Exploit for Missing Authentication for Critical Function in Smartertools Smartermail

SmarterMail ConnectToHub RCE A Python-based exploit for CVE...

HTB-Silentium-Writeup

HTB - Silentium 通关记录 机器信息 名称： Silentium 系统： Linux 难度： 简单 CVE： CVE-2025-58434, CVE-2025-59528, CVE-2025-8110 枚举 Nmap 扫描 root@kitploit: nmap -sC -sV -p- --min-rate 5000 -oN nmap.txt 开放端口：22 SSH, 80 HTTP 虚拟主机staging.silentium.htb 运行 Flowise 3.0.5 立足点 — Flowise RCE CVE-2025-58434 — 未授权密码重置令牌泄露 忘记密码端点...

Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control

Cybersecurity researchers have disclosed details of a new Android banking trojan called StreamRat that was promoted to Spanish-speaking users through a fake television-streaming campaign on Meta and can give operators near-complete control of infected devices. ThreatFabric said the campaign's...

CVE-2026-84798

Craft CMS versions = 5.0.0-RC1 and 5.10.11 fail to perform an independent authorization check in ElementsController::actionDeleteForSite. The method loads an element with checkForProvisionalDraft enabled and runs the deletion authorization check against the user's own provisional draft which only...

Security Bulletin: Multiple vulnerabilities affect IBM Sterling Connect:Direct for Microsoft Windows

Summary There are vulnerabilities in IBM Semeru Runtime version 17 used by IBM Sterling Connect:Direct for Microsoft Windows. IBM Sterling Connect:Direct for Microsoft Windows has addressed the applicable CVEs CVE-2026-41254, CVE-2026-47063, CVE-2026-60147, CVE-2026-46968, CVE-2026-47027,...

CVE-2026-35204

CVE-2026-35204 Este repositorio representa un PoC para CVE-2026-35204 Descripción "Helm es un gestor de paquetes para Charts de Kubernetes. Desde 4.0.0 a 4.1.3, un plugin de Helm especialmente diseñado, cuando se instala o actualiza, hará que Helm escriba el contenido del plugin en una ubicación...

CVE-2024-9821

CVE-2024-9821 Bot for Telegram on WooCommerce = 1.2.4 - Authenticated Subscriber+ Telegram Bot Token Disclosure to Authentication Bypass Description 用于WordPress的WooCommerce Telegram机器人插件在所有版本（包括1.2.4）中，由于缺少对'stmwpcftogetsettings'...

CVE-2024-50488

CVE-2024-50488 Token Login history.pushState'', '', '/'; document.forms0.submit;...

Gitlab-RCE

Análisis de la vulnerabilidad RCE en GitLab CVE-2021–22192 I Construcción Esta vulnerabilidad afecta a GitLab Community Edition CE y Enterprise Edition EE en las versiones =13.2, =13.8, =13.9, 13.9.4 Puedes seguir la guía de lyy289065406 para montar el entorno. II Análisis Al comenzar a analizar...

CVE-2017-1000486

CVE-2017-1000486 这是CVE-2017-1000486的一个PoC，附带一些有用的载荷，可绕过用于实现RCE的标准函数（如getClass、exec等）的黑名单字典检查，并通过Padding Oracle检索primefaces秘密，以便在利用时尽可能降低噪声。 感谢 @pimps 、 @federicodotta 和 @AonCyberLabs 在该主题上的相关工作。 描述 此PoC是一个多步骤脚本，用于分析每个应用程序和Web服务器库的上下文。 初始阶段，如果未手动提供primefaces秘密，则使用由@AonCyberLabs编写的padBuster...

CVE-2022-47131

CVE-2022-47131 Academy LMS history.pushState'', '', '/'...

CVE-2022-47130

CVE-2022-47130 Academy LMS history.pushState'', '', '/'...

CVE-2022-2546

All-in-One WP Migration 受影响版本 All-in-One WP Migration 7.63 参考资料 Sucuri WPScan Hacking Force 跨站脚本 XSS 分类 类型：跨站脚本 XSS OWASP TOP 10: A03:2021-Injection CWE: CWE-79 在网页生成期间对输入的错误中和 '跨站脚本' 研究人员/黑客 Geovanni Campos GeoZIN, Thiago Martins Kirito, Jorge Buzeti R3tr0, Leandro Inacio Saitama, Lucas de Souza...

CVE-2025-32641

🛡️ Anant Addons for Elementor Anant Addons for Elementor body background-color: 111; color: 0f0; font-family: monospace; padding: 40px; h1 color: ff0055; font-size: 24px; border-bottom: 1px solid 555; padding-bottom: 10px; .box background-color: 222; border: 1px solid 444; padding: 20px;...

CVE-2025-31033

⚠️ CVE-2025-31033 - WordPress Buddypress Humanity 插件中的 CSRF 漏洞 Exploit – CVE-2025-31033 ☠️ 一旦经过身份验证的管理员打开此页面，插件设置将被静默修改。 🔧 利用步骤 1. 将 PoC 的 HTML 文件托管在任意外部服务器上。 2. 诱骗已登录的 WordPress 管理员访问该页面。 3. 访问后，其浏览器将自动静默提交表单。 4. 插件的安全问题及答案将被更新。...

CVE-2025-23922

CVE-2025-23922 - WordPress iSpring Embedder 插件的 CSRF 导致任意文件上传 📌 CVE 详情 CVE ID: CVE-2025-23922 发布时间: 2025-01-16 受影响插件: WordPress iSpring Embedder 插件 受影响版本: CSRF 文件上传利用 body font-family: Arial, sans-serif; background-color: f4f4f4; padding: 20px; .container background: fff; padding: 25px;...

CVE-2025-25101

🚀 CVE-2025-25101 - WordPress Munk Sites 插件 CSRF Exploit - Plugin Installation body font-family: Arial, sans-serif; text-align: center; background: f4f4f4; padding: 20px; h1 color: d9534f; h2 color: 5bc0de; .output margin-top: 20px; padding: 10px; background: white; box-shadow: 0 0 10px rgba0, 0, ...

CVE-2022-24112

CVE-2022-24112 CVE-2022-24112：Apache APISIX apisix/batch-requests RCE nuclei template ：CVE-2022-24112.yaml 这个漏洞本质利用和 CVE-2021-45232 类似，都是绕过授权或未授权，来执行恶意的 route 里的 filterfunc 或者 script 来执行命令 注意是事项 X-Real-IP 的值可以是 127.0.0.1,localhost 或者 2130706433 pipeline 是必须项，以下为其 body 部分的值说明 method 固定为 PUT uri...

CVE-2026-84798 Craft CMS before 5.10.11 Authorization Bypass via actionDeleteForSite

Craft CMS versions = 5.0.0-RC1 and 5.10.11 fail to perform an independent authorization check in ElementsController::actionDeleteForSite. The method loads an element with checkForProvisionalDraft enabled and runs the deletion authorization check against the user's own provisional draft which only...

CVE-2026-84798 Craft CMS before 5.10.11 Authorization Bypass via actionDeleteForSite

Craft CMS versions = 5.0.0-RC1 and 5.10.11 fail to perform an independent authorization check in ElementsController::actionDeleteForSite. The method loads an element with checkForProvisionalDraft enabled and runs the deletion authorization check against the user's own provisional draft which only...