WordPress ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF plugin <= 6.5.5 - Authenticated (Author+) PHP Object Injection vulnerability

Authenticated Author+ PHP Object Injection vulnerability discovered by Josh Bolding in WordPress Plugin ShortPixel Image Optimizer versions = 6.5.5...

CVE-2026-22004-Git-LFS-Pointer-Poisoning-Supply-Chain-

CVE-2026-22004 – Git LFS 指针投毒（供应链） 程序代码（Bash + Python） root@kitploit: createmaliciousrepo.sh - Sets up a repo with poisoned LFS pointer git init git lfs track ".bin" echo "version https://git-lfs.github.com/spec/v1 oid sha256:4142434445464748494a4b4c4d4e4f505152535455565758595a616263646566 size 4...

cve-2025-12735-expr-eval-rce

CVE-2025-12735 expr-eval RCE Exploit A security research tool for detecting and testing the CVE-2025-12735 vulnerability in the expr-eval and expr-eval-fork npm packages. ⚠️ Disclaimer This tool is for authorized security testing and educational purposes only. Unauthorized access to computer...

github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object

A flaw was found in Go JOSE, a library for handling JSON Web Encryption JWE objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the...

github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object

A flaw was found in Go JOSE, a library for handling JSON Web Encryption JWE objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the...

github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object

A flaw was found in Go JOSE, a library for handling JSON Web Encryption JWE objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the...

CVE-2026-46275

CVE-2026-46725 — TYPO3 ceselector Extension RCE PHP Object Injection viaunserialize Cookie Bypass → Remote Code Execution 📋 Table of Contents About the Vulnerability Technical Details Requirements Installation Usage Examples Output Format How It Works References Legal Disclaimer 🔍 About the...

CVE-2026-2898-FunAdmin-Deserialization

CVE-2026-2898 - FunAdmin Insecure Deserialization Summary FunAdmin Disclaimer For educational and authorized testing only...

same_type_object_reuse_exploits

PoC 同类型/同地址对象重用利用 由 Mathias Krause 开发的 PoC 漏洞利用，与 https://grsecurity.net/exploitinganddefendingagainstsametypeobjectreuse 上的博客文章相关。...

OpenMRS Platform < 2.24.0 - Insecure Object Deserialization

OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body. id: CVE-2018-19276 info: name: OpenMRS Platform 2.24.0 - Insecure Object...

cve-2026-39440-funnelforms-fix

CVE-2026-39440 FunnelForms 修复插件 一个即插即用的 WordPress 插件，用于阻止 FunnelForms Pro ≤ 3.8.1 中存在漏洞的 Demo Import 处理器，以缓解 远程代码执行（CVE-2026-39440，CVSS 9.9） 风险。 漏洞详情 字段| 值 ---|--- CVE ID| CVE-2026-39440 CVSS 评分| 9.9（严重） 受影响版本| FunnelForms Pro ≤ 3.8.1 所需权限| 低（订阅者级别） 漏洞类型| 代码注入 → 远程代码包含 → RCE 是否已修复？| 官方厂商暂未发布补丁 发现...

CVE-2026-35678

漏洞研究报告：All Eduplus 学生 ERP 不安全的直接对象引用（IDOR） 研究人员：Vinay Sharma 1. 执行摘要 本报告详细介绍了在 Eduplus 学生 ERP 平台中发现的一个高严重性安全漏洞，具体位于学生学习者门户（learnerapi.pceterp.in）中。该应用程序在考试表单提交端点上存在通用不安全的直接对象引用（IDOR）漏洞，允许任何已认证用户（学生）通过操纵表单标识符来检索任何其他学生的敏感个人和财务数据。 该漏洞允许大规模收集学生记录数据，包括个人身份信息（PII）和详细的财务交易审计跟踪。 2. 漏洞详情 目标主机：...

detect_CVE-2026-21509

Detecciones para la vulnerabilidad CVE-2026-21509 en MS Office Este repositorio contiene una regla YARA para detectar documentos RTF con una posible explotación de CVE-2026-21509, y un script de Python para comprobar si los archivos de MS Office contienen objetos OLE Shell.Explorer.1, que están...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 的预编译构建版本。 当然，你不应该信任预编译的构建版本 : 此版本的工作方式略有不同：首先创建一个最小的共享对象。该对象被打包到主二进制文件中，并在执行时释放。使用 Musl 进行编译以尽量减少依赖（例如特定的 libc 版本？） 致谢 Qualys 的原始公告：https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt Berdav（Davide Berardi）的 PoC：https://github.com/berdav/CVE-2021-4034...

CVE-2026-24134-PoC

CVE-2026-24134-PoC 概述 本仓库包含 CVE-2026-24134 的概念验证（PoC），这是 StudioCMS 中的一个对象级授权失效（BOLA）漏洞。 内容 cve202624134poc.py - Python 利用脚本 前置条件 StudioCMS=0.1.1 root@kitploit: pip install requests colorama 快速开始 手动利用 root@kitploit: 基本用法 python3 cve202624134poc.py \ -u http://localhost:4321 \ --username visitoruse...

CVE-2025-32463

CVE-2025-32463 - Sudo 权限提升 PoC /////// 免责声明 ///////////////////////////////////////////////////////////////////////////////////////////////////////////////// 本项目仅供教育目的使用。 使用本仓库的任何部分，即表示您确认不会利用其中包含的代码或技术来未经授权访问 您不拥有或未经明确许可进行测试的系统。 作者（nflatrea）对本概念验证或相关材料的任何滥用、损害或后果不承担任何责任或义务， 您同意自行承担使用本代码的风险。...

CVE-2026-61596 djust has broken object-level access control (IDOR)

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization getobject + hasobjectpermission, ADR-017 was enforced on the WebSocket mount and event paths but not on three other render entry...

CVE-2026-20120

A vulnerability in the access control list ACL Object Group Search OGS implementation of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access controls. This...

Cooper-ndss-2022

Cooper：利用协同变异测试脚本语言的绑定代码 Cooper 利用协同变异来测试脚本语言的绑定代码，以发现内存安全问题。协同变异同时修改脚本代码和相关的文档对象，以探索绑定代码的各种代码路径。为了支持协同变异，我们推断脚本代码与文档对象之间的关系，以指导二维变异。我们将工具 Cooper 应用于三款流行的商业软件：Adobe Acrobat、Foxit Reader 和 Microsoft Word。Cooper 检测到了 134 个此前未知的漏洞，这带来了 33 个 CVE 条目 和 22K 的漏洞赏金。Cooper 包含三个组件： 对象聚类 ：最初，Cooper...

CVE-2026-20121

A logic error in the Object Group Search (OGS) implementation of Cisco Secure Firewall ASA and FTD Software allows an unauthenticated, remote attacker to bypass configured access controls by sending traffic that should be blocked through the device. A successful exploit could let the attacker rea...