CVE-2026-4889

The eLoanApp platform by RDL Technologies contains a SQL injection (SQLi) vulnerability in the '/ajax/users.php?op=verify' endpoint. The vulnerability exists in the 'logina' POST parameter, which is susceptible to both boolean-based and time-based SQL injection. Successful exploitation enables an...

CVE-2026-75962

The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'useremail' parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and...

CVE-2026-8380

CVE-2026-8380 CVE-2026-8380 — Frontend File Manager = 23.6 任意文章删除 概述 在 WordPress 插件 Frontend File Manager nmedia-user-file-uploader 中发现了一个严重的授权缺陷，影响版本 = 23.6。 由于 AJAX 删除端点中的授权验证不当，该漏洞允许低权限的已认证用户永久删除任意 WordPress 文章、页面、附件和自定义文章类型。 当插件选项 allowguestupload=yes 启用时，未认证攻击者也可利用该漏洞。 CVE： CVE-2026-8380 插件：...

CVE-2025-32583

🚨 CVE-2025-32583 — WordPress PDF 2 Post RCE 漏洞利用 严重漏洞 CVE 编号： CVE-2025-32583 严重性： 9.9（严重） CVSS 向量： CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 📖 描述 PDF 2 Post WordPress 插件（由 termel 开发）中存在一个漏洞，由于对代码生成的掌控不当 ，导致远程代码包含（RCE） 。 受影响版本：= 2.4.0 该漏洞允许已认证用户 （即使是低权限用户）上传包含 PHP 代码的 .zip 文件。插件解压后，恶意 PHP...

CVE-2026-75962

The Post SMTP WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 4.0.1 . The root cause is insufficient input sanitization and output escaping regarding the 'user_email' parameter. Attackers can bypass the plugin's validator by using numeric HT...

EUVD-2026-92961

The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'useremail' parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and...

CVE-2026-75962 Post SMTP <= 4.0.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user_email' Parameter (Multisite Registration → Failed Email Log)

The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'useremail' parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and...

CVE-2019-20224

CVE-2019-20224 Pandora v7.0NG 认证后远程代码执行（CVE-2019-20224）的官方漏洞利用...

React2Shell

Docker 实验室与检测扫描器及 PoC 验证：React2Shell CVE-2025-55182 免责声明： 本仓库及其 PoC 工件严格用于在隔离实验室环境中的教育、研究和防御性安全演示目的。未经授权对系统进行测试是严格禁止的。 1. 项目管理与授权边界 项目目的 本仓库提供了一个可复现的双容器 Docker 环境，旨在分析、利用并验证针对 React Server Components RSC Flight Protocol 反序列化漏洞（通常称为 React2Shell / CVE-2025-55182 ）的缓解措施。该实验室演示了在未打补丁的 Next.js...

Razer Sila Gaming Router - Remote Code Execution

A command injection in the command parameter of Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request. id: CVE-2022-29013 info: name: Razer Sila Gaming Router - Remote Code Execution author: DhiyaneshDK severity: critical descriptio...

CVE-2025-55182-POC

CVE-2025-55182 – 命令注入漏洞扫描器 包含真实命令输出的完整概念验证 此仓库包含一个基于 Python 的概念验证 PoC 扫描器，用于 CVE-2025-55182，演示攻击者如何通过基于 JSON 的 POST 请求利用命令注入漏洞。 该工具允许安全研究人员和渗透测试人员通过发送命令并获取其执行输出来验证目标是否存在漏洞。 ⚠️ 免责声明 本项目仅用于教育、研究和授权的渗透测试目的 。 您全权负责遵守所有适用法律。 请勿将本工具用于您不拥有或未获得明确测试许可的系统。 作者对任何滥用或造成的损害不承担任何责任 。 DORK SHODAN:...

reverie

Reverie Una implementación eficiente del NIZKPoK presentado en KKW 2018 Reverie es una implementación demostrador y verificador del NIZKPoK MPC-in-the-head presentado en Improved Non-Interactive Zero Knowledge with Applications to Post-Quantum Signatures. Reverie busca ofrecer eficiencia concreta...

CVE-2026-105783

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, when Joplin Desktop is running with the opt-in Web Clipper server enabled, the server in packages/lib/ClipperServer.ts sends Access-Control-Allow-Origin: and allows an...

EUVD-2026-92842

vLLM: Harmony tool continuations drop cachesalt — restoring a cross-tenant prefix-cache membership oracle...

PT-2026-106717

PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitted to POST /api/access-tokens/verify-totp, allowing attackers to brute force two-factor authentication codes. Attackers who know a user's password can reuse the ten-minute pending token to guess six-digit codes until one...

CVE-2024-32002

GIT RCE CVE-2024-32002 描述 | CVE-2024-32002 | https://www.tarlogic.com/blog/cve-2024-32002-vulnerability-git/ | 利用 | 首先你需要在 git 上创建 "calledrepo" 和 "commandrepo" 仓库。 | 受害者稍后通过 "git clone --recursive calledrepo.git" 调用 calledrepo，该操作会重定向到 commandrepo 并执行钩子脚本。 | 这个 bash 反向 shell payload 在 WINDOWS 和...

CVE-2026-105752

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, Harmony tool continuations submitted through "POST /v1/responses" requests rebuild the next-turn engine input without preserving the cachesalt value, placing the continuation prefix in the global unsalted cache...

CVE-2026-105783 Joplin Web Clipper pairing allows cross-origin theft of a permanent API token

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, when Joplin Desktop is running with the opt-in Web Clipper server enabled, the server in packages/lib/ClipperServer.ts sends Access-Control-Allow-Origin: and allows an...

CVE-2026-105783

The Joplin note-taking application (prior to version 3.7.13 ) is vulnerable to cross-origin theft of a permanent API token when the optional Web Clipper server is enabled. The root cause is located in packages/lib/ClipperServer.ts, where the server sends Access-Control-Allow-Origin: * and fails t...

CVE-2026-105783 Joplin Web Clipper pairing allows cross-origin theft of a permanent API token

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, when Joplin Desktop is running with the opt-in Web Clipper server enabled, the server in packages/lib/ClipperServer.ts sends Access-Control-Allow-Origin: and allows an...