EUVD-2026-94491

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events Calendar: from n/a through 6.17.4...

CVE-2026-95606 WordPress The Events Calendar plugin <= 6.17.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events Calendar: from n/a through 6.17.4...

CVE-2023-32692-CodeIgniter4

CVE-2023-32692 — CodeIgniter 4 मान्यता नियम इंजेक्शन CVE-2023-32692 CodeIgniter 4 PHP फ्रेमवर्क में एक कोड इंजेक्शन कमजोरी है, जो संस्करण 4.0.0 से 4.3.4 को प्रभावित करती है। इसे 4.3.5 में ठीक किया गया था जून 2023 में जारी। यह किसी भी व्यक्ति के लिए एक डेमो वातावरण है जो इसके साथ खेलना चाहता है।...

CVE-2018-1049-POC

نص بايثون هذا هو إعادة تنفيذ مخصصة لوحدة استغلال Metasploit لـ CVE-2018-1049، والتي تستهدف VyOS Vyatta عبر ثغرة تصعيد الامتيازات في سكربت Perl يُساء استخدامه من خلال sudo. تحتاج إلى بيانات اعتماد SSH صالحة. تحصل على صلاحية الجذر عبر حقن الأوامر في سكربت مسموح به عبر sudo. على الرغم من أنه يستهدف...

EUVD-2026-94490

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This issue affects WP Data Access: from n/a through 5.5.82...

CVE-2026-95605 WordPress WP Data Access plugin <= 5.5.82 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This issue affects WP Data Access: from n/a through 5.5.82...

CVE-2026-95605

The Passionate Programmer Peter WP Data Access WordPress plugin is vulnerable to Blind SQL Injection in versions up to and including 5.5.82 . The root cause is the Improper Neutralization of Special Elements used in an SQL Command (CWE-89). This vulnerability could allow an attacker to perform un...

CVE-2026-95605 WordPress WP Data Access plugin <= 5.5.82 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This issue affects WP Data Access: from n/a through 5.5.82...

EUVD-2026-94488

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Object Injection. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through 2.0.19...

CVE-2026-95534

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) WordPress plugin, affecting versions up to and including 2.0.19 , is vulnerable to a PHP Object Injection flaw. This issue stems from the deserialization of untrusted data , which could allow an attacker to execute arbitrary c...

CVE-2026-95534 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Object Injection. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through 2.0.19...

CVE-2026-95534 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Object Injection. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through 2.0.19...

CVE-2026-56096

CVE-2026-56096: Solr Query Injection & Blind Data Extraction in TYPO3 EXT:solr An architectural security vulnerability was discovered in the official TYPO3 Apache Solr extension EXT:solr / apache-solr-for-typo3/solr. The issue allows unauthenticated remote attackers to inject arbitrary Solr/Lucen...

Exploit for Interpretation Conflict in Wordpress

wp2shell-PoC ⚠ This tool is created solely for education...

CVE-2026-92542 Blind VXLAN injection into encrypted overlay networks from cluster peer

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

CVE-2026-92542

A vulnerability in Linux Swarm allows for blind VXLAN injection into encrypted overlay networks. The root cause is that firewall rules marking VXLAN datagrams for encryption indiscriminately match both authentic kernel-sent datagrams and forged datagrams from user processes. Specifically, any UDP...

CVE-2026-92542 Blind VXLAN injection into encrypted overlay networks from cluster peer

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

CVE-2026-92542 Blind VXLAN injection into encrypted overlay networks from cluster peer

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

DRUPAL-CONTRIB-2026-203

The Inline Formatter Field module allows site builders to template and style entities with a field. This module does not properly protect against template injection when parsing, allowing users to render protected data or execute unsafe Twig commands...

CVE-2024-3408-dtale

CVE-2024-3408 - D-Tale प्रमाणीकरण बाईपास और RCE CVE-2024-3408 के लिए पुनरुत्पादित प्रयोगशाला वातावरण, जो D-Tale में प्रमाणीकरण बाईपास और रिमोट कोड निष्पादन कमजोरी है। कमजोरी D-Tale संस्करण 3.15.1 तक निम्नलिखित कारणों से कमजोर हैं: 1. हार्डकोडेड SECRETKEY "Dtale" Flask सत्र हस्ताक्षर के लिए - सत्र...