10896 matches found
cve-2026-39440-funnelforms-fix
ะัะฟัะฐะฒะปะตะฝะธะต CVE-2026-39440 ะดะปั FunnelForms ะะพัะพะฒัะน ะบ ัััะฐะฝะพะฒะบะต WordPress-ะฟะปะฐะณะธะฝ, ะบะพัะพััะน ะฑะปะพะบะธััะตั ััะทะฒะธะผัะน ะพะฑัะฐะฑะพััะธะบ ะธะผะฟะพััะฐ ะดะตะผะพ-ะดะฐะฝะฝัั ะฒ FunnelForms Pro โค 3.8.1 ะดะปั ััััะฐะฝะตะฝะธั ัะดะฐะปัะฝะฝะพะณะพ ะฒัะฟะพะปะฝะตะฝะธั ะบะพะดะฐ CVE-2026-39440, CVSS 9.9. ะฃัะทะฒะธะผะพััั ะะพะปะต| ะะฝะฐัะตะฝะธะต ---|--- ID CVE| CVE-2026-39440 ะัะตะฝะบะฐ...
jsPDF-Object-Injection
CVE-2026-25755 Sandbox Bypassed jsPDF Flaw to Object Injection Overview A critical PDF Object Injection vulnerability CVE-2026-25755 was discovered in jsPDF, a widely-used JavaScript library for generating PDF documents in client-side applications. The vulnerability exists in the addJS function,...
CVE-2024-36039_PoC
CVE-2024-36039: PyMySQL Object Injection to SQL Injection PoC A complete, reproducible Proof of Concept PoC laboratory for CVE-2024-36039 , demonstrating how an Object Injection vulnerability in PyMySQL versions = 1.1.0 can be escalated to a full SQL Injection using MariaDB's ODBC Escape Sequence...
laravel_cookie_killer
Laravel cookie killer A tool used to cypher/uncypher Laravel cookie based on python3 Prerequisites To use the tool you need to exfiltrate the APPKEY base64 value contained in the .env file contained at the root of the Laravel project. The session also has to be stored in the users cookie...
CVE-2026-2898-FunAdmin-Deserialization
CVE-2026-2898 - FunAdmin Insecure Deserialization Summary FunAdmin Disclaimer For educational and authorized testing only...
CVE-2026-97284
Contributor PHP Object Injection in Icegram = 3.1.31 versions...
CVE-2026-94390
Editor PHP Object Injection in Hide Shipping Method For WooCommerce = 1.5.4 versions...
CVE-2024-56059
CVE-2024-56059 Partners = 0.2.0 - Unauthenticated PHP Object Injection Description The Partners plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 0.2.0 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject...
CVE-2025-55182
๐จ NextRce โ CVE-2025-55182 Next.js / React Server Components RCE NextRce is a security research tool demonstrating CVE-2025-55182 , a critical vulnerability in Next.js App Router applications using React Server Components RSC and Server Actions. This vulnerability allows an attacker to achieve...
CVE-2026-97284 WordPress Icegram plugin <= 3.1.31 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Icegram = 3.1.31 versions...
CVE-2026-97284
The WordPress Icegram plugin (versions
EUVD-2026-90840
Contributor PHP Object Injection in Icegram = 3.1.31 versions...
CVE-2026-97284 WordPress Icegram plugin <= 3.1.31 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Icegram = 3.1.31 versions...
CVE-2026-94390 WordPress Hide Shipping Method For WooCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability
Editor PHP Object Injection in Hide Shipping Method For WooCommerce = 1.5.4 versions...
CVE-2026-94390 WordPress Hide Shipping Method For WooCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability
Editor PHP Object Injection in Hide Shipping Method For WooCommerce = 1.5.4 versions...
CVE-2026-94390
The Hide Shipping Method For WooCommerce plugin for WordPress versions
EUVD-2026-90854
Editor PHP Object Injection in Hide Shipping Method For WooCommerce = 1.5.4 versions...
CVE-2022-21661
๐ก๏ธ CVE-2022-21661 A Proof-of-Concept PoC exploit written in Python for CVE-2022-21661, which is a critical vulnerability in WordPress that allows an unauthenticated attacker to perform an object injection attack , which under certain conditions can lead to Remote Code Execution RCE. This...
CVE-2026-46275
CVE-2026-46725 โ TYPO3 ceselector Extension RCE PHP Object Injection viaunserialize Cookie Bypass โ Remote Code Execution ๐ Table of Contents About the Vulnerability Technical Details Requirements Installation Usage Examples Output Format How It Works References Legal Disclaimer ๐ About the...
WordPress Hide Shipping Method For WooCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Hide Shipping Method For WooCommerce versions = 1.5.4...