UltraRealy_with_CVE-2019-1040

UltraRelay mis à jour par Lazaar Sami pour l'exploit CVE-2019-1040 UltraRelay est un outil pour l'empoisonnement LLMNR et le relais des identifiants NTLM. Il est basé sur Responder et impack. J'ai mis à jour la version originale https://github.com/5alt/ultrarelay pour l'exploit CVE-2019-1040...

CVE-2021-41773

CVE-2021-41773 Terrain de jeu Ceci est une petite recette Docker pour configurer un conteneur basé sur Debian bookworm avec une instance du serveur Apache HTTPd 2.4.49 vulnérable à CVE-2021-41773. Le CGI a été explicitement activé afin de pouvoir tester/vérifier le comportement de divulgation de...

Invoke-TheHash

Invoke-TheHash Invoke-TheHash contient des fonctions PowerShell pour effectuer des tâches WMI et SMB par pass-the-hash. Les connexions WMI et SMB sont accédées via le .NET TCPClient. L'authentification est effectuée en passant un hash NTLM dans le protocole d'authentification NTLMv2. Les privilèg...

CVE-2024-48705

Aperçu Lors de recherches récentes en sécurité sur le Wavlink AC1200 Modèle : WL-WN532A3, une vulnérabilité d'injection de commandes après authentification a été identifiée dans le point de terminaison "/cgi-bin/adm.cgi". Cette vulnérabilité pourrait permettre à des acteurs malveillants ayant...

EUVD-2026-91965

The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.3. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible fo...

CVE-2026-100157

The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to and including 2.4.3 . The root cause is the software's failure to properly validate a value before executing the do_shortcode function. Specifically, the xs_reviw_summery parameter is ...

CVE-2026-100157 WP Ultimate Review <= 2.4.3 - Unauthenticated Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter (Split-Shortcode / Late-Registered Shortcode)

The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.3. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible fo...

CVE-2026-103519

The WP Ultimate Review plugin for WordPress (all versions up to and including 2.4.3 ) is vulnerable to arbitrary shortcode execution . The root cause is a failure to properly validate input before passing it to the do_shortcode function. Authenticated attackers with subscriber-level access or hig...

CVE-2026-103519 WP Ultimate Review <= 2.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter

The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.3. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible fo...

EUVD-2026-91959

The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.3. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible fo...

EUVD-2026-91958

The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the extract function in all versions up to, and including, 1.2.21. This makes it possible for unauthenticated attackers to delete arbitrary files...

CVE-2026-87115

The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to unauthenticated arbitrary file deletion in all versions up to and including 1.2.21 . The root cause is insufficient file path validation within the extract function, specifically involving the old_vapcfN parameter...

CVE-2026-87115 VikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parameter

The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the extract function in all versions up to, and including, 1.2.21. This makes it possible for unauthenticated attackers to delete arbitrary files...

EUVD-2026-91955

The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.0.18 via the template scope function. This makes it possible for authenticated attackers, with contributor-level access and...

CVE-2026-75028

The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to Local File Inclusion (LFI) in all versions up to and including 3.0.18 . The vulnerability exists within the (template scope) function , specifically related to the 'food_menu_style' Ele...

CVE-2026-75028 WPCafe <= 3.0.18 - Authenticated (Contributor+) Local File Inclusion via 'food_menu_style' Elementor Widget Setting

The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.0.18 via the template scope function. This makes it possible for authenticated attackers, with contributor-level access and...

CVE-2021-40870

CVE-2021-40870 Téléchargement sans restriction de fichier de type dangereux dans Aviatrix permet à un utilisateur authentifié d'exécuter du code arbitraire https://attackerkb.com/assessments/970a9fa9-223d-4d07-bafa-a338147934f3...

CVE-2025-68613

🚀 n8n Authenticated RCE PoC Pocsuite3 CVE ID : CVE-2025-68613 Type : Exécution de code à distance authentifiée Framework : Pocsuite3 Il s'agit d'un script de vérification et d'exploitation de vulnérabilité basé sur le framework Pocsuite3 , conçu pour détecter la vulnérabilité d'exécution de code ...

PoC_CVE-2019-10149--rce

À propos Exécution de commandes à distance dans un shell à partir d'un service exim vulnérable. Les versions vulnérables vont de 4.87 à 4.91 inclus. Voir https://nvd.nist.gov/vuln/detail/cve-2019-10149. Le script suivant est basé sur le PoC de Qualys. Voir...

CVE-2026-0776

CVE-2026-0776 - Élément de chemin de recherche non contrôlé du client Discord Résumé Ce dépôt documente la CVE-2026-0776, un problème d'exécution locale de code affectant le client de bureau Discord sur Windows. La vulnérabilité est liée à un comportement non sécurisé de résolution de modules dan...