ViteVulScan

ViteVulScan Introduzione alle vulnerabilità Questo progetto riguarda 3 vulnerabilità: CVE-2025-30208/CVE-2025-31125/CVE-2025-31486, tutte relative alla vulnerabilità di lettura arbitraria dei file del server di sviluppo Vite. Queste tre vulnerabilità hanno una vasta copertura e sono semplici da...

HAFNIUM-Microsoft-Exchange-0day

Risorse interessanti CheckMyOWA Cos'è? Abbiamo creato questo sito per facilitare la notifica alle vittime basata su elenchi di server Exchange compromessi con Outlook Web Access OWA abilitato, ottenuti dai responsabili di questo evento di violazione di massa. Include IP/dominio interessati, nonch...

fubucker

Fubucker | CVE-2022-1386 - Fusion Builder Strumento automatico di massa per verificare la vulnerabilità in CVE-2022-1386 - Fusion Builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh Installa JQ Linux : comando apt-get install jq -y Windows ...

CVE-2026-77017 Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Read via Candidate Profile Mass Assignment

The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor confine the stored file location to an allowed directory before serving it, allowing users with a role as low as subscriber to read arbitrary files on the server, including its...

CVE-2026-77018 Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Upload via Candidate Profile Mass Assignment

The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor validate the type of the file it subsequently writes into a publicly reachable directory, allowing users with a role as low as subscriber to upload arbitrary files and achieve remote code...

CVE-2026-77018

The Workeera WordPress plugin (Remote Tech Job Board) before 1.0.6 allows users with a subscriber role to submit unrestricted profile values, which the plugin writes as an unvalidated file into a publicly reachable directory. This mass-assignment flaw enables arbitrary file upload and, consequent...

CVE-2026-77017

CVE-2026-77017 affects the Workeera Remote Tech Job Board WordPress plugin in versions prior to 1.0.6 . The root cause is a mass assignment flaw in the candidate profile feature: the plugin does not restrict which profile values a candidate may submit, nor does it confine the stored file location...

CVE-2026-77016

The Workeera WordPress plugin (Remote Tech Job Board) prior to version 1.0.6 is vulnerable to arbitrary file deletion via mass assignment on the candidate profile. The plugin does not restrict which values a user can write to their own candidate profile, nor does it validate the stored file path ...

CVE-2026-77016 Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Deletion via Candidate Profile Mass Assignment

The Workeera WordPress plugin before 1.0.6 does not restrict which values may be written to a user's own candidate profile, and does not validate or contain the stored file path before deleting it, allowing users with a role as low as subscriber to delete arbitrary files on the server...

Log4j-CVE-2021-44228

Log4j-CVE-2021-44228 Controllo di massa della vulnerabilità Log4j CVE-2021-44228 Introduzione In realtà ho semplicemente verificato tramite l'applicazione vulnerabile da https://github.com/christophetd/log4shell-vulnerable-app perché sono pigro per trovare un target reale xD quindi puoi sviluppar...

UPGer

UPGer | CVE-2022-4060 - User Post Gallery Strumento di massa automatico per controllare la vulnerabilità in CVE-2022-4060 - Plugin WordPress: User Post Gallery install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh...

F5-Big-IP-CVE-2020-5902-mass-exploiter

F5-Big-IP-CVE-2020-5902-mass-exploiter F5 Big-IP CVE-2020-5902 Massen-Exploiter/Fuzzer. Verwendung: CVE-2020-5902-mass-exploiter.py -l list.txt -w workers...

CVE-2025-2304-POC

CVE-2025-2304-POC CVE-2025-2304 के लिए मैन्युअल PoC: Camaleon CMS संस्करण 2.9.0 शोषण के चरण 1. एक निम्न-विशेषाधिकार वाले उपयोगकर्ता जैसे, "Bob" के रूप में लॉग इन करें। 2. प्रॉक्सी जैसे Burpsuite, caido और अन्य का उपयोग करके पासवर्ड परिवर्तन को इंटरसेप्ट करें। 3. पासवर्ड परिवर्तन के दौरान...

CVE-2026-11961

CVE-2026-11961 CVE-2026-11961 के लिए मास एक्सप्लॉइट टूल जो WordPress User Registration & Membership प्लगइन को प्रभावित करता है। विशेषताएँ प्लगइन संस्करण का पता लगाना एकल लक्ष्य single target समर्थन बैच लक्ष्य प्रोसेसिंग मल्टी-थ्रेड समर्थन रैंडम या कस्टम क्रेडेंशियल HTTP/HTTPS प्रॉक्सी समर्थन...

Hoppscotch <= 2026.4.1 - Mass Assignment JWT_SECRET Overwrite

Hoppscotch self-hosted backend = 2026.4.1 contains a broken authentication caused by mass assignment via unauthenticated POST /v1/onboarding/config endpoint, letting unauthenticated attackers overwrite JWTSECRET to forge tokens and fully compromise the server, exploit requires attacker to access...

Magento Server Mass Importer - Cross-Site Scripting

Magento Server Mass Importer plugin contains multiple cross-site scripting vulnerabilities which allow remote attackers to inject arbitrary web script or HTML via the 1 profile parameter to web/magmi.php or 2 QUERYSTRING to web/magmiimportrun.php. id: CVE-2015-2068 info: name: Magento Server Mass...

Mass-CVE-2023-3460

大规模CVE-2023-3460 大规模CVE-2023-3460。 用法 mass-CVE-2023-3460.py list.txt 致谢 https://github.com/gbrsh/CVE-2023-3460...

CVE-2019-0708

CVE-2019-0708 Rilevamento batch 0x01 Prefazione Vulnerabilità di esecuzione di comandi a distanza CVE-2019-0708 Windows RDP I server Windows il 15 maggio 2019 sono stati colpiti da una vulnerabilità critica. Questa vulnerabilità ha un ampio impatto e colpisce sistemi come Windows 2003, Windows...

tsusen

Tsusen 津波センサー ist ein eigenständiger Netzwerksensor, der zur täglichen Erfassung von Informationen aus dem regulären Datenverkehr von außen z. B. Internet entwickelt wurde z. B. Massen-Scans, Service-Scanner usw.. Auffälligkeiten sollten genau beobachtet werden, da sie eine gute Vorhersagebasis f...

CVE-2025-2304-exploit

CVE-2025-2304 - Escalação de Privilégios por Mass Assignment no Camaleon CMS 📌 Descrição do Projeto CVE-2025-2304 é uma vulnerabilidade de Mass Assignment no Camaleon CMS versões 2.9.1 que permite a um usuário autenticado elevar seus privilégios para administrador manipulando o parâmetro role em...