php-cgi-Injector

PHP-CGI Injector 🚀 CVE-2024-4577 & CVE-2024-8926 Outil d'exploitation Outil automatisé de test pour la vulnérabilité d'injection de paramètres PHP-CGI , prenant en charge les CVE-2024-4577 et CVE-2024-8926 , permettant des opérations telles que l'exécution de commandes, le téléchargement et le...

Chakra-CVE-2019-0567

Chakra-CVE-2019-0567 Ein POC eines Type-Confusion-Bugs im chakracore-Framework, der zur Codeausführung führt. Basierend auf Connor McGars Blog https://connormcgarr.github.io/ HINWEIS: Die Offsets und ROP-Gadgets hängen von der verwendeten Windows-Version ab, daher könnte es bei dir nicht...

CVE-2026-15985 Classified Listing - Mobile Number Verification <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Login

The Classified Listing - Mobile Number Verification plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.6.0. This is due to missing server-side Firebase OTP validation in the processotplogin function. This makes it possible for unauthenticated...

EUVD-2026-66410

The Classified Listing - Mobile Number Verification plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.6.0. This is due to missing server-side Firebase OTP validation in the processotplogin function. This makes it possible for unauthenticated...

CVE-2026-15985

The Classified Listing – Mobile Number Verification WordPress plugin is vulnerable to unauthenticated authentication bypass in all versions up to and including 1.6.0 . The root cause is missing server-side Firebase OTP validation in the process_otp_login() function, allowing an attacker to authen...

CVE-2024-3400-Compromise-Checker

Verificador de Comprometimento CVE-2024-3400 Um script bash muito simples para verificar evidências de comprometimento relacionadas à CVE-2024-3400 em firewalls Palo Alto. Projetado para fornecer uma triagem inicial rápida de dispositivos potencialmente impactados por meio da verificação da...

CVE-2022-42864

CVE-2022-42864: Diabolische Cookies Was ist dieses Repo? Dies ist mein unvollständiger Proof-of-Concept-Exploit für CVE-2022-42864, eine Time-of-Check-Time-of-Use-Schwachstelle in IOHIDFamily, die mit iOS 16.2 / macOS Ventura 13.1 behoben wurde. Wie ist der Status des Proof-of-Concept? Der Exploi...

Atlassian_CVE-2022-26134

Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 Am 30. Mai 2022 identifizierte eine Organisation namens Volexity eine nicht authentifizierte RCE-Schwachstelle Bewertung 9.8 bei NIST in Atlassians Confluence Server und Data Center Editionen...

CVE-2025-6934

🚨 Plugin OpalEstate per WordPress - Vulnerabilità di escalation dei privilegi non autenticata 🔎 Descrizione Il plugin OpalEstate per WordPress contiene una vulnerabilità critica nel suo gestore di registrazione AJAX, consentendo a utenti non autenticati di registrarsi come amministratori. Il...

copyfail-guard

copyfail-guard Werkzeug zur automatisierten Erkennung und Mitigation der Schwachstelle CVE-2026-31431 "Copy Fail", einer lokalen Rechteausweitung LPE im Modul algifaead Schnittstelle AFALG des Linux-Kernels. ⚠️ Zweck: Dieses Projekt ist rein defensiv. Es enthält, erzeugt und referenziert keinen...

CVE-2025-21333-POC

CVE-2025-21333-POC Proof-of-Concept, der CVE-2025-21333 in vkrnlintvsp.sys ausnutzt nicht sehr zuverlässig, siehe Abschnitt „Anforderungen und Einschränkungen“. Im Abschnitt „Referenzen“ finden sich hilfreiche Ressourcen für diejenigen, die mit dem Exploit spielen möchten. Eine detaillierte Analy...

CVE-2024-36401

CVE-2024-36401 Vulnerabilità di Remote Code Execution RCE nella valutazione delle espressioni dei nomi delle proprietà GeoServer è un server open source che consente agli utenti di condividere e modificare dati geospaziali. Nelle versioni precedenti alla 2.23.6, 2.24.4 e 2.25.2, diversi parametri...

CVE-2026-77532

A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device...

CVE-2026-18080

The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 1.17.8 via the saveattachments function. This is due to missing file extension validation and missing path normalization whe...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple path traversal vulnerabilities due to pip

Summary pip is used by IBM Integrated Analytics System as the standard Python package installer. Multiple vulnerabilities affect pip. CVE-2026-8643 involves improper sanitization of resolved absolute paths for consolescripts and guiscripts entry points, where pip treats them as paths instead of...

CVE-2026-3235 WP Data Access – No-Code App Builder with Tables, Forms, Charts & Maps <= 5.5.68 - Unauthenticated Insecure Direct Object Reference to Data Access

The WP Data Access plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.5.68 via the 'checkappaccess' function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to access data from...

CVE-2026-18080 ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment

The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 1.17.8 via the saveattachments function. This is due to missing file extension validation and missing path normalization whe...

CVE-2026-18080 ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment

The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 1.17.8 via the saveattachments function. This is due to missing file extension validation and missing path normalization whe...

CVE-2026-18080

The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce WordPress plugin (versions ≤ 1.17.8) is vulnerable to an unauthenticated arbitrary file upload via the CRM Email Connect IMAP attachment processing. The root cause is missing file extension validation and path normalization in the...

EUVD-2026-66408

The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 1.17.8 via the saveattachments function. This is due to missing file extension validation and missing path normalization whe...