wp-mhn

wp-mhn Integrates your Modern Honeypot Network Server and your Wordpress Blog via MHN's REST API and WP's shortcodes Installation and Usage 1. Download wp-mhn as a zip file, or clone the repo and compress it. 2. Edit config.sample.php with information corresponding to your MHN server. 3...

WordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by awebitaL in WordPress Plugin Event Tickets versions = 5.30.2...

CVE-2025-31486-Simulation

Vite Path Traversal Lab CVE-2025-31486 A hands-on, containerized lab environment to simulate and exploit the Path Traversal vulnerability in Vite's development server, identified as CVE-2025-31486. 📖 About The Vulnerability This lab demonstrates a significant Path Traversal vulnerability found in...

CVE-2026-111487

A flaw was found in the Qt3D module of the Qt framework. An out-of-bounds write vulnerability in the assimp scene import plugin allows an attacker to execute arbitrary code or cause a denial of service DoS. By tricking a user into opening a specially crafted 3D scene file, an attacker can corrupt...

CVE-2026-104065

A flaw was found in Scribus. An out-of-bounds write vulnerability in the Micrografx Draw DRW plugin allows an attacker to achieve arbitrary code execution or a Denial of Service DoS by tricking a user into importing a specially crafted file. Due to improper validation of image offsets during...

Project-Exploiting-CVE-2024-27198-RCE-Vulnerability

Exploiting CVE-2024-27198-RCE Vulnerability In this project, I exploited the CVE-2024-27198-RCE vulnerability to perform a remote code execution RCE attack on a vulnerable TeamCity server. The vulnerability allows uploading and activating a malicious plugin that provides access to the remote syst...

Solr-SSRF

Solr-SSRF CVE-2021-27905 The repeat package in the Burp file contains specific steps for reproduction. The POC is a detection plugin for Xray...

CVE-2023-51409

CVE-2023-51409 AI Engine: ChatGPT Chatbot = 1.9.98 - Unauthenticated Arbitrary File Upload via restupload Description This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. usage:...

CLEANSTART-2026-UN07096 Security fix for GHSA-4x4m-3c2p-qppc applied in: local-static-provisioner-fips 2.8.0-r3, kyverno-policy-reporter-kyverno-plugin 1.6.4-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.6.4-r5

GHSA-4x4m-3c2p-qppc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XS99971 Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default

CVE-2025-15558 affects multiple packages. Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. See references for individual vulnerability details...

CLEANSTART-2026-ZC23006 Security fix for GHSA-8r3f-844c-mc37 applied in: litestream 0.3.14-r2, litestream 0.3.14-r3, k8sgpt 0.1.8-r2, kyverno-policy-reporter-kyverno-plugin 1.5.2-r1

GHSA-8r3f-844c-mc37 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

WordPress Like Button Rating ♥ LikeBtn plugin <= 2.6.64 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by GivMeInJ in WordPress Plugin Like Button Rating versions = 2.6.64...

CVE-2026-104067

A flaw was found in Scribus. This vulnerability can lead to arbitrary code execution or a Denial of Service DoS due to an application crash. The StarView Metafile SVM import plugin fails to verify that bitmap and transparency mask dimensions match when processing files. An attacker could exploit...

MinimalReproducer

After significant efforts, stripped it down to a minimal replicator. This is just an empty project to demonstrate the issue with dependency-check-maven usage I am forced on doing by my company rules. Do check the pom.xml and do verify: mvn org.owasp:dependency-check-maven:RELEASE:aggregate Or if...

CVE-2024-2667-Poc

CVE-2024-2667-Poc 🚀 Description The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation in the /wp-json/instawp-connect/v1/config REST API endpoint in all versions up to, and including, 0.1.0.22. This...

diffplug__goomph_CVE-2022-26049_3-37-1

Goomph: IDE as build artifact Also plugins for working with SWT, OSGi, p2, and Eclipse RCP IDE-as-build-artifact. It is possible to have many installations of the Eclipse IDE share a common set of installed artifacts, called a "bundlepool". This means it is fast and efficient to get a purpose-bui...

CVE-2026-119714

My Calendar WordPress plugin 3.8.8 before 3.8.11 contains a shortcode injection vulnerability that allows unauthenticated attackers to execute registered shortcodes via the mcs search parameter. The mcs value reaches mcsearchresults in src/my-calendar-search.php without bracket encoding before...

DEBIAN-CVE-2026-104065

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin that uses an unvalidated y offset to select image scanlines. Attackers can craft a DRW file that, when imported by a user, writes decoded bitmap data outside the heap...

CVE-2026-104065

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin that uses an unvalidated y offset to select image scanlines. Attackers can craft a DRW file that, when imported by a user, writes decoded bitmap data outside the heap...

CVE-2026-104066

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin when unpacking 4-bit indexed pixel data. Attackers can supply a crafted PICT file with inconsistent width and row data that, when placed or imported, writes out...