CVE-2023-32784-EXPLOIT-REPORT

Демонстрация эксплойта CVE-2023-32784 Обзор проекта Этот репозиторий предоставляет демонстрацию CVE-2023-32784, критической уязвимости, обнаруженной в KeePass версиях до 2.54. Эксплойт позволяет восстановить мастер-пароль через дампы памяти, раскрывая сохраненные учетные данные. В этой документац...

CVE-2026-14844

The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcode attributes before outputting them in an inline script context, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute when the...

CVE-2020-11652

SaltStack-Exp CVE-2020-11651 CVE-2020-11652 Выполнение на Мастере: root@kitploit: python exp.py --exec-choose master --exec-cmd "whoami" Выполнение на Минионах: root@kitploit: python exp.py --exec-choose minions --exec-cmd "whoami" Получение оболочки: root@kitploit: python exp.py --shell-LHOST...

CVE-2026-14844

The Master Slider WordPress plugin (versions ≤ 3.11.2) fails to sanitise and escape certain shortcode attributes before outputting them in an inline script context, enabling Stored XSS by users with the Contributor role or above. The payload executes when the affected post is viewed. No patched v...

EUVD-2026-83660

The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcode attributes before outputting them in an inline script context, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute when the...

CVE-2026-14844 Master Slider <= 3.11.2 - Contributor+ Stored XSS via ms_slider Shortcode Attributes

The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcode attributes before outputting them in an inline script context, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute when the...

CVE-2023-32784-keepass-linux

KeePass 2.53/cmdline и сохранять pid тех, в аргументе командной строки которых есть ключевое слово KeePass. Затем он получит адреса отображений памяти в /proc//maps, которые не связаны напрямую с библиотекой, то есть имеют пустой путь к файлу. Затем он сохранит память всех этих отображений в буфе...

CVE-2023-30765

CVE-2023-30765 CVE-2023-30765 / ZDI-23-905 - Повышение привилегий в Delta Electronics Infrasuite Device Master Обнаружил: Piotr Bazydlo @chudypb Ссылки: https://www.zerodayinitiative.com/advisories/ZDI-23-905/ https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-01 Использование...

CVE-2026-88824

The Master Blocks WordPress plugin before 1.5.0 does not have authorisation on one of its REST routes, allowing unauthenticated users to update its settings, including a value that is output unescaped in the admin area, leading to Stored XSS that executes in the session of any administrator...

CVE-2026-88824

The Master Blocks WordPress plugin (versions 1.4.1 through 1.4.1.4 , i.e., before 1.5.0) is affected by a missing authorization check on one of its REST routes , allowing unauthenticated users to update plugin settings. A particular setting value is output unescaped in the admin area, enabling a ...

CVE-2026-88824 Master Blocks 1.4.1 - 1.4.1.4 - Unauthenticated Stored XSS via White Label Settings

The Master Blocks WordPress plugin before 1.5.0 does not have authorisation on one of its REST routes, allowing unauthenticated users to update its settings, including a value that is output unescaped in the admin area, leading to Stored XSS that executes in the session of any administrator...

EUVD-2026-83507

The Master Blocks WordPress plugin before 1.5.0 does not have authorisation on one of its REST routes, allowing unauthenticated users to update its settings, including a value that is output unescaped in the admin area, leading to Stored XSS that executes in the session of any administrator...

CVE-2026-88824 Master Blocks 1.4.1 - 1.4.1.4 - Unauthenticated Stored XSS via White Label Settings

The Master Blocks WordPress plugin before 1.5.0 does not have authorisation on one of its REST routes, allowing unauthenticated users to update its settings, including a value that is output unescaped in the admin area, leading to Stored XSS that executes in the session of any administrator...

amd-ryzen-master-driver-v17-exploit

Cobalt Strike Beacon Object File для эксплуатации ядра с помощью драйвера AMD Ryzen Master версия 17. Разработано Tijme. Благодарность Alex за обучение! Стало возможным благодаря Northwave Security Описание Это Cobalt Strike CS Beacon Object File BOF и исполняемый файл, которые эксплуатируют...

bw-dump

BW-Dump Обновление 2 : Этой уязвимости присвоен идентификатор CVE-2023-38840. Обновление : Патч был выпущен в виде запроса на включение изменений на GitHub 5813, который исправляет уязвимость. Затронутые версии: Bitwarden Desktop 2023.7.0 и ниже. Описание Инструмент концептуального доказательства...

KeePass-CVE-2023-32784-Exploitation-and-Defense

Уязвимость утечки памяти KeePass CVE-2023-32784: Архитектура эксплуатации и защиты Цель Проанализировать уязвимость CVE-2023-32784 в KeePass Password Safe v2.53, продемонстрировать извлечение мастер-пароля через дамп памяти и разработать надежные средства обнаружения и смягчения последствий...

CVE-2026-85410

The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.2.2. This is due to the plugin not properly verifying that a user is...

CVE-2026-85410

The Master Addons for Elementor WordPress plugin is vulnerable to an authorization bypass in versions up to and including 3.2.2 . The plugin fails to properly verify user permissions, and the jltma_popup custom post type is registered with capability_type='post', making its admin edit screen acce...

EUVD-2026-82793

The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.2.2. This is due to the plugin not properly verifying that a user is...

Linux Distros Unpatched Vulnerability : CVE-2026-93200

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i3c: master: Fix use-after-free of master-this sysfs attribute callbacks for the master controller device dereference master-this. However, master-this is freed...