CVE-2025-2249

🔐 WordPress SoJ SoundSlides प्लगइन ⚠️ अस्वीकरण: यह एक्सप्लॉइट केवल शैक्षिक और अधिकृत परीक्षण उद्देश्यों के लिए है। 📌 कमजोरी का सारांश प्लगइन: SoJ SoundSlides प्रभावित संस्करण: = 1.2.2 प्रकार: प्रमाणित योगदानकर्ता+ मनमाना फ़ाइल अपलोड पैच स्थिति: ❌ कोई आधिकारिक सुधार उपलब्ध नहीं SoJ SoundSlides...

CVE-2024-9698

CVE-2024-9698 Crafthemes Demo Import = 3.3 - Arbitrary File Upload Exploit 📌 Overview This exploit targets a critical vulnerability CVE-2024-9698 in the Crafthemes Demo Import plugin for WordPress. The vulnerability allows authenticated administrators to upload arbitrary files to the affected...

CVE-2024-7985-PoC

CVE-2024-7985-PoC FileOrganizer = 1.0.9 - Authenticated Subscriber+ Arbitrary File Upload FileOrganizer Exploit - CVE-2024-7985 📌 Overview CVE-2024-7985 - WordPress Plugin FileOrganizer = 1.0.9 is vulnerable to authenticated arbitrary file uploads , allowing attackers with Subscriber+ privileges...

CVE-2025-25101

🚀 CVE-2025-25101 - WordPress Munk Sites प्लगइन = 1.0.7 - CSRF से मनमानी प्लगइन स्थापना 📌 अवलोकन CVE-2025-25101 MetricThemes Munk Sites प्लगइन के लिए WordPress में एक क्रॉस-साइट रिक्वेस्ट फोर्जरी CSRF भेद्यता है संस्करण ≤ 1.0.7। यह भेद्यता एक अप्रमाणित हमलावर को एक व्यवस्थापक को मनमानी प्लगइन...

CVE-2025-1306

Newscrunch Exploit CVE-2025-1306 🚨 Overview This exploit targets a Cross-Site Request Forgery CSRF to Arbitrary File Upload vulnerability CVE-2025-1306 in the Newscrunch WordPress theme. Due to missing nonce validation in the newscrunchinstallandactivateplugin function, an unauthenticated attacke...

CVE-2024-52380-Exploit

CVE-2024-52380-Exploit إضافة Picsmize لووردبريس معرضة لثغرة رفع الملفات العشوائية. الوصف هذا السكربت يستغل ثغرة CVE-2024-52380 في إضافة Picsmize لووردبريس، مما يسمح للمهاجمين غير المصادق عليهم بتنفيذ رفع ملفات عشوائي. هذه الثغرة موجودة في جميع إصدارات Picsmize حتى 1.0.0 والإصدارات الأقدم. استغلال...

CVE-2024-54262

CVE-2024-54262 CVE-2024-54262 का शोषण: WooCommerce के लिए Import Export में मनमाना फ़ाइल अपलोड अवलोकन यह स्क्रिप्ट "Import Export for WooCommerce" WordPress प्लगइन में एक कमजोरी का शोषण करती है। यह कमजोरी अनधिकृत उपयोगकर्ताओं को मनमानी फ़ाइलें अपलोड करने की अनुमति देती है, जिससे संभावित रिमोट कोड...

CVE-2024-50492

🚨 CVE-2024-50492 - ScottCart 🔥 Exploit Script for ScottCart 🧑‍💻 By Nxploit – Khaled Alenazi 📌 Description The ScottCart plugin for WordPress versions ≤ 1.1 is vulnerable to Remote Code Execution RCE. This allows unauthenticated attackers to execute arbitrary PHP functions on the server through a...

CVE-2024-51788

💀 CVE-2024-51788 - WordPress The Novel Design Store Directory Plugin = 4.3.0 - Unauthenticated Arbitrary File Upload 🚨 Overview CVE-2024-51788 is a newly disclosed critical vulnerability affecting the The Novel Design Store Directory WordPress plugin = v4.3.0. This flaw allows unauthenticated...

CVE-2024-10674

CVE-2024-10674 Exploit - Th Shop Mania = 1.4.9 🚀 Overview This repository contains an exploit for the vulnerability identified as CVE-2024-10674 in the Th Shop Mania WordPress theme. The vulnerability allows authenticated users with at least Subscriber-level access to install and activate arbitra...

CVE-2024-10673

🔥 نظرة عامة يستغل هذا السكريبت CVE-2024-10673 ، وهي ثغرة أمنية حرجة موجودة في قالب ووردبريس Top Store = 1.5.4. تسمح هذه الثغرة للمستخدمين الموثّقين بصلاحية مستوى المشترك أو أعلى بتثبيت وتفعيل إضافات عشوائية عبر طلبات AJAX غير محمية. ⚠️ الخطورة والأثر تثبيت الإضافات غير المصرح به : يمكن للمهاجمين...

CVE-2024-1247-PoC

CVE-2024-1247-PoC Post Saint = 1.3.1 plugin for WordPress Arbitrary File Upload Description The Post Saint plugin for WordPress versions up to and including 1.3.1 is vulnerable to arbitrary file uploads due to missing capability checks and file type validation. Authenticated attackers with at lea...

CVE-2023-51409

CVE-2023-51409 AI Engine: ChatGPT Chatbot = 1.9.98 - Unauthenticated Arbitrary File Upload via restupload Description This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. usage:...

CVE-2024-10629

🛠️ GPX Viewer Exploit CVE-2024-10629 This repository contains a proof-of-concept exploit for the GPX Viewer plugin for WordPress, which is vulnerable to arbitrary file creation CVE-2024-10629. The vulnerability allows authenticated attackers with subscriber-level access and above to create...

CVE-2024-48990

CVE-2024-48990 introdution This vulnerability takes advantage of the way in which needrestart manages the environment variable, to be more precise, PYTHONPATH can be hijacked by modifying the PYTHONPATH variable to a directory that contains a malicious library, thus executing and gaining access, ...

CVE-2024-12252

SEO LAT Auto Post = 2.2.1 - Remote Code Execution Description The SEO LAT Auto Post plugin for WordPress is vulnerable to file overwrite due to a missing capability check on the remoteupdate AJAX action in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated...

CVE-2018-6574

Code n stuff...

log4jcheck

Northwave Log4j CVE-2021-44228 checker Friday 10 December 2021 a new Proof-of-Concept 1 addressing a Remote code Execution RCE vulnerability in the Java library 'log4j' 2 was published. This vulnerability has not been disclosed to the developers of the software upfront. The vulnerability is being...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...