脆弱かどうかをチェックします 使用方法: このリポジトリをクローンし、Flash Player のバージョンを確認したいブラウザで HTML ファイルを開いてください。...
CVE-2024-56071
🚨 Simple Dashboard = 2.0 - Unauthenticated Privilege Escalation 📄 Description The Simple Dashboard plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0. This makes it possible for unauthenticated attackers to elevate their privileges to that of an...
SpeculativeExecutionAssessment
SpeculativeExecutionAssessment 시스템이 다음에 설명된 "speculative execution" 취약점에 대해 평가합니다: CVE-2017-5715 branch target injection CVE-2017-5753 bounds check bypass CVE-2017-5754 rogue data cache load 경고: 빌드 옵션에서 "Prefer 32-bit"가 선택되어 있지 않은지 확인하십시오. 상승된 권한이 필요합니다 완화를 위해서는 다음이 필요합니다: 1. 바이러스 백신/보안 제품이 Windo...
EUVD-2026-76858
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate watch permissions in the playListAddVideo.json.php endpoint when adding videos to playlists. Authenticated attackers can add password-protected videos they cannot watch to playlists they own by submitting the...
MinimalReproducer
After significant efforts, stripped it down to a minimal replicator. This is just an empty project to demonstrate the issue with dependency-check-maven usage I am forced on doing by my company rules. Do check the pom.xml and do verify: mvn org.owasp:dependency-check-maven:RELEASE:aggregate Or if...
CVE-2026-11355
The DT LMS – elearning, WordPress LMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX handlers including dtlmssavepocsettings, dtlmssaveskinsettings, and dtlmssaveoptionssettings in versions up to, and including, 1.1. Thes...
EUVD-2026-76836
The DT LMS – elearning, WordPress LMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX handlers including dtlmssavepocsettings, dtlmssaveskinsettings, and dtlmssaveoptionssettings in versions up to, and including, 1.1. Thes...
CVE-2026-32475
CVE-2026-32475 PoC : Elementor Pro Unauthenticated Arbitrary File Upload to RCE Elementor Pro Pre-Authentication Arbitrary File Upload Leading to Remote Code Execution Proof-of-concept for CVE-2026-32475, a critical unauthenticated arbitrary file upload in Elementor Pro's Forms module that ends i...
CVE-2026-87918
The WPBot WordPress plugin before 8.5.7 does not perform any authorization or nonce check on several AJAX actions that relay prompts to its configured AI providers, allowing unauthenticated attackers to make those third-party API calls, and consume the associated cost, using the site's own...
CVE-2026-87916
The WPBot WordPress plugin before 8.6.0 does not perform any capability or nonce check on the AJAX action that lists stored chat sessions, allowing unauthenticated attackers to retrieve the name, email address and phone number of every chat visitor by requesting a wide date range...
CVE-2026-87797
The Sprout Invoices WordPress plugin before 20.8.16 does not perform a capability or ownership check before allowing a private note to be overwritten through one of its AJAX actions, allowing any authenticated user such as a subscriber to overwrite private notes on records belonging to other user...
CVE-2026-87759
The Add User Autocomplete WordPress plugin before 1.2 does not perform any capability or nonce check before creating a pending site-membership invitation carrying a caller-supplied role, allowing any authenticated user, such as a subscriber, to grant themselves the administrator role on a multisi...