WordPress Dwell theme <= 1.16.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Dwell versions = 1.16.0...

WordPress Edema theme <= 1.2.2.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Edema versions = 1.2.2.2...

WordPress Greeny theme <= 2.10.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Greeny versions = 2.10.0...

WordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Hogwords versions = 1.2.7...

WordPress Hygia theme <= 1.21.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Hygia versions = 1.21.0...

WordPress IPharm theme <= 1.2.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme IPharm versions = 1.2.4...

WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Let's Play versions = 1.1.15...

WordPress Partiso theme <= 1.1.13 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Partiso versions = 1.1.13...

WordPress Rosalinda theme <= 1.2.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Rosalinda versions = 1.2.4...

WordPress Smart Casa theme <= 1.0.12 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Smart Casa versions = 1.0.12...

WordPress Smash theme <= 1.12.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Smash versions = 1.12.0...

WordPress Tantra theme <= 2.9.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Tantra versions = 2.9.0...

WordPress Travesia theme <= 1.1.16 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Travesia versions = 1.1.16...

WordPress Veto theme <= 1.6.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Veto versions = 1.6.0...

CVE-2024-30167

PoC For Atlona OME Authenticated Command Injection Disclaimer : This proof of concept is provided solely for educational and research purposes only. Do not use this code on systems you do not own or have explicit permission to test. I am not responsible for any misuse. An authenticated command...

openclaw-defender

openclaw-defender Comprehensive security framework protecting OpenClaw agents from skill supply chain attacks discovered in Snyk's ToxicSkills research Feb 2026. Repository: https://github.com/nightfullstar/openclaw-defender — blocklist and allowlist updates are fetched from here by update-lists....

Rejetto-HFS-2.x-RCE-CVE-2024-23692

An unauth SSTI in the Rejetto HTTP File Server HFS. Original finder PoC: https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/ Tested against versions: 2.4.0 RC7, 2.3m Example usage: msf6 use exploit/windows/http/rejettohfsrcecve202423692 No payload configured, defaulting to...

CVE-2023-27350

PaperCut NG/MG RCE CVE-2023-27350 A streamlined Bash exploit for CVE-2023-27350. This script automates authentication bypass, environment preparation, and command injection via the PaperCut printer scripting engine. Visual Proof Basic rce: Triggering a reverse shell: Quick Start Clone the...

CVE-2025-29927

CVE-2025-29927 — Next.js Middleware Authentication Bypass Overview Imagine a bouncer in front of the club, but if you tell him "I'm already in," he lets you pass without checking. That's exactly what CVE-2025-29927 is. Middleware in Next.js runs before a request is processed, making it the ideal...

CVE-2026-5048

In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters...