578 matches found
CVE-2026-48172
📚 Repositorio Educativo de Investigación en Seguridad Un repositorio para aprender, probar e investigar conceptos de ciberseguridad en entornos controlados. ⚡ Uso Simple Use este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Entornos de...
CVE-2024-44000
CVE-2024-44000 LiteSpeed - Toma de Cuenta No Autorizada El PoC ya está publicado. ¡Fue creado solo con fines educativos/de investigación! ¡Úselo bajo su propio riesgo!...
CVE-2023-40000
CVE-2023-40000 El plugin LiteSpeed Cache para WordPress que podría permitir a usuarios no autenticados escalar sus privilegios ¿Cómo funciona este método de detección? Esta plantilla examina la siguiente ruta: /wp-content/plugins/litespeed-cache/readme.txt Según la Stable Tag indicada, si la...
CVE-2024-28000
CVE-2024-28000 - PoC de Escalada de Privilegios en LiteSpeed Cache !WARNING Este repositorio está destinado únicamente a fines educativos y de investigación. Utilice el PoC proporcionado exclusivamente en sistemas de su propiedad o para los que tenga permiso explícito de probar. El acceso no...
CVE-2026-93903
LiteSpeed Web Server LSWS before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case."...
CVE-2026-93903
LiteSpeed Web Server (LSWS) versions prior to 6.3.7 build 1 are vulnerable to a flaw where the software mishandles internal redirect URL validation during specific "corner case" scenarios. This vulnerability could lead to significant impact as indicated by its CRITICAL severity rating (CVSS 4.0 s...
CVE-2026-93903
LiteSpeed Web Server LSWS before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case."...
EUVD-2026-89955
LiteSpeed Web Server LSWS before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case."...
CVE-2026-93903: Double Decoding of the Same Data
LiteSpeed Web Server LSWS before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case."...
PT-2026-103276
Name of the Vulnerable Software and Affected Versions LiteSpeed Web Server LSWS versions prior to 6.3.7 build 1 Description LiteSpeed Web Server LSWS mishandles internal redirect URL validation in a specific corner case. This issue involves double decoding of the same data, which can lead to...
WordPress LiteSpeed Cache plugin <= 7.9 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by mak3bread in WordPress Plugin LiteSpeed Cache versions = 7.9...
CVE-2026-76579
The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'esi' parameter in all versions up to, and including, 7.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...
CVE-2026-76579
LiteSpeed Cache for WordPress (all versions up to and including 7.9 ) contains a Reflected Cross-Site Scripting vulnerability in the ESI (esi) parameter due to insufficient input sanitization and output escaping. An unauthenticated attacker can inject arbitrary scripts by supplying a validly sign...
EUVD-2026-83568
The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'esi' parameter in all versions up to, and including, 7.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...
CVE-2026-76579 LiteSpeed Cache <= 7.9 - Reflected Cross-Site Scripting via ESI 'esi' Parameter
The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'esi' parameter in all versions up to, and including, 7.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...
CVE-2026-76579 LiteSpeed Cache <= 7.9 - Reflected Cross-Site Scripting via ESI 'esi' Parameter
The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'esi' parameter in all versions up to, and including, 7.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...
PT-2026-95803
Name of the Vulnerable Software and Affected Versions LiteSpeed Cache versions prior to 8.0 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting. This occurs when an attacker tricks a user into clicking a link...
CVE-2026-76579: Improper Neutralization of Input During Web Page Generation
The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'esi' parameter in all versions up to, and including, 7.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...
LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server
A critical vulnerability in LiteSpeed Web Server Enterprise could let a low-privilege website user gain root access on a shared-hosting server, cPanel warned in an advisory published on September 14. On such servers, many customers' sites run on a single machine, and an attacker with one of those...