WP-GDPR-Compliance-Plugin-Exploit

Exploit of Vulnerability CVE-2018-19207 in WP GDPR Compliance Plugin WordPress This python script creates a user with role admin. Change the varbiables baseurl, username, email for your specific case. A working email is needed, because an email is sent to this adress in order to setup a password...

CVE-2024-1698-Exploit

CVE-2024-1698 Exploit Script - Wordpress NotificationX = 2.8.2 - SQL Injection This is an exploit script to find out wordpress admin's username and password hash by exploiting CVE-2024-1698. This Python script is intended for educational purposes only. It demonstrates a proof of concept for...

CVE-2020-12696

CVE-2020-12696 ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ Iframe iframe src="javascript:confirmdocument.cookie" width="100%" height="500" Version plugin: 4.4 Tested on: WordPress 5.2.4 Researche...

faraday_plugins

Instalación pip install faraday-plugins Comandos Listar plugins Lista todos los plugins y si son compatibles con comandos y/o informes Parámetros opcionales: -cpf / --custom-plugins-folder PATH: Si se indica, también buscará plugins personalizados en esa ruta faraday-plugins list-plugins Probar l...

CVE-2022-1329

WP Elementor 3.6.0/1/2 Remote Code Execution Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down to select the version Version: 3.6.0,...

jackhammer

Jackhammer: Una herramienta de evaluación/gestión de vulnerabilidades de seguridad para resolver todos los problemas del equipo de seguridad. ¿Qué es Jackhammer? Jackhammer es una herramienta de colaboración construida con el objetivo de cerrar la brecha entre el equipo de seguridad vs el equipo ...

CVE-2024-44000-LiteSpeed-Cache

Poc LiteSpeed Cache CVE-2024-44000 Exploit CVE-2024-44000 is a vulnerability in the LiteSpeed Cache plugin, a popular WordPress plugin. This vulnerability affects session management in LiteSpeed Cache, allowing attackers to gain unauthorized access to sensitive data. The script works in the...

CVE-2022-29063

CVE-2022-29063: Java Deserialization via RMI Connection in Apache OfBiz The OfBiz Solr plugin is configured by default to automatically make a RMI request on localhost, port 1099. By hosting a malicious RMI server on localhost, an attacker may exploit this behavior, at server start-up or on a...

CVE-2023-5360

CVE-2023-5360 Elementor File Upload Exploit The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE. / / | / / / / / | | / / / / / | |/ /// /...

CVE-2023-26035

CVE-2023-26035 ZoneMinder Snapshots - Sin autenticar Instalación Clonar repositorio $ git clone https://github.com/Yuma-Tsushima07/CVE-2023-26035.git Configuración Nota: Instala la última versión de node $ npm init $ npm i axios cheerio yargs Uso...

CVE-2020-12640

CVE-2020-12640: Inclusión Local de Archivos PHP a través del "Valor del Plugin" en Roundcube Webmail Existe una vulnerabilidad de Path Traversal en versiones de Roundcube anteriores a 1.4.4, 1.3.11 y 1.2.10. Debido a que los parámetros "plugins " no realizan saneamiento/filtrado de entrada, un...

wphunter

WPHunter Tool ☣ WPHunter A Wordpress Vulnerability Scanner You can use this tool on your wordpress website to check the security of your website by finding the vulnerability in your website. Over 75 million websites run on WordPress. which is now powers 26% of the Web. Remarkably enough thousands...

CVE-2019-9978_Exploit

CVE-2019-9978 Exploit Social WarFare Plugin =3.5.2 Remote Code Execution...

bantam

Bantam An advanced PHP backdoor management tool, with a lightweight server footprint, multi-threaded communication, and an advanced payload generation and obfuscation tool. Features end to end encryption with request unique encryption keys, and payload streaming designed to bypass WAF, IDS, SIEM...

CVE-2025-4190

CVE-2025-4190 — WordPress CSV Mass Importer ≤ 1.2 Arbitrary File Upload -purple 📌 Description The CSV Mass Importer plugin ≤ 1.2 for WordPress contains an Admin+ Arbitrary File Upload vulnerability. Due to improper validation of uploaded files, high-privilege users such as admin can upload...

NodeGoat

NodeGoat Being lightweight, fast, and scalable, Node.js is becoming a widely adopted platform for developing web applications. This project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them. Getti...

wireshark-forensics-plugin

wireshark-forensics-plugin Wireshark is the most widely used network traffic analyzer. It is an important tool for both live traffic analysis & forensic analysis for forensic/malware analysts. Even though Wireshark provides incredibly powerful functionalities for protocol parsing & filtering, it...

UPGer

UPGer | CVE-2022-4060 - User Post Gallery Herramienta automática masiva para verificar la vulnerabilidad en CVE-2022-4060 - Plugin de WordPress: User Post Gallery install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh Cómo Usar bash upger.sh...

POC-CVE-2023-3244

proof of concept for CVE-2023-3244 Hello, this is a simple Proof of Concept PoC for the CVE-2023-3244 vulnerability found in the WordPress plugin "comments-like-dislike". The vulnerability affects plugin versions up to and including 1.2.0. To exploit this vulnerability, you can refer to the Pytho...

Kam1n0-Community

What Is Kam1n0 v2? Kam1n0 v2.x is a scalable assembly management and analysis platform. It allows a user to first index a large collection of binaries into different repositories and provide different analytic services such as clone search and classification. It supports multi-tenancy access and...