CVE-2025-2304-POC

CVE-2025-2304 PoC - Escalada de Privilegios en Camaleon CMS Una prueba de concepto PoC para CVE-2025-2304 , una vulnerabilidad crítica de asignación masiva en Camaleon CMS que permite la escalada de privilegios de usuarios con pocos permisos a administradores. ██████╗ ██████╗ ██╗ ██╗███╗ ██╗...

Mass-Assigner

Mass Assigner Mass Assigner es una herramienta potente diseñada para identificar y explotar vulnerabilidades de asignación masiva en aplicaciones web. Lo logra recuperando primero datos de una solicitud especificada, como la obtención de datos del perfil de usuario. Luego, intenta sistemáticament...

CVE-2025-2304

CVE-2025-2304 - Camaleon CMS 2.9.0 - Privilege Escalation Exploit Overview This Python script exploits a critical mass assignment vulnerability in Camaleon CMS version 2.9.0, allowing any registered user to escalate their privileges to administrator. Vulnerability Details CVE : CVE-2025-2304 - Ma...

Hoppscotch <= 2026.4.1 - Mass Assignment JWT_SECRET Overwrite

Hoppscotch self-hosted backend = 2026.4.1 contains a broken authentication caused by mass assignment via unauthenticated POST /v1/onboarding/config endpoint, letting unauthenticated attackers overwrite JWTSECRET to forge tokens and fully compromise the server, exploit requires attacker to access...

CVE-2025-2304

Camaleon CMS 2.9.0 – Escalada de Privilegios Autenticada Cambio de Rol + Fuga Opcional de Configuración S3 Objetivo: Camaleon CMS v2.9.0 Tipo: Escalada de privilegios autenticada mediante asignación masiva en updatedajax campo role Extras: Extracción opcional de configuración S3 desde la página d...

Drupalgeddon2

CVE-2018-7600 | Drupal 7.58 / 8.3.9 / 8.4.6 / 8.5.1 - 'Drupalgeddon2' RCE SA-CORE-2018-002 Inspired from https://github.com/dreadlocked/Drupalgeddon2 Supports: Drupal 8.3.9 / 8.4.6 / 8.5.1 user/register URL, attacking account/mail & postrender parameter, using PHP's passthru function Pending Yet ...

CVE-2025-2304-POC

CVE-2025-2304 Escalada de privilegios en Camaleon CMS Ejemplo python3 exploit.py http://target.com attacker attacker Después de una explotación exitosa, cierre sesión e inicie sesión nuevamente para obtener privilegios de administrador. Referencias https://nvd.nist.gov/vuln/detail/CVE-2025-2304...

CVE-2026-102780

Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension unconditionally authorizes both creation and editing in its public RecordController. Its shared frontend save controller accepts the raw jform array, assigns...

CVE-2026-102780

The TF Content extension for Joomla (versions 2.9.0 - 2.9.4 ) by joomlafry.com is vulnerable to unauthenticated cross-record publication and mass assignment . The root cause is that the public RecordController unconditionally authorizes both creation and editing actions. Additionally, the shared ...

CVE-2026-102780 Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4

Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension unconditionally authorizes both creation and editing in its public RecordController. Its shared frontend save controller accepts the raw jform array, assigns...

EUVD-2026-92452

Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension unconditionally authorizes both creation and editing in its public RecordController. Its shared frontend save controller accepts the raw jform array, assigns...

CVE-2026-102780 Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4

Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension unconditionally authorizes both creation and editing in its public RecordController. Its shared frontend save controller accepts the raw jform array, assigns...

hdwebmobile-booking-appointments

HDWebmobile Booking & Appointments Sell bookable services and appointments through WooCommerce, with a per-slot capacity that can never be oversold. WordPress.org: https://wordpress.org/plugins/hdwebmobile-booking-appointments/ Requires: WordPress 6.9+, WooCommerce, PHP 7.4+ License: GPLv2 or lat...

CVE-2025-2304

Camaleon CMS v2.9.1 - Asignación Masiva conduce a Escalada de Privilegios Herramienta de Explotación - PoC Descripción Este proyecto es una herramienta de prueba de concepto de explotación basada en Python que demuestra y analiza una vulnerabilidad de escalada de privilegios que afecta a v2.9.1 d...

CVE-2025-2304-CamaleonCMS-PoC

PoC: CVE-2025-2304 - Escalada de Privilegios en Camaleon CMS Resumen Técnico Este repositorio contiene una Prueba de Concepto PoC funcional para una vulnerabilidad de Asignación Masiva en Camaleon CMS versiones anteriores a la 2.8.1. La vulnerabilidad reside en el endpoint updatedajax del módulo ...

CVE-2025-2304

Camaleon CMS -p Arguments -t, --target Base target URL -u, --username Valid low-privileged username -p, --password User password Exploit Flow 1. Retrieve login page and extract CSRF token 2. Authenticate with provided credentials 3. Access profile edit page 4. Extract password update endpoint and...

CVE-2025-2304-PoC

CVE-2025-2304 Exploit Camaleon CMS Vulnerable to Privilege Escalation through a Mass Assignment Vulnerability Description A Privilege Escalation through a Mass Assignment exists in Camaleon CMS When a user wishes to change his password, the 'updatedajax' method of the UsersController is called. T...

CVE-2025-15602-PoC

CVE-2025-15602-PoC CVE-2025-15602-PoC is a proof of concept for the vulnerability CVE-2025-15602 in Snipe-IT. One script to list all users and one script to take over an superadmin account. Context A user as only the right to edit users, he can abuse it to list and to do an account takeover of th...

Exploit-for-CVE-2025-2304

Exploit-for-CVE-2025-2304 usage: exploit.py -h --url URL --username USERNAME --password PASSWORD Description Camaleon CMS is affected by a privilege escalation vulnerability due to unsafe mass assignment. The updatedajax method in UsersController uses the permit! function, allowing unfiltered...

CVE-2025-2304-POC

CVE-2025-2304-POC PoC for CVE-2025-2304 — Camaleon CMS 2.9.0 privilege escalation via mass assignment on the password change endpoint. Vulnerability The /admin/users/:id/updatedajax endpoint does not filter the role parameter before passing it to the model update, allowing any authenticated user ...