CVE-2024-28000

LiteSpeed Cache Privilege Escalation Exp CVE-2024-28000Scan.py Questo script prima identifica la versione, determina se è una versione vulnerabile, successivamente tenta di verificare se il file di log esiste; se esiste, tenterà di inviare un pacchetto e poi richiedere nuovamente il file di log p...

CVE-2024-28000

LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000 Questo repository contiene uno script Proof of Concept PoC per sfruttare una vulnerabilità di escalation dei privilegi nel plugin WordPress LiteSpeed Cache. La vulnerabilità, identificata come CVE-2024-28000 , consente a utenti non...

CVE-2024-28000

LiteSpeed Cache Privilegienerweiterung PoC - CVE-2024-28000 🎤 README-Übersetzung English فارسی 📸 Screenshot 💎 Einleitung Dieses Repository enthält einen Proof of Concept PoC für eine kritische Schwachstelle zur Privilegienerweiterung, die im LiteSpeed Cache WordPress-Plugin entdeckt wurde. Die al...

CVE-2024-28000

CVE-2024-28000 Exploit di CVE-2024-28000 per litespeed-cache =6.3 consente l'escalation dei privilegi con la creazione di un account amministratore Compilazione root@kitploit: git clone https://github.com/JohnDoeAnonITA/CVE-2024-28000 cd CVE-2024-28000 go build . Dichiarazione di non responsabili...

CVE-2024-28000

CVE-2024-28000 - LiteSpeed Cache Privilege Escalation PoC !WARNING This repository is intended for educational and research purposes only. Use the provided PoC exclusively on systems you own or have explicit permission to test. Unauthorized access , exploitation, or misuse of any material in this...

CVE-2024-44000-LiteSpeed-Cache

إثبات اختراق LiteSpeed Cache CVE-2024-44000 CVE-2024-44000 هي ثغرة في إضافة LiteSpeed Cache، وهي إضافة ووردبريس شائعة. تؤثر هذه الثغرة على إدارة الجلسات في LiteSpeed Cache، مما يسمح للمهاجمين بالوصول غير المصرح به إلى البيانات الحساسة. يعمل السكربت وفق الخطوات التالية: 1. استخراج ملفات تعريف...

cve-2023-40000

cve-2023-40000 Isso é um PoC do cve-2023-40000. Exploit do Wordpress LiteSpeed Cache. O CVE pode ser aplicado a todas as versões do LiteSpeed Cache --------------------+"; echo "+----------------------------------------------------------------------+";...

CVE-2024-44000-LiteSpeed-Cache

CVE-2024-44000-LiteSpeed-Cache CVE-2024-44000 è una vulnerabilità nel plugin LiteSpeed Cache, un popolare plugin WordPress. Questa vulnerabilità riguarda la gestione delle sessioni in LiteSpeed Cache, consentendo agli aggressori di ottenere accesso non autorizzato a dati sensibili. Anteprima Come...

CVE-2024-28000

CVE-2024-28000 पीओसी यह रिपॉजिटरी LiteSpeed Cache प्लगइन का उपयोग करने वाले WordPress साइटों को प्रभावित करने वाली CVE-2024-28000 भेद्यता के शोषण के लिए उपकरण शामिल करती है। शामिल स्क्रिप्ट एक्सपोज़्ड debug.log फ़ाइलों का पता लगाने और एक विशेषाधिकार वृद्धि भेद्यता के शोषण को स्वचालित करती हैं जो...

litespeed-cache-xss-poc

LiteSpeed Cache XSS PoC PoC per la vulnerabilità XSS nel plugin WordPress LiteSpeed Cache che consente l'elevazione dei privilegi. Questa vulnerabilità è stata corretta nella versione 5.7.0.1 del plugin e le è stato assegnato CVE-2023-40000. Secondo la pagina della vista avanzata del plugin, circ...

LiteSpeed Cache <= 5.7 - Unauthenticated Stored XSS

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache- from n/a through 5.7. id: CVE-2023-40000 info: name: LiteSpeed Cache = 5.7 - Unauthenticated Stored XSS...

LiteSpeed Cache <= 6.5.0.2 - Stored XSS

LiteSpeed Technologies LiteSpeed Cache versions up to 6.5.0.2 contain a stored cross-site scripting caused by improper input neutralization during web page generation, letting attackers execute malicious scripts in victim browsers, exploit requires storing malicious input. id: CVE-2024-47374 info...

WordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to Admin

Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from 1.9 through 6.3.0.1. id: CVE-2024-28000 info: name: WordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to Admin...

LiteSpeed Cache <= 6.4.1 - Sensitive Information Exposure

The LiteSpeed Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.4.1 through the debug.log file that is publicly exposed. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...

CVE-2024-28000-Exploit-Lab

CVE-2024-28000 — WordPress-LiteSpeed-Cache-Labor Autorisierte Reproduktion in der lokalen Laborumgebung von CVE-2024-28000 , einem unauthentifizierten Privilege-Escalation-Problem, das verwundbare Versionen des WordPress-Plugins LiteSpeed Cache betrifft. Geltungsbereich: Dieses Repository...

CVE-2023-40000

CVE-2023-40000 Plugin LiteSpeed Cache para WordPress que pode permitir que usuários não autenticados escalem seus privilégios Como esse método de detecção funciona? Este template verifica o seguinte caminho: /wp-content/plugins/litespeed-cache/readme.txt Com base na Stable Tag listada, se a versã...

MAL-2026-11193 Malicious code in litespeed-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3af61c30e0a85b26bb59e521eb02a26c0b7071446d99d03cdf6b07f790b1f8 This npm package a name resemblance to the WordPress LiteSpeed Cache plugin, which is not an npm module ships a preinstall script and a top-level...

Malicious code in litespeed-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3af61c30e0a85b26bb59e521eb02a26c0b7071446d99d03cdf6b07f790b1f8 This npm package a name resemblance to the WordPress LiteSpeed Cache plugin, which is not an npm module ships a preinstall script and a top-level...

CVE-2026-3375

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the /wp-json/litespeed/v1/notifyccss and /wp-json/litespeed/v1/notifyucss REST API endpoints in all versions up to, and including, 7.7. These endpoints accept CSS content from QUIC.cloud callback notificatio...

WordPress LiteSpeed Cache plugin <= 7.7 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os - krei.dev | ogbuilders.io in WordPress Plugin LiteSpeed Cache versions = 7.7...