CVE-2024-6366

Per creare un modulo Metasploit per sfruttare la vulnerabilità RCE nel plugin WordPress User Profile Builder precedente alla versione 3.11.8, dobbiamo sfruttare la mancanza di autorizzazione appropriata nella funzionalità di caricamento dei file multimediali. Ecco come creare un tale modulo...

whatsapp-media-decrypt

WhatsApp Media Decrypt Una recente indagine forense di alto profilo ha riportato che “a causa della crittografia end-to-end utilizzata da WhatsApp, è praticamente impossibile decifrare il contenuto del file scaricato file .enc per determinare se contenesse codice malevolo oltre al video...

poastal

Poastal - lo strumento OSINT per Email Poastal è uno strumento OSINT per email che fornisce informazioni preziose su qualsiasi indirizzo email. Con Poastal, puoi facilmente inserire un indirizzo email e risponderà rapidamente a diverse domande, fornendoti informazioni cruciali. ✨ Caratteristiche...

CVE-2026-35031

CVE-2026-35031: Path Traversal nel caricamento dei sottotitoli di Jellyfin che porta a RCE -darkred?style=flat-square -orange?style=flat-square TL;DR Una vulnerabilità critica di path traversal in Jellyfin Media Server consente agli utenti autenticati con il permesso "Upload Subtitles" di caricar...

CVE-2023-4634

CVE-2023-4634 Exploit RCE per il Plugin Media-Library di Wordpress 3.10 CVE-2023-4634 Info Patrowl ha scoperto una vulnerabilità RCE non autenticata sul plugin Media-Library-Assistant per Wordpress in versione 3.10. L'exploit non è banale e richiede un piccolo setup spiegato di seguito. La scoper...

Chromium: CVE-2026-79182 Improper input validation in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79083 Improper enforcement of behavioral workflow in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-78963 Improper input validation in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-78900 Improper input validation in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79177 Incorrect authorization in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79139 Improper input validation in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79231 Buffer overflow in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79004 Out of bounds read in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

exploit_cve-2021-29447

exploitcve-2021-29447 केवल शैक्षिक उद्देश्यों के लिए। यह एक्सप्लॉइट wordpress 5.6.2 और php8 चलाने वाले सर्वर से कोई भी फ़ाइल प्राप्त करने के लिए एक वास्तव में सुविधाजनक उपकरण माना जाता है। देखें https://wpscan.com/vulnerability/cbbe6c17-b24e-4be4-8937-c78472a138b5 आपको बस wp-admin का बुनियादी...

EagleEye

root@kitploit: $$$$$$$$\ $$\ $$$$$$$$\ $$ | $$ | $$ | $$ | $$$$$$\ $$$$$$\ $$ | $$$$$$\ $$ | $$\ $$\ $$$$$$\ $$$$$\ $$\ $$ $$\ $$ |$$ $$\ $$$$$\ $$ | $$ |$$ $$\ $$ | $$$$$$$ |$$ / $$ |$$ |$$$$$$$$ | $$ | $$ | $$ |$$$$$$$$ | $$ | $$ $$ |$$ | $$ |$$ |$$ | $$ | $$ | $$ |$$ | $$$$$$$$\$$$$$$$...

CVE-2024-6366-PoC

CVE-2024-6366-PoC User Profile Builder = 3.11.7 - Caricamento media non autenticato Descrizione Il plugin WordPress User Profile Builder precedente alla versione 3.11.8 non dispone di una corretta autorizzazione, consentendo a utenti non autenticati di caricare file media tramite la funzionalità ...

CVE-2019-11933

CVE-2019-11933 Corruzione dell'heap nel selettore multimediale di WhatsApp che colpisce WhatsApp per Android precedente alla versione 2.19.291 Contesto Un file GIF è diviso in segmenti, contrassegnati da un byte specifico: Immagine 0x2C La sezione immagine descrive un singolo fotogramma nel file...

CVE-2026-82253

creationtimestamp| type| source ---|---|--- 2026-08-28 12:40:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dtb7vubmvysob 2026-08-28 13:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu5g6rpoyl22 2026-08-28 17:08:24+00:00| seen|...

wordpress-cve-2021-29447

WordPress CVE-2021-29447 Exploit Nutzt die XML-authentifizierte External Entity Injection XXE der WordPress Media Library aus, um Dateien zu exfiltrieren. Behoben in WordPress 5.7.1. Erfordert gültige WordPress-Anmeldedaten, um mit der Media Library zu interagieren. Verwendung root@kitploit:...

username-anarchy

Username Anarchy Versione: 0.6 20 Settembre 2024 Autore: urbanadventurer Andrew Horton Homepage: https://www.morningstarsecurity.com/research/username-anarchy Sorgente: https://github.com/urbanadventurer/username-anarchy/ Licenza: MIT Descrizione Strumenti per generare nomi utente durante i test ...