Lucene search
+L

23593 matches found

Kitploit
Kitploit
added 2026/09/01 4:33 a.m.5 views

CVE-2025-62950-PoC

説明 この概念実証(PoC)は、Contest Gallery – Upload, Vote & Sell with PayPal and Stripe v. 26.1.2 プラグインで発見されたクロスサイトリクエストフォージェリ(CSRF)脆弱性について説明しています。この問題により、攻撃者は認証済みユーザーを騙して、ユーザーの同意なしにギャラリー項目を意図せず削除する細工されたリクエストを実行させ、不正なコンテンツ損失を引き起こし、データ整合性に影響を与える可能性があります。 詳細 脆弱性タイプ : クロスサイトリクエストフォージェリ(CSRF) 影響を受けるプラグイン : 影響...

4.3CVSS5.8AI score0.00117EPSS
SaveExploits0
CVE
CVE
added 2026/09/01 4:27 a.m.19 views

CVE-2026-19952

The Frontend Admin by DynamiApps WordPress plugin (versions ≤ 3.29.12 ) is vulnerable to unauthenticated arbitrary file deletion caused by insufficient file path validation in the move_folders function, specifically via the custom_directory_name Merge Tag. Discovered by nudien , the flaw allows a...

7.5CVSS6.4AI score0.0078EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/09/01 4:27 a.m.5 views

EUVD-2026-68973

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the movefolders function in all versions up to, and including, 3.29.12. This makes it possible for unauthenticated attackers to delete arbitrary files on the...

7.5CVSS6.4AI score0.0078EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/09/01 4:27 a.m.32 views

CVE-2026-19952 Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the movefolders function in all versions up to, and including, 3.29.12. This makes it possible for unauthenticated attackers to delete arbitrary files on the...

7.5CVSS0.0078EPSS
SaveExploits0References8
NVD
NVD
added 2026/08/31 9:17 p.m.7 views

CVE-2026-75458

The teacher-end interface POST /api/teacher/user/delete/id in XueZhiSi Open Source Exam System = 3.9.0 contains a vertical privilege escalatio vulnerability. This interface accepts a user ID and then executes getUserByIdid, setDeletedtrue, updateByIdFilter in sequence, without any validation of...

8.1CVSS0.0015EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/31 9:17 p.m.8 views

CVE-2026-75594

Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler in src/Cms/Media.php allowed Kirby\Cms\Media::thumb to append a path-bearing filename to a validated parent media directory. On nginx, PHP's built-in server, or Apache...

8.2CVSS0.00513EPSS
SaveExploits0References7
NVD
NVD
added 2026/08/31 6:17 p.m.6 views

CVE-2026-79743

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 0.12.13, MCPB File Upload Handler extracts a ZIP file and reads manifest.json from it. The name field in the manifest i...

6.9CVSS0.00367EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/31 5:57 p.m.7 views

EUVD-2026-68691

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 0.12.13, MCPB File Upload Handler extracts a ZIP file and reads manifest.json from it. The name field in the manifest i...

6.9CVSS5.9AI score0.00367EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/31 5:21 p.m.4 views

gitlab-cve-2026-19478-lab

CVE-2026-19478 — GitLab GraphQL @glintroduced 未認証の任意メソッド呼び出し(検証ラボ + PoC) CVE-2026-19478 (GitLab CE/EE、CVSS 9.4、Critical)向けの再現可能なA/Bラボおよび安全なPoCです。 未認証の 攻撃者が、GraphQLで解決されたドメインオブジェクト上の任意の0引数Rubyメソッドを呼び出せます。 例:Projectdestroy を呼び出して、認証情報なしで公開プロジェクトを削除 することができます。 同じリリースで修正された関連脆弱性 CVE-2026-19650...

9.4CVSS7.5AI score0.06001EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/31 4:57 p.m.4 views

CVE-2022-38604

CVE-2022-38604 のエクスプロイト FilesystemEoPs は、このリポジトリのコピーで、x64 コンパイル済みプロジェクトが追加されています。 こちらで、任意ファイル削除の脆弱性 に関する私のレポートをご覧いただけます。 こちらで、任意ファイル削除 プリミティブを使用してローカル権限昇格 を達成する方法を理解できます。 こちらで、任意ファイル削除 プリミティブを使用してWindows サービス拒否 を達成する方法を理解できます。 こちらで私にユニコーンを買うことができます 🦄 知識を共有しましょう!...

