CVE-2026-79698

creationtimestamp| type| source ---|---|--- 2026-09-07 08:30:37+00:00| seen| https://infosec.exchange/users/offseq/statuses/117228820009498846 2026-09-07 08:30:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3muw3rggoem24 2026-09-07 09:01:22+00:00| seen|...

Media Library Assistant < 3.09 - Remote Code Execution/Local File Inclusion

A vulnerability in the Wordpress Media-Library-Assistant plugins in version 3.09 is vulnerable to a local file inclusion which leading to RCE on default Imagegick installation/configuration. id: CVE-2023-4634 info: name: Media Library Assistant 3.09 - Remote Code Execution/Local File Inclusion...

PT-2026-88195

These are all security issues fixed in the jsoup-1.23.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11712-1 python313-jwcrypto-1.6.0-1.1 on GA media

These are all security issues fixed in the python313-jwcrypto-1.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11702-1 jsoup-1.23.2-1.1 on GA media

These are all security issues fixed in the jsoup-1.23.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11707-1 libopenslide-devel-4.0.1-1.1 on GA media

These are all security issues fixed in the libopenslide-devel-4.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-86225

creationtimestamp| type| source ---|---|--- 2026-09-06 22:51:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3muv3g4nqbn2b...

CVE-2021-29447

CVE-2021-29447 PoC Este repositorio contiene un exploit de Prueba de Concepto PoC para la vulnerabilidad CVE-2021-29447 que afecta a WordPress 5.6 y 5.7 usando PHP 8. El exploit demuestra cómo un atacante, con la capacidad de subir archivos, puede explotar una vulnerabilidad de análisis XML en la...

CVE-2021-29447

Vulnerabilidad XXE en WordPress: CVE-2021-29447 Un usuario con la capacidad de cargar un archivo WAVE malicioso como un Autor puede explotar un problema de análisis XML en la Biblioteca de Medios de WordPress, lo que lleva a ataques XXE y podría resultar en la divulgación del sistema de archivos...

CVE-2025-8889

Exploit Title: WordPress Compress Then Upload Plugin 1.0.3 Arbitrary File Upload to RCE Date: 2025-07-23 Exploit Author: Muhammed Çelik Vendor Homepage: https://wordpress.com/plugins/compress-then-upload Software Link: https://downloads.wordpress.org/plugin/compress-then-upload.latest-stable.zip...

CVE-2023-4634-PoC

CVE-2023-4634 - RCE Vulnerability in WordPress Plugin Media Library Assistant 1. Build and launch environment root@kitploit: cd Stand docker-compose up --build -d 2. Wait for services to start 60 seconds root@kitploit: sleep 60 curl -I http://localhost:8080 3. Run vulnerability scan...

-CVE-2015-10137-WordPress-N-Media-Website-Contact-Form-with-File-Upload-1.3.4

WordPress N-Media Website Contact Form with File Uploader Análisis de la vulnerabilidad de carga de archivos 1. Análisis del código de la vulnerabilidad Archivo del plugin: classes/plugin.class.php, método: uploadfile root@kitploit: function uploadfile // ... if ! empty $FILES $tempFile = $FILES...

CVE-2024-53255

CVE-2024-53255 boid CMS 2.1.1 - Cross-Site Scripting reflejado XSS Descripción: Existe una vulnerabilidad de XSS reflejado en el endpoint /admin?page=media en el parámetro file, que permite a un atacante inyectar código JavaScript arbitrario. Pasos para explotar: 1- Iniciar sesión en el CMS y...

cve-2015-1538-1

Se incluye un script de Python que genera un MP4 explotando la vulnerabilidad ‘stsc’, también conocida como CVE-2015-1538 1. Esta es una de las vulnerabilidades más críticas que reporté en la biblioteca Stagefright. El resultado esperado del exploit es una reverse shell como el usuario media. Com...

CVE-2026-86258

creationtimestamp| type| source ---|---|--- 2026-09-06 13:41:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/aslqkh7y6oslj 2026-09-06 16:01:40+00:00| seen| https://gist.github.com/ichintu/fe47c9308dfcae2743b09006cdd52579...

CVE-2025-15614

creationtimestamp| type| source ---|---|--- 2026-09-06 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mutvuhpqyb2e...

CVE-2026-16310

creationtimestamp| type| source ---|---|--- 2026-09-06 03:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3musyth5lyy2n 2026-09-06 04:07:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mut4m6cm3o2n 2026-09-06 05:00:33+00:00| seen|...

CVE-2026-19298

creationtimestamp| type| source ---|---|--- 2026-09-05 23:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3musliwz7mp2k 2026-09-09 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mv44w3p7pu2p...

CVE-2026-86178

Pixelfed through 0.12.9 fails to validate follower status in StoryComposeController react and comment endpoints, allowing authenticated users to access follower-only stories. Attackers can enumerate sequential story IDs and submit reactions or comments to retrieve story media URLs and author...

CVE-2026-86178 Pixelfed through 0.12.9 Unauthorized Story Access via API

Pixelfed through 0.12.9 fails to validate follower status in StoryComposeController react and comment endpoints, allowing authenticated users to access follower-only stories. Attackers can enumerate sequential story IDs and submit reactions or comments to retrieve story media URLs and author...