CVE-2023-32243

CVE-2023-32243 Essential Addons for Elementor - अनधिकृत खाता अधिग्रहण। PoC अब प्रकाशित हो चुका है। यह केवल शैक्षिक/शोध उद्देश्यों के लिए बनाया गया था! इसे अपने जोखिम पर उपयोग करें!...

essential-addons-for-elementor-xss-poc

🔍 एलिमेंटर के लिए एसेंशियल ऐडन्स XSS भेद्यता डिटेक्टर 🚨 महत्वपूर्ण जानकारी यह उपकरण केवल सुरक्षा अनुसंधान और पैचिंग उद्देश्यों के लिए है। इसका उपयोग साइटों को नुकसान पहुंचाने के लिए न करें। यदि आपको भेद्य साइटें मिलती हैं, तो उन्हें जिम्मेदारी से साइट मालिकों को रिपोर्ट करें ताकि वे तुरंत अपडेट क...

cve-2026-7665

CVE-2026-7665 — الكشف غير المصرح به عن المعلومات في Essential Addons for Elementor...

Essential Blocks < 4.4.3 - Local File Inclusion

Wordpress Essential Blocks plugin prior to 4.4.3 was discovered to be vulnerable to a significant Local File Inclusion vulnerability that may be exploited by any attacker, regardless of whether they have an account on the site. id: CVE-2023-6623 info: name: Essential Blocks 4.4.3 - Local File...

WordPress Elementor Lite 5.7.1 - Arbitrary Password Reset

Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1. id: CVE-2023-32243 info: name: WordPress Elementor Lite 5.7.1 - Arbitrary Password Reset author:...

Essential Grid <= 3.1.0 - Cross-Site Scripting

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability in ThemePunch OHG Essential Grid plugin = 3.1.0 versions. id: CVE-2023-47684 info: name: Essential Grid = 3.1.0 - Cross-Site Scripting author: 0xpugal severity: medium description: | Unauthenticated Reflected Cross-Site Scripting XS...

WordPress Essential Real Estate <3.9.6 - Authenticated Cross-Site Scripting

WordPress Essential Real Estate plugin before 3.9.6 contains an authenticated cross-site scripting vulnerability. The plugin does not sanitize and escape some parameters, which can allow someone with a role as low as admin to inject arbitrary script in the browser of an unsuspecting user in the...

androguard

Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...

airgeddon

airgeddon This is a multi-use bash script for Linux systems to audit wireless networks. All the needed info about how to "install | use | enjoy" airgeddon is present at GitHub's Wiki. I. Content & Features Home Features Screenshots Wallpapers II. Requirements Requirements Compatibility Cards and...

CVE-2023-32243-Detection-and-Mitigation-in-WordPress

🔐 CVE-2023-32243 – वर्डप्रेस में पहचान और शमन 📘 परियोजना शीर्षक: Essential Addons for Elementor WordPress Plugin में CVE-2023-32243 की पहचान और शमन 🧠 सारांश यह परियोजना CVE-2023-32243 के शोषण और रोकथाम की पड़ताल करती है, जो वर्डप्रेस में "Essential Addons for Elementor" प्लगइन संस्करण 5.4.0 से...

Essential-Blocks-4.4.3---Unauthenticated-Local-File-Inclusion

Essential-Blocks-4.4.3---Unauthenticated-Local-File-Inclusion لا يمنع المكوّن الإضافي المهاجمين غير المصادَق عليهم من الكتابة فوق المتغيرات المحلية عند عرض القوالب عبر REST API، مما قد يؤدي إلى هجمات تضمين الملفات المحلية Local File Inclusion. الاستخدام: root@kitploit: usage: PoC.py -h -u URL -p...

EUVD-2026-70810

MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them with the attacker-claimed identity intact. Attackers can send crafted UDP datagrams to pShare input routes to inject messages into the local...

EUVD-2026-70809

MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with spoofed source an...

EUVD-2026-70804

MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray that allows remote attackers to corrupt heap memory by sending UDP datagrams with negative declared lengths. Attackers can send crafted UDP packets to the configured UDPListen port to...

CVE-2026-85431

MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with spoofed source an...

CVE-2026-85430

MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them with the attacker-claimed identity intact. Attackers can send crafted UDP datagrams to pShare input routes to inject messages into the local...

CVE-2026-85436 MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Length

MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray that allows remote attackers to corrupt heap memory by sending UDP datagrams with negative declared lengths. Attackers can send crafted UDP packets to the configured UDPListen port to...

CVE-2026-85436 MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Length

MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray that allows remote attackers to corrupt heap memory by sending UDP datagrams with negative declared lengths. Attackers can send crafted UDP packets to the configured UDPListen port to...

CVE-2026-85436

MOOS essential-moos through version 10.0.1 is affected by a buffer overflow in CMOOSUDPLink::ReadPktFromArray() within the pMOOSBridge component. The root cause is that negative declared lengths in received UDP datagrams trigger an oversized memcpy operation, writing past the destination buffer a...

CVE-2026-85431

MOOS essential-moos (through version 10.0.1 ) is vulnerable to an unauthenticated UDP packet injection in pMOOSBridge when configured with UDPListen. An attacker can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community, with spoofed source an...