CVE-2026-101148

The BackupSheep WordPress Backup Plugin (versions through 1.8 ) is vulnerable to unauthenticated access due to improper validation of its integration key . The plugin treats unset or blank keys as valid, enabling attackers to create and download full site backups —including databases with user pa...

CVE-2026-101148 BackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration via Empty Integration Key

The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its integration key, treating an unset or blank key as valid, which allows unauthenticated attackers to create and download full site backups, including the database with user password hashes, and to...

EUVD-2026-90507

The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its integration key, treating an unset or blank key as valid, which allows unauthenticated attackers to create and download full site backups, including the database with user password hashes, and to...

Johnson Controls EasyIO Neo Series EC and CW Controllers

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker tointercept and read sensitive information, including credentials andsession data. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

Meari IoT Cloud Platform OpenAPI Service

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow attackers to manipulate device configurations, trigger unauthorized behaviors, and access sensitive information such as device credentials, owner details, and network data without proper authorization. 2. RECOMMENDED...

CVE-2025-55182-GUI

CVE-2025-55182 Инструмент для обнаружения и эксплуатации уязвимостей GUI версия Описание проекта Данный проект представляет собой инструмент с графическим интерфейсом для обнаружения и эксплуатации критической уязвимости CVE-2025-55182 , разработанный на Python с использованием tkinter. Полностью...

CVE-2025-32432

🔐 CVE-2025-32432 — Craft CMS RCE pré-authentification Exécution de code à distance sans authentification dans Craft CMS Découvert et développé parMohammed Idrees Banyamer 📌 Aperçu CVE-2025-32432 est une vulnérabilité critique d'exécution de code à distance RCE sans authentification affectant...

CVE-2026-12241

The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to an improperly secure capability check on the 'savemetaboxes' function in all versions up to, and including, 2.51. This makes it possible for authenticat...

Magento-CVE-2019-7139-SQLi-PoC

CVE-2019-7139 PoC: SQL-инъекция в Magento Этот репозиторий содержит proof-of-concept PoC эксплойт для CVE-2019-7139 PRODSECBUG-2198 — уязвимости SQL-инъекции без аутентификации в Magento, обнаруженной Charles Fol из Ambionics Security. Детали уязвимости CVE ID : CVE-2019-7139 Затронутые версии :...

CVE-2026-82825 Missing proper authentication for critical APIs may allow sensitive information to be obtained or modified, or unauthorized operations to be performed

Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This allows an unauthenticated attacker to invoke a critical API, potentially leading to unauthorized retrieval or alteration of sensitive information, or unauthorized manipulation. Thi...

CVE-2026-82826 Authentication information or sensitive data may be intercepted in transit

Hitachi Coding Software Suite contains a vulnerability related to the Cleartext Transmission of Sensitive Information which allows an attacker to eavesdrop on with authentication credentials and sensitive data in transit. This issue affects Hitachi Coding Software Suite: through 3.3.0...

EUVD-2026-90493

Hitachi Coding Software Suite contains a vulnerability related to the Cleartext Transmission of Sensitive Information which allows an attacker to eavesdrop on with authentication credentials and sensitive data in transit. This issue affects Hitachi Coding Software Suite: through 3.3.0...

CVE-2025-32421

CVE-2025-32421 Лаборатория техники Eclipse Всесторонняя демонстрация техники Eclipse CVE-2025-32421 — изощрённая атака с состоянием гонки на Next.js 15.0.4, обходящая исправление оригинальной CVE-2024-46982. ПРЕДУПРЕЖДЕНИЕ — ТОЛЬКО В ОБРАЗОВАТЕЛЬНЫХ ЦЕЛЯХ Эта лаборатория предназначена исключитель...

EUVD-2026-90478

The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to an improperly secure capability check on the 'savemetaboxes' function in all versions up to, and including, 2.51. This makes it possible for authenticat...

CVE-2025-67261

CVE-2025-67261 - Слепая SQL-инъекция на основе содержимого в Abacre Retail Point of Sale 14.0.0.396 Abacre Retail Point of Sale 14.0.0.396 уязвим для слепой SQL-инъекции на основе содержимого. Уязвимость существует в функции поиска на странице заказов. Функция "Поиск" на странице "Заказы" уязвима...

django-cve-2025-64459

Django CVE-2025-64459 Cette application démontre la CVE-2025-64459 affectant plusieurs versions de Django. Cette vulnérabilité a été corrigée dans les versions plus récentes de Django. Injection SQL L'injection SQL se produit lorsque des données fournies par l'utilisateur sont traitées comme...

acropalypse-reconstructor

Acropalypse CLI 멀티 도구 가볍고 헤드리스headless 방식의 Python 스크립트로, Acropalypse 취약점CVE-2023-21036 - Google Pixel Markup, CVE-2023-28303 - Windows Snipping Tool에 취약한 크롭된 이미지를 탐지하고 복원하도록 설계되었습니다. 이 도구를 사용하면 명령줄 인터페이스CLI를 통해 취약한 PNG/GIF 파일에서 후행 픽셀 데이터를 직접 복구할 수 있어, 디스플레이 서버가 없는 환경WSL, SSH 세션, 헤드리스 Linux 서버 등에...

CVE-2021-41773-PoC

CVE-2021-41773-PoC 🚀 Режим использования ./exploit.sh 172.17.0.2 id uid=33www-data gid=33www-data groups=33www-data !CAUTION Этот скрипт предназначен ТОЛЬКО для образовательных целей и авторизованного пентестинга. Использование данного инструмента в системах без явного разрешения НЕЗАКОННО. Автор...

Chromium CVE-2026-87482: Cleartext transmission of sensitive data in HttpsUpgrades

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2025-2011

CVE-2025-2011 PoC Автор: X3RX3S, но гордо стырено Эшем Вескером, который прогнал мой код через GPT и вставил свой баннер ; смотри тут --- https://github.com/Ashwesker/Blackash-CVE-2025-2011 В «его» коде даже виден мой ник --' Назначение: PoC-инструмент для проверки уязвимости SQL-инъекции...