CVE-2024-4875

CVE-2024-4875 HT Mega – Absolute Addons For Elementor = 2.5.2 - Falta de Autorización para Actualización de Opciones Descripción: El plugin HT Mega – Absolute Addons For Elementor para WordPress es vulnerable a la modificación no autorizada de datos o pérdida de datos debido a la falta de...

CVE-2023-6700

CVE-2023-6700 Cookie Information | Free GDPR Consent Solution = 2.0.22 - Authenticated Subscriber+ Arbitrary Options Update Description: CVE-2023-6700 The Cookie Information | Free GDPR Consent Solution plugin for WordPress is vulnerable to arbitrary option updates due to a missing capability che...

CVE-2025-2294

CVE-2025-2294 kubio-cve-2025-2294active.yaml - the template implements a check that allows you to verify the presence of the vulnerability through exploitation. kubio-cve-2025-2294passive.yaml - the template implements a check based on the obtained software version. scanner.py - script that allow...

CHECK-CVE-2025-55182-AND-CVE-2025-66478

CHECK-CVE-2025-55182-AND-CVE-2025-66478 This script detects if a server is affected by RSC/Next.js RCE vulnerabilities CVE-2025-55182 and CVE-2025-66478. It checks the server response for specific vulnerability signatures. Those signatures should be specific according to Searchlight Cyber So the...

CVE-2024-24919_POC

CVE-2024-24919POC It's Proof of Concept on CVE-2024-24919-POC , i made it after it's discoverd CVE-2024-24919 Checkpoint security gateway information disclosure vulnerability . U can see it in Notion-CVE-2024-24919POC Shodan dork: title:"Check Point" "Server: Check Point SVN" "X-UA-Compatible:...

heartbleedchecker-chrome

This repository does not have a README...

CVE-2023-20198

CVE-2023-20198 Verificador para CVE-2023-20198 , No es un POC completo Solo verifica la implementación y detecta si el hex está en la respuesta o no...

CVE-2021-3156

Exploit CVE-2021-3156 Executing: root@kitploit: $ git clone https://github.com/RodricBr/CVE-2021-3156 $ cd CVE-2021-3156/ $ chmod u+x programa.sh $ ./programa.sh One-Liner: root@kitploit: AA=$sudo --version | tr ':space:' ','| tr -d '.' | cut -d ',' -f3 | awk 'print $0'; "$AA" -lt 1828 && echo -e...

CVE-2024-50476

CVE-2024-50476 GRÜN spendino Spendenformular = 1.0.1 - Actualización de opciones arbitrarias no autenticada Descripción: El plugin GRÜN spendino Spendenformular – Mehr Spenden! Weniger Arbeit! para WordPress es vulnerable a la modificación no autorizada de datos que puede conducir a una escalada ...

CVE-2022-21839-

CVE-2022-21839- The script actually has an option to check according to the IP address and informs if the weakness exists...

regreSSHion

regreSSHion Perfil de Chef Inspec para comprobar la vulnerabilidad regreSSHion CVE-2024-6387 Por favor, modifíquelo según sus propias necesidades. Se proporciona como ejemplo...

CVE-2024-10629

CVE-2024-10629 GPX Viewer = 2.2.8 - Authenticated Subscriber+ Arbitrary File Creation Description: The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxvfileupload function in all versions up to, and...

jsonorg-tp1

json.org CVE-2022-45688 true positive The project illustrates CVE-2022-45688 in json.org -- there is a simple application XML2JSONConverter to read XML from input, convert it to JSON and pretty-print it to the console. Using malicious input, the application crashes with a stackoverflow. The test...

CVE-2024-24919

Exploit for CVE-2024-24919 Description This Python script is an exploit for CVE-2024-24919, a CVE that hitted Check Point Products: CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Spark Appliances Versions: R77.20 EOL, R77.30 EOL, R80.10 EOL, R80....

Detecting-and-Analyzing-CVE-2024-24919-Exploitation

🔍 Investigando un Ataque de Día Cero Usando Let’s Defend SIEM 👉 Un Recorrido para Detectar y Analizar la Explotación de CVE-2024-24919 🎯 Propósito de la Investigación Este proyecto se llevó a cabo para investigar un posible intento de explotación contra un Check Point Security Gateway, aprovechan...

rtty_CVE-2025-56708-CVE-2025-56709

CVE-2025-56708&CVE-2025-56709 【CVE-2025-56709】Desbordamiento de búfer en savepath Resumen de la vulnerabilidad En la versión rtty totalsize = ctx-remainsize = bufferpullu32beinfo; ment = findmountpointsavepath; if ment uint64t avail; if !strcmpment-mnttype, "ramfs" struct sysinfo si; if sysinfo&s...

CVE-2024-9890

CVE-2024-9890 User Toolkit = 1.2.3 - Omisión de autenticación Suscriptor autenticado+ Descripción: El plugin User Toolkit para WordPress es vulnerable a la omisión de autenticación en versiones hasta la 1.2.3 incluida. Esto se debe a una comprobación de capacidades incorrecta en la función...

CVE-2024-10728

CVE-2024-10728 PostX var ultpoptionpanel =...

CVE-2024-50490

CVE-2024-50490 PegaPoll = 1.0.2 - Unauthenticated Arbitrary Options Update Description: The PegaPoll plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check in all versions up to, and including, 1.0.2. This...

jetty-line-check

jetty-line-check ¿Cuáles de estas cinco CVE de 2026 afectan a tu Jetty o al Jetty que arrastra Spring Boot — y la versión a la que la documentación oficial te dice que actualices, existe realmente en Maven Central? El foco principal es CVE-2026-2332 GHSA-355h-qmc2-wpwf, high / CVSS v3 7.4:...