CVE-2018-20966

CVE-2018-20966: woocommerce-jetpack 3.8.0에서의 XSS 위에서 언급한 취약점을 위한 테스트베드입니다...

Android-Security-Masterclass

Android 보안 마스터클래스 🛡️📱 공식 OWASP 프로젝트 — Android 개발자 및 펜테스터를 위한 실습형 OWASP MASVS/MASTG 보안 교육 랩 — 미러 아키텍처: 취약 ↔ 안전 ↔ 공격자 📖 개요 Android 보안 마스터클래스 는 미러 아키텍처 로 설계된 공식 OWASP 프로젝트로, Android 개발자와 보안 연구원에게 취약점이 정확히 어떤 모습인지, 그리고 현대적인 Android 개발 관행을 사용하여 정확히 어떻게 수정하는지를 가르칩니다. 구식 Java 코드베이스에서 버그를 찾아 헤매는 대신, 이...

CVE-2026-22356

CVE-2026-22356: Jetpack CRM 경로 탐색 취약점 및 RCE 경고: 이 도구는 승인된 테스트 환경에서만 사용해야 합니다. 불법적인 사용에 대한 모든 책임은 사용자에게 있습니다. 📥 요구 사항 pip3 install requests urllib3 $ python3 exploit.py https://example.com --rce --cmd "id" + Target is VULNERABLE to LFI! Attempting Log Poisoning for RCE... Searching for accessible...

wordpress-jetpack-broken-access-control-vulnerable-application

wordpress-jetpack-broken-access-control-vulnerable-application 이것은 Jetpack "설정 " "쓰기 "로 이동하여 "작성 " 섹션에서 "Jetpack 블록은 개발자를 고용하거나 한 줄의 코드를 배울 필요 없이 웹사이트 방문자의 관심을 끄는 양질의 콘텐츠를 제공할 수 있는 힘을 제공합니다. "를 활성화합니다. 7. WordPress에서 "연락...

wordpress-jetpack-broken-access-control-exploit

wordpress-jetpack-broken-access-control-exploit 이 프로그램은 Jetpack 13.9.1의 끊어진 접근 제어 취약점CVE-2024-9926을 악용하는 Python3 프로그램입니다. 면책 조항 이 도구는 보안 엔지니어와 앱시큐리티 담당자가 보안 평가를 수행할 수 있도록 제작되었습니다. 이 도구를 책임감 있게 사용하시기 바랍니다. 누구든 이 애플리케이션을 사용하는 방식에 대해 저는 책임을 지지 않습니다. 이 도구를 사용하여 발생한 손해나 저지른 범죄에 대해서도 저는 책임을 지지 않습니다. 취약...

WordPress Jetpack plugin 14.5-16.1.2 - Reflected to Stored Cross-Site Scripting via Reader Repost Parameters

Reflected to Stored Cross-Site Scripting via Reader Repost Parameters vulnerability discovered by Jetpack in WordPress Plugin Jetpack versions 16.1-16.1.2...

Veto v2.3

Veto An open source VirusTotal client for Android Free and open source. Bring your own VirusTotal API key to scan files, links, and installed applications against over 70 engines, built with a Material 3 interface. No accounts, no tracking, no ads. What is Veto? Veto is an Android client for...

WordPress Jetpack plugin 3.2 - 16.1.2 - Missing Authorization on WPCOM Media API Attachment Parent vulnerability

WordPress Jetpack plugin 3.2 - 16.1.2 - Missing Authorization on WPCOM Media API Attachment Parent vulnerability discovered by Jetpack in WordPress Plugin Jetpack versions 16.1-16.1.2...

Exploit for CVE-2026-22356

CVE-2026-22356 CVE-2026-22356: Jetpack CRM Path Traversal Vuln...

CVE-2026-5191

The CVE-2026-5191 entry concerns the WordPress plugin “Tiled Gallery Carousel Without JetPack.” The vulnerability is a stored cross-site scripting flaw in the data-image-title parameter, present in all versions up to and including 3.1, caused by insufficient input sanitization and output escaping...

CVE-2026-5191 Tiled Gallery Carousel Without JetPack <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-title'

The Tiled Gallery Carousel Without JetPack plugin for WordPress is vulnerable to stored cross-site scripting via the 'data-image-title' parameter in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

CVE-2026-5191

The Tiled Gallery Carousel Without JetPack plugin for WordPress is vulnerable to stored cross-site scripting via the 'data-image-title' parameter in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

CVE-2026-5191: Improper Neutralization of Input During Web Page Generation

The Tiled Gallery Carousel Without JetPack plugin for WordPress is vulnerable to stored cross-site scripting via the 'data-image-title' parameter in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

WordPress Tiled Gallery Carousel Without JetPack plugin <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Tiled Gallery Carousel Without JetPack versions = 3.1...

EUVD-2022-55979

WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the postid parameter. Attackers can craft URLs to the grunion-form-view.php endpoint with script payloads in the postid parameter ...

CVE-2022-50958

WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the postid parameter. Attackers can craft URLs to the grunion-form-view.php endpoint with script payloads in the postid parameter ...

CVE-2022-50958 WordPress Plugin Jetpack 9.1 Cross Site Scripting via grunion-form-view.php

WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the postid parameter. Attackers can craft URLs to the grunion-form-view.php endpoint with script payloads in the postid parameter ...

CVE-2022-50958

WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the postid parameter. Attackers can craft URLs to the grunion-form-view.php endpoint with script payloads in the postid parameter ...

CVE-2022-50958 WordPress Plugin Jetpack 9.1 Cross Site Scripting via grunion-form-view.php

WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the postid parameter. Attackers can craft URLs to the grunion-form-view.php endpoint with script payloads in the postid parameter ...

CVE-2022-50958

WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting (XSS) vulnerability in grunion-form-view.php via the post_id parameter. Unauthenticated attackers can craft URLs with script payloads in post_id to execute arbitrary JavaScript in victims’ browsers. A public exploit exists per...