7.3CVSS7.1AI score0.00566EPSS
SaveExploits2References6
Patchstack
Patchstack
added 2026/08/31 4:42 p.m.6 views

WordPress Frontend Admin by DynamiApps plugin <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag vulnerability

Unauthenticated Arbitrary File Deletion via Path Traversal via customdirectoryname Merge Tag vulnerability discovered by nudien in WordPress Plugin Frontend Admin by DynamiApps versions = 3.29.12...

7.5CVSS5.9AI score0.0078EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/08/31 2:17 p.m.6 views

CVE-2026-78075

Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate 2.2.10 - Blog::removeimage checked whether the user was authorized to edit the article ID passed in the request, but did not verify whether the specified image path src belonged to that...

5.1CVSS0.00229EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/31 1:59 p.m.31 views

CVE-2026-78075 Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate 2.2.10 - Blog::removeimage checked whether the user was authorized to edit the article ID passed in the request, but did not verify whether the specified image path src belonged to that...

5.1CVSS0.00229EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/31 1:59 p.m.7 views

CVE-2026-78075 Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate 2.2.10 - Blog::removeimage checked whether the user was authorized to edit the article ID passed in the request, but did not verify whether the specified image path src belonged to that...

5.1CVSS5.9AI score0.00229EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/31 1:59 p.m.9 views

CVE-2026-78075

Helix Ultimate is a Joomla extension by joomshaper.com. Versions prior to 2.2.10 contain a Broken Object-Level Authorization flaw in the Blog::remove_image() function. The function verified that the user was authorized to edit the article ID supplied in the request, but did not confirm that the s...

5.1CVSS5.9AI score0.00229EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/31 1:59 p.m.6 views

EUVD-2026-68529

Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate 2.2.10 - Blog::removeimage checked whether the user was authorized to edit the article ID passed in the request, but did not verify whether the specified image path src belonged to that...

5.1CVSS5.9AI score0.00229EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/31 1:50 p.m.6 views

EUVD-2026-68522

Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions - a missing authentication check allows unauthenticated actors to delete arbitrary installed extensions. Only the free versions of the miniOrange plugins are affected...

8.8CVSS5.9AI score0.0031EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/31 1:50 p.m.32 views

CVE-2026-78074 Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions

Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions - a missing authentication check allows unauthenticated actors to delete arbitrary installed extensions. Only the free versions of the miniOrange plugins are affected...

8.8CVSS0.0031EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 1:36 p.m.3 views

Gitlab-CVE-2026-19478

CVE-2026-19478 — GitLab GraphQL @glintroduced ディレクティブインジェクション GitLab CE/EE の GraphQL ディレクティブを介した未認証リモートコードインジェクション — 単一の HTTP リクエストで任意の公開プロジェクトを削除 CVE-2026-19478 を再現する実践型ペネトレーションテストラボです。これは GitLab の GraphQL API における重大な(CVSS 9.4)脆弱性です。@glintroduced ディレクティブにより、認証されていない攻撃者がサーバーサイドオブジェクト上で任意の Ruby...

9.4CVSS7.7AI score0.06001EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/31 1:01 p.m.5 views

CVE-2023-27470_Exercise

CVE-2023-27470 通过任意文件删除实现权限提升的练习 本仓库包含一个本地权限提升练习,模拟 CVE-2023-27470。你的任务,如果你选择接受的话,是找到漏洞并获取 SYSTEM 命令提示符!如果你想直接跳到解决方案,请查看 solution.txt。在 Deleting Your Way Into SYSTEM: Why Arbitrary File Deletion Vulnerabilities Matter 中了解更多关于任意文件删除漏洞及其风险的信息。 作者:Andrew Oliveau @AndrewOliveau 练习设置说明 1. 使用配置了 2...

7CVSS7.2AI score0.00532EPSS
SaveExploits2
Rows per page
Query Builder