295280 matches found
challenge-cve-2024-3552
challenge-cve-2024-3552 run command to start challenge: docker-compose up then access: http://localhost:8080 active plugin web directory free :D And start exploit...
CVE-2026-119554
Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contain an sql injection vulnerability in the External database enrolment plugin via course idnumber. Editing teachers can store a backslash-quote payload in idnumber that executes during scheduled sy...
CVE-2024-7985-PoC
CVE-2024-7985-PoC FileOrganizer = 1.0.9 - Authenticated Subscriber+ Arbitrary File Upload FileOrganizer Exploit - CVE-2024-7985 📌 Overview CVE-2024-7985 - WordPress Plugin FileOrganizer = 1.0.9 is vulnerable to authenticated arbitrary file uploads , allowing attackers with Subscriber+ privileges...
e-signature-poc
e-signature-poc e-signature --------------------------04406918fd5cbc2b Content-Disposition: form-data; name="extensions" jpg,png,pdf,php3 --------------------------04406918fd5cbc2b Content-Disposition: form-data; name="filesize" 2 --------------------------04406918fd5cbc2b Content-Disposition:...
CVE-2024-50488
CVE-2024-50488 Token Login history.pushState'', '', '/'; document.forms0.submit;...
CVE-2026-119554 Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 SQL Injection via enrol_database Course idnumber
Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contain an sql injection vulnerability in the External database enrolment plugin via course idnumber. Editing teachers can store a backslash-quote payload in idnumber that executes during scheduled sy...
EUVD-2026-113819
Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contain an sql injection vulnerability in the External database enrolment plugin via course idnumber. Editing teachers can store a backslash-quote payload in idnumber that executes during scheduled sy...
CVE-2026-119554 Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 SQL Injection via enrol_database Course idnumber
Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contain an sql injection vulnerability in the External database enrolment plugin via course idnumber. Editing teachers can store a backslash-quote payload in idnumber that executes during scheduled sy...
CVE-2026-119554
Moodle versions 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 are susceptible to an SQL Injection vulnerability in the External database enrolment plugin . The flaw exists in the handling of the course idnumber field. Specifically, editing teachers can ...
CVE-2024-9932-POC
CVE-2024-9932-POC Description: The Wux Blog Editor WordPress plugin is vulnerable to arbitrary file uploads due to insufficient file type validation in the wuxbtinsertImageNew function. Versions up to and including 3.0.0 are affected. This vulnerability allows unauthenticated attackers to upload...
jira-ssrf
jira-ssrf CVE-2017-9506 The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery SS...
CVE-2022-0739-Exploitation
CVE-2022-0739-Exploitation An exploitation of CVE-2022-0739. It about BookingPress WordPress plugin before 1.0.11. By using bookingpressfrontgetcategoryservices AJAX action available to unauthenticated users, leading to an unauthenticated SQL Injection. Since the plugin fails to properly sanitize...
CVE-2023-3460
CVE-2023-3460 Exploit for CVE-2023-3460 - Unauthorized admin access for Ultimate Member plugin. PoC is now published. It was created for educational/research purposes only! Use it at your own risk! thanks for ©gbrsh, I improved the tool a bit...
cve-2025-22294
CVE-2025-2294 – Local File Inclusion LFI in WordPress Plugin Kubio AI Page Builder Link to detailed write-up Link to deployment Link to exploit Links to files for mass scanning: Template for active scan Template for passive scan Exploit for mass scanning in Python Exploit for mass scanning in...
CVE-2024-43917
CVE-2024-43917 A proof of concept developed to exploit CVE-2024-43917. Based on PatchStack's article. Usage usage: python CVE-2024-43917.py --help TI WooCommerce Wishlist WordPress plugin = 2.8.2 CVE-2024-43917 PoC positional arguments: COMMAND SQL command to execute SHAREKEY share key of the wis...
CVE-2025-2539
CVE-2025-2539 - WordPress File Away = 3.9.9.0.1 - Arbitrary File Read 🔥 Vulnerability Summary The WordPress plugin File Away version = 3.9.9.0.1 is vulnerable to an unauthenticated arbitrary file read vulnerability. This allows attackers to read any file on the server, such as wp-config.php,...
CVE-2024-50478
CVE-2024-50478 1-Click Login: Passwordless Authentication 1.4.5 - Authentication Bypass via Account Takeover Description: The 1-Click Login: Passwordless Authentication plugin for WordPress is vulnerable to authentication bypass in version 1.4.5. This is due to the plugin not properly verifying a...
ODH-BricksBuilder-CVE-2024-25600-THM
ODH-BricksBuilder-CVE-2024-25600-THM Overview This repository hosts a Python-based vulnerability scanner developed by Oblivion Development & Hosting OD&H to detect CVE-2024-25600 in the Bricks Builder plugin for WordPress. This tool is designed primarily for use within Try Hack Me THM exercises,...
CVE-2023-6360
CVE-2023-6360 Analysis Report Overview CVE-2023-6360 is an SQL injection vulnerability found in a specific WordPress plugin, allowing an attacker to exploit security weaknesses in the web application to inject malicious SQL code into the database. This can lead to serious security issues such as...