CVE-2025-7384

CVE-2025-7384 — PHP-Objektinjektion zu RCE Plugin: Database for Contact Form 7 contact-form-entries ≤ 1.4.3 CVSS: 9.8 Kritisch CWE: CWE-502 — Deserialisierung nicht vertrauenswürdiger Daten Authentifizierungsanforderung: Keine nicht authentifiziert Auswirkung: Remote Code Execution...

WordPress-HT-Contact-CVE-2025-7340-RCE

WordPress HT Contact Form Widget | CVE-2025-7340 Analyse der Datei-Upload-Schwachstelle Schwachstellenort Schwachstellenort: ht-contactform/admin/Includes/Services/FileManager.php Kritische Funktion: tempfileupload 1. Hauptschwachstelle: Funktion tempfileupload root@kitploit: 63行 public function...

CVE-2026-5718-Lab

CVE-2026-5718 Lab Docker Locale Laboratorio Docker locale solo vulnerabile vs patchato per CVE-2026-5718 , che colpisce il plugin WordPress Drag and Drop Multiple File Upload for Contact Form 7. Questo laboratorio mostra la differenza tra la versione vulnerabile 1.3.9.6 e la versione patchata...

mapsdumper

root@kitploit: ▒█▀▄▀█ ░█▀▀█ ▒█▀▀█ ▒█▀▀▀█ ▒█▀▀▄ ▒█░▒█ ▒█▀▄▀█ ▒█▀▀█ ▒█▀▀▀ ▒█▀▀█ ▒█▒█▒█ ▒█▄▄█ ▒█▄▄█ ░▀▀▀▄▄ ▒█░▒█ ▒█░▒█ ▒█▒█▒█ ▒█▄▄█ ▒█▀▀▀ ▒█▄▄▀ ▒█░░▒█ ▒█░▒█ ▒█░░░ ▒█▄▄▄█ ▒█▄▄▀ ░▀▄▄▀ ▒█░░▒█ ▒█░░░ ▒█▄▄▄ ▒█░▒█ by: @Tegal1337 MAPSDUMPER Demo • Installation • Feature • Credits A tool for dumping place...

CVE-2025-3515

CVE-2025-3515 CVE‑2025‑3515 — Caricamento multiplo di file tramite drag and drop per Contact Form 7 Descrizione: Caricamento arbitrario di file tramite drag‑and‑drop‑multiple‑file‑upload‑contact‑form‑7 ≤1.3.8.9 consente il caricamento di file .phar, portando all'esecuzione remota di codice in...

EUVD-2026-65175

Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads = 1.2.0 versions...

CVE-2026-78268

Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads = 1.2.0 versions...

redherd-framework

...

CVE-2026-72585-PoC

CVE-2026-72585 — Grafana: Correzione incompleta di CVE-2026-21724 consente al ruolo Editor di eliminare i contact point protetti Prodotto: Grafana Grafana Labs — fino alla 13.2.0 File: pkg/services/ngalert/provisioning/contactpoints.go CWE: CWE-284 — Controllo degli accessi improprio CVSS 3.1:...

CVE-2026-78268 WordPress Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads plugin <= 1.2.0 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads = 1.2.0 versions...

CVE-2024-54951

Monica-Gespeicherte-XSS-Schwachstelle CVE-2024-54951 CVE-2024-54951 Ich habe das Entwicklungsteam von Monica am 20.11.2024 per E-Mail kontaktiert. Ich habe sie auch über LinkedIn per Kontaktanfrage und in den folgenden Wochen über andere Plattformen kontaktiert. Veröffentlichung hier, da nach 3...

CVE-2025-7340

🚨 HT Contact Form Widget = 2.2.1 - Caricamento Arbitrato di File Non Autenticato CVE-2025-7340 CVE: CVE-2025-7340 CVSS: 9.8 Critico 📝 Descrizione Il plugin HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. per WordPress è vulnerabile a caricamenti arbitrari di...

OpenContacts

OpenContacts für Android Datenschutz für Ihre Kontakte. Übersetzung Möchten Sie diese App in Ihrer eigenen Sprache sehen? Tragen Sie Übersetzungen bei. Über Diese App speichert Kontakte in einer eigenen Datenbank, getrennt von den Android-Kontakten. So hat keine andere App Zugriff auf die Kontakt...

obfuscation_detection

Obfuscation Detection v2.4 Author: Tim Blazytko Automatically detect obfuscated code and other interesting code constructs Description: Obfuscation Detection is a Binary Ninja plugin to detect obfuscated code and interesting code constructs e.g., state machines in binaries. Given a binary, the...

lab-cve-2025-3515

CVE-2025-3515 WordPress Lab Drag and Drop Multiple File Upload for Contact Form 7 Avvia un ambiente WordPress vulnerabile per riprodurre e validare la CVE-2025-3515 — caricamento di file senza restrizioni tramite ddmuuploadfile nel plugin drag-and-drop-multiple-file-upload-contact-form-7 ≤ 1.3.8....

maat

About Maat is an open-source Dynamic Symbolic Execution and Binary Analysis framework. It provides various functionalities such as symbolic execution, taint analysis, constraint solving, binary loading, environment simulation, and leverages Ghidra's sleigh library for assembly lifting:...

-CVE-2015-10137-WordPress-N-Media-Website-Contact-Form-with-File-Upload-1.3.4

Análise da Vulnerabilidade de Upload de Arquivos do WordPress N-Media Website Contact Form com File Uploader 1. Análise do Código Vulnerável Arquivo do plugin: classes/plugin.class.php, método: uploadfile root@kitploit: function uploadfile // ... if ! empty $FILES $tempFile = $FILES 'Filedata'...

CVE-2025-66802

CVE-2025-66802 Sourcecodester Covid-19 Kontaktverfolgungssystem 1.0 – Uneingeschränkter Dateiupload führt zu Remote-Code-Ausführung Beschreibung Das Sourcecodester Covid-19 Kontaktverfolgungssystem Version 1.0 enthält eine Schwachstelle, die als 'Unrestricted Upload of File with Dangerous Type'...

CVE-2026-18781

The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not validate the final name of an uploaded file after stripping characters from it, allowing unauthenticated users to defeat its file type restrictions and execute arbitrary code on the server...

CVE-2026-14325

The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not escape one of its settings before using it as an HTML tag name in front-end output, allowing users with administrator access to inject arbitrary web scripts that execute on any front-end page...