6986 matches found
PT-2026-89291
The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not require a validated transaction before deleting site options whose names come from unauthenticated request input, allowing any visitor to delete arbitrary options, which can lock every...
CVE-2026-24061
CVE-2026-24061: telnetd Authentication Bypass Vulnerability CVE-2026-24061 is an authentication bypass vulnerability in telnetd that allows attackers to bypass identity verification through specific combinations of environment variables and directly obtain a root-privileged shell. There is a flaw...
CVE-2025-32463
📌 CVE-2025-32463 — Sudo --chroot Local Privilege Escalation ExploitDB ID: 52352 🧠 Overview This repository documents a critical local privilege escalation LPE vulnerability affecting Sudo versions 1.9.14 – 1.9.17. The vulnerability arises from an incorrect implementation of the sudo -R --chroot...
CVE-2025-32463_sudo_chroot
CVE-2025-32463 - sudo chroot Uso El Dockerfile crea un entorno de prueba seguro y aislado con una versión vulnerable de sudo 1.9.16p2 instalada. Esto permite probar el exploit sin afectar su sistema anfitrión. root@kitploit: Build the vulnerable test environment docker build -t cve . Run the...
CVE-2026-87818
A flaw was found in GitPython. This vulnerability allows an attacker to read arbitrary files on the system by manipulating the --no-index option in the diff API. By combining this with other options, an attacker can repeatedly query local files to extract sensitive information, such as single-lin...
CVE-2026-87818
GitPython 3.1.59 fails to restrict the --no-index option in the high-level diff API, allowing attackers to read arbitrary filesystem paths as repository operands. Attackers can combine --no-index with -I/--ignore-matching-lines to create a content-dependent Boolean oracle, repeatedly querying loc...
EUVD-2026-74844
GitPython 3.1.59 fails to restrict the --no-index option in the high-level diff API, allowing attackers to read arbitrary filesystem paths as repository operands. Attackers can combine --no-index with -I/--ignore-matching-lines to create a content-dependent Boolean oracle, repeatedly querying loc...
CVE-2026-87818
GitPython 3.1.59 fails to restrict the --no-index option in the high-level diff API, allowing attackers to read arbitrary filesystem paths as repository operands. Attackers can combine --no-index with -I/--ignore-matching-lines to create a content-dependent Boolean oracle, repeatedly querying loc...
CVE-2026-82184
The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF checks when storing visitor consent state, and the code that does so runs on every front-end page load, allowing unauthenticated attackers to overwrite a site-wide option with arbitrary data...
CVE-2026-82184 WPLP Cookie Consent < 4.4.2 - Unauthenticated IAB TCF Consent Option Update
The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF checks when storing visitor consent state, and the code that does so runs on every front-end page load, allowing unauthenticated attackers to overwrite a site-wide option with arbitrary data...
WordPress WPLP Cookie Consent plugin < 4.4.2 - Unauthenticated IAB TCF Consent Option Update vulnerability
Unauthenticated IAB TCF Consent Option Update vulnerability discovered by Alex Spataru in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions 4.4.2...
EUVD-2026-74710
The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF checks when storing visitor consent state, and the code that does so runs on every front-end page load, allowing unauthenticated attackers to overwrite a site-wide option with arbitrary data...
CVE-2026-82184
The WPLP Cookie Consent WordPress plugin prior to 4.4.2 is missing both authorization and CSRF checks when storing the IAB TCF consent option . Because this code executes on every front-end page load, an unauthenticated attacker can overwrite this site-wide option with arbitrary data. The CVSS 3....
CVE-2026-17553
The WP EasyCart plugin for WordPress is vulnerable to privilege escalation in versions up to and including 5.9.3 . The ec_ajax_save_page_default_options() AJAX handler iterates over every $_POST key and passes it directly into update_option() without an allowlist. Access is gated on the manage_op...
CVE-2018-3760-poc
CVE-2018-3760-poc -h ver uso...
cve-2018-4407
Reproducción de CVE-2018-4407 Esta es una reproducción simple de CVE-2018-4407, que permite hacer fallar dispositivos macOS e iOS con sistemas operativos anteriores a finales de 2018. Para usar el programa, reemplaza sourceStr y destStr en sendbadopt.go con tu dirección IP y la dirección IP de la...
CVE-2025-32462-32463-Detection-Script-
CVE-2025-32462-32463-Detection-Script- Vulnerabilidades críticas de Sudo permiten a los usuarios locales obtener acceso root en Linux, afectando a las principales distribuciones A continuación se muestra una breve descripción de las vulnerabilidades: root@kitploit: CVE-2025-32462 puntuación CVSS:...
Security Advisory 0155
Security Advisory 0155 PDF Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-19655 CVSSv3.1 Base Score: 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSSv4.0 Base Score: 7.1...
CVE-2026-78635
The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments. When a scaleft:// protocol handler link contains a value beginning with a hyphen, the underlying CLI framework interprets it as a command-line flag,...