CVE-2026-97344 Wp Social Login and Register Social Counter <= 3.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

CVE-2026-15989

CVE-2026-15989 — Super Forms ≤ 6.3.316 — 未认证权限提升 PoC Super Forms – Drag & Drop Form Builder WordPress ≤ 6.3.316 — 通过高级版 Register & Login 插件的 role 参数实现未认证权限提升。 📋 漏洞概述 属性| 详情 ---|--- CVE ID| CVE-2026-15989 利用链| 注册表单 → $otheruserdata 中的 'role' → wpinsertuserrole=administrator → 管理员 严重程度| 🔴 严重 CVSS 9...

PT-2026-104535

Name of the Vulnerable Software and Affected Versions The Pie Register WordPress plugin versions prior to 3.8.4.14 Description The plugin fails to restrict access to an invitation-code report. This allows unauthenticated visitors who possess a valid invitation code to retrieve the usernames and...

PT-2026-104578

Name of the Vulnerable Software and Affected Versions OpenAM versions prior to 16.1.3 Description An email content injection issue allows unauthenticated attackers to control the wording of notification emails. This is possible through the forgotPassword and register actions on the...

WordPress Wp Social Login and Register Social Counter plugin <= 3.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Jakub Herman in WordPress Plugin Wp Social versions = 3.2.1...

EUVD-2026-91775

An information exposure vulnerability in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5, 3.7.3, and 3.8.0 allows an unauthenticated attacker to retrieve the RPC secret in plaintext via the vendor data metadata endpoint. If a target machine was deployed with the 'register as rack' option...

brokentooth

brokentooth CVE-2018-4327 の POC（少なくとも私はそう考えています。CVE-2018-4327 と CVE-2018-4330 はどちらも @SparkZheng によって議論されましたが、どちらのバグがどれに対応するのかは彼からは明確ではありません。彼が最初に説明したのがこれだったので、推測しています）。 iPhone 6S 11.3.1 でテスト済み 11.4 までは動作するはずです SpringBoard といくつかのサービス上で、PC（IP レジスタの ARM 版）を任意の値に設定できます。コードを実行してから BT...

CVE-2026-15897

The Super Forms – Drag & Drop Form Builder plugin for WordPress (all versions up to and including 6.3.316 ) is vulnerable to Privilege Escalation . The flaw exists in the Register & Login add-on's before_email_success_msg() function, which fails to perform ownership or capability checks when proc...

EUVD-2026-91176

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & Login add-on's beforeemailsuccessmsg function, in its registerloginaction='update' flow, trusting an attacker-supplied...

CVE-2024-54363

CVE-2024-54363 Wp NssUser Register successful, just Check this: Login...

Web-Penetration-Test

Web-Penetration-Test WordPress の脆弱性 CVE-2025-34077 の悪用、Cookie インジェクションによる認証バイパス、root への権限昇格。サイバーセキュリティ専門コースの一環として実施。 Day 1: 初めての Web サイトをハッキング ラボレポート: 「BigWear」サーバーの悪用 サイバーセキュリティへの旅の最初のセッションで、私は神話から離れることができました。セキュリティの欠陥を特定するのに数学の天才や熟練プログラマーである必要はないと学びました。必要なのは創造性、論理的思考、そして確固たる方法論 です。 ステップバイステップ:...

PT-2026-104078

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & Login add-on's before email success msg function, in its register login action='update' flow, trusting an...

PoC_CVE-2025-48507

Breaking TrustZone on Zynq UltraScale+ MPSoCs - Proof of Concept for CVE-2025-48507 and CVE-2025-0038 Non-Secure Software could exploit CVE-2025-48507 and CVE-2025-0038 to gain read/write access to Secure World on Zynq UltraScale+ platforms , thereby breaking TrustZone isolation. To that extent,...

rocket-lms-shell-upload-auto-register

rocket-lms-shell-upload-auto-register Rocket LMS Shell Upload Vulnerability Python 2.7 Buy Coffee : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC How To Use? Install Python 2.7 Download Here python file.py Sauce? https://medium.com/@naxtarrr/rocket-lms-shell-upload-vulnerability-c400665702f3...

CVE-2026-31413-BPF-Container-Escape

CVE-2026-31413: BPF 検証器の 1 バイトからコンテナエスケープへ Linux BPF 検証器にサウンドネスバグを発見しました。pushstack 呼び出し内の + 1 により、分岐したパスで ALU 命令が 1 つスキップされます。BPFOR の場合、CPU が 0 | K = K を計算している間、検証器は dst = 0 と追跡します。完全なコンテナエスケープを書き上げました。BPF マップからの OOB 読み書き、vtable ハイジャック、modprobepath 上書き、ホストでの root 取得です。その後、2 パッチのシリーズ（1 文字の検証器修正と 9...

CVE-2020-8835

CVE-2020-8835 In the Linux kernel 5.5.0 and newer, the bpf verifier kernel/bpf/verifier.c does not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. This vulnerability also affects the Linux 5.4 stable series, starting with...

CVE-2026-103345

Insertion of Sensitive Information Into Sent Data vulnerability in Shamim Rajani Pie Register pie-register allows Retrieve Embedded Sensitive Data.This issue affects Pie Register: from n/a through 3.8.4.13...

EUVD-2026-90801

Insertion of Sensitive