buyer-eval-skill

买家评估——B2B软件的烂番茄 一个免费的、开源的Claude技能，通过与B2B供应商的AI代理对话，将每个声明与独立来源交叉引用，并对已验证的内容与仅仅乐观营销的内容进行评分。 v3.5 新特性——即使没有公司代理，现在也会捕获供应商问题。 早期版本仅记录技能向供应商AI代理提出的问题——因此对于没有Salespeak Frontdoor代理的供应商（目前仍是大多数），没有问题信号流动。v3.5 也通过被动研究捕获技能 本会提出 的问题，以及运行级别的上下文（类别、评估的供应商）和技能向买家提出的发现性问题。隐私面与v3.4...

WP Cerber < 8.9.3 - Broken Access Control

WP Cerber 8.9.3 contains a bypass of /wp-json access control caused by improper handling of trailing '?' character, letting unauthorized users access protected REST API endpoints, exploit requires sending a request with a trailing '?'. id: CVE-2021-37598 info: name: WP Cerber 8.9.3 - Broken Acces...

Moodle-CVE-2024-43425-Exploit

Exploit RCE en Moodle CVE-2024-43425 Este repositorio contiene un script de exploit en Python dirigido a una vulnerabilidad de ejecución remota de código RCE en Moodle CVE-2024-43425. Aviso legal: Esta herramienta se proporciona AS IS únicamente con fines educativos y de investigación. Úsala solo...

Moodle-authenticated-RCE

Moodle 4.4.0 - Exploit de Ejecución Remota de Código Autenticada CVE-2024-43425 CVE: CVE-2024-43425 Versiones Afectadas Moodle 4.4 a 4.4.1 Moodle 4.3 a 4.3.5 Moodle 4.2 a 4.2.8 Moodle 4.1 a 4.1.11 Descripción Este exploit apunta a una vulnerabilidad de Ejecución Remota de Código RCE autenticada e...

CVE-2024-43425-Poc

CVE-2024-43425-Poc Resumen de CVE ID de CVE: CVE-2024-43425 Descripción: Moodle permite a un usuario autenticado con nivel de profesor cargar una pregunta calculada maliciosa a través de la interfaz del editor de cuestionarios. Impacto: Ejecución remota de código RCE Causa: Sanitización inadecuad...

CVE-2022-1598

CVE-2022-1598 WPQA where ID is numeric and can be bruteforced! Plantilla de Nuclei: CVE-2022-1598.yaml...

CVE-2025-63842

A Cross-Site Scripting XSS vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in the app's context via crafted input in the multiple-choice question text field...

CVE-2022-35650

CVE-2022-35650 Esto es una lectura arbitraria de archivos en Moodle. Requisitos previos Debes haber comprometido un usuario a nivel de profesor o administrador. Pasos 1. Clona este repositorio: root@kitploit: git clone https://github.com/Gr4y-r0se/CVE-2022-35650.git 2. Ejecuta este comando para...

CVE-2025-63842

A Cross-Site Scripting XSS vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in the app's context via crafted input in the multiple-choice question text field...

2024InformationSecurityEngineer

2024InformationSecurityEngineer 2024 Ingeniero de Seguridad de la Información, 2024InformationSecurityEngineer Segundo semestre de 2024 - Ingeniero de Seguridad de la Información Recuerdo de preguntas de ejemplo Examen de Cualificación de Software 软考 - Fecha del examen : 2024年11月08日 一、Captura de...

decidim-elections: Election question titles allow stored script execution

Description A low-privilege process-scoped admin who can manage elections can store arbitrary HTML in the question statement/body without sanitization, and the public elections UI renders that value unsafely. Technical description This stored XSS appears because election question titles are...

GHSA-9MVP-W4RR-5C6X decidim-elections: Election question titles allow stored script execution

Description A low-privilege process-scoped admin who can manage elections can store arbitrary HTML in the question statement/body without sanitization, and the public elections UI renders that value unsafely. Technical description This stored XSS appears because election question titles are...

cve-2024-43425

CVE-2024-43425 Información del firmware: Nombre de la aplicación: Moodle Versión de compilación: moodle-4.4.1 Versiones afectadas: 4.4 a 4.4.1, 4.3 a 4.3.5, 4.2 a 4.2.8, 4.1 a 4.1.11 y versiones anteriores no compatibles Enlace de descarga: moodle-4.4.1 Descripción e impacto Los atacantes con...

CVE-2026-85592

phpMyFAQ before 4.1.8 contains an authorization bypass vulnerability in the question creation endpoint where the isAddingQuestionsAllowed method grants access to all callers when main.enableAskQuestions is enabled, ignoring the records.allowQuestionsForGuests setting. Unauthenticated attackers ca...

CVE-2026-85586

phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenticated attackers can bypass CAPTCHA protection and submit unlimited questions directly, causing database pollution and triggering outgoing mail notifications...

EUVD-2026-71015

phpMyFAQ before 4.1.8 contains an authorization bypass vulnerability in the question creation endpoint where the isAddingQuestionsAllowed method grants access to all callers when main.enableAskQuestions is enabled, ignoring the records.allowQuestionsForGuests setting. Unauthenticated attackers ca...

CVE-2026-85592

phpMyFAQ versions before 4.1.8 are affected by an authorization bypass in the question/create API endpoint. The underlying cause is that the isAddingQuestionsAllowed() method grants access to all callers when main.enableAskQuestions is enabled, while ignoring the records.allowQuestionsForGuests s...

CVE-2026-85592 phpMyFAQ before 4.1.8 Authorization Bypass via question/create

phpMyFAQ before 4.1.8 contains an authorization bypass vulnerability in the question creation endpoint where the isAddingQuestionsAllowed method grants access to all callers when main.enableAskQuestions is enabled, ignoring the records.allowQuestionsForGuests setting. Unauthenticated attackers ca...

CVE-2026-85592 phpMyFAQ before 4.1.8 Authorization Bypass via question/create

phpMyFAQ before 4.1.8 contains an authorization bypass vulnerability in the question creation endpoint where the isAddingQuestionsAllowed method grants access to all callers when main.enableAskQuestions is enabled, ignoring the records.allowQuestionsForGuests setting. Unauthenticated attackers ca...

CVE-2026-85586 phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter

phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenticated attackers can bypass CAPTCHA protection and submit unlimited questions directly, causing database pollution and triggering outgoing mail notifications...