PoC

Pedro Ribeiro（@pedrib）エクスプロイト置き場 このリポジトリには、私が公開してきた情報、エクスプロイト、スクリプトなどが含まれており、https://github.com/pedrib/PoC にあります。 advisories: 私が公開したすべてのアドバイザリ、調査ノートなど Pwn2Own: 私のPwn2Own参加に関連するアドバイザリ exploits: 私が公開したすべてのエクスプロイト metasploit: 私が作成し、Metasploit framework に統合されたMetasploitモジュール Pwn2Own:...

WordPress Payment Gateway PayPay for WooCommerce plugin 0.5-0.9.3 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Pedro Pinho in WordPress Plugin Payment Gateway PayPay for WooCommerce versions 0.5-0.9.3...

WordPress AcyMailing plugin < 10.11.1 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Pedro Pinho in WordPress Plugin AcyMailing SMTP Newsletter versions 10.11.1...

WordPress MultiVendorX plugin < 5.0.11 - Store Owner+ Cross-Vendor Store Takeover and Deletion vulnerability

Store Owner+ Cross-Vendor Store Takeover and Deletion vulnerability discovered by Pedro Pinho in WordPress Plugin MultiVendorX versions 5.0.11...

WordPress Pixel Tag Manager for WooCommerce plugin < 2.2.1 - Unauthenticated Forged Conversion Event Submission vulnerability

Unauthenticated Forged Conversion Event Submission vulnerability discovered by Pedro Pinho in WordPress Plugin Pixel Tag Manager for WooCommerce versions 2.2.1...

Read This Before You Buy That TV Streaming Stick

Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user's Internet connection out to strangers. But a groundbreaking new analysis finds these devices als...

WordPress WP Delicious plugin < 1.10.2 - Unauthenticated Arbitrary Post Meta Update vulnerability

Unauthenticated Arbitrary Post Meta Update vulnerability discovered by Pedro Pinho in WordPress Plugin WP Delicious versions 1.10.2...

WordPress WowOptin: Next-Gen Popup Maker plugin < 1.4.38 - Unauthenticated Opt-in Deactivation and Template Row Injection vulnerability

Unauthenticated Opt-in Deactivation and Template Row Injection vulnerability discovered by Pedro Pinho in WordPress Plugin WowOptin versions 1.4.38...

WordPress Clover Payment Gateway by Zaytech for WooCommerce plugin < 1.3.6 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Pedro Pinho in WordPress Plugin WooCommerce Clover Payment Gateway versions 1.3.6...

WordPress FacturaONE para WooCommerce con VeriFactu plugin < 5.37 - Unauthenticated Remote Code Execution vulnerability

Unauthenticated Remote Code Execution vulnerability discovered by Pedro Pinho in WordPress Plugin FacturaONE para WooCommerce con VeriFactu versions 5.37...

WordPress TheGem theme <= 5.11.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme TheGem versions = 5.11.1...

WordPress TheGem theme Elements (for Elementor) plugin <= 5.11.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin TheGem Theme Elements for Elementor versions = 5.11.1...

WordPress SetSail theme <= 2.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme SetSail versions = 2.1...

WordPress Leedo theme <= 3.0.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Leedo versions = 3.0.0...

WordPress Billey theme <= 2.1.8 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Billey versions = 2.1.8...

WordPress Trendy Travel theme <= 6.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Trendy Travel versions = 6.8...

WordPress SpaLab | Beauty Salon WordPress Theme theme <= 7.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme SpaLab | Beauty Salon WordPress Theme versions = 7.1...

WordPress LMS theme < 10.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme LMS versions 10.0...

WordPress Kids Life | Children School WordPress theme <= 5.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Kids Life | Children School WordPress versions = 5.6...

WordPress Tourmaster plugin <= 5.4.5 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Tourmaster versions = 5.4.5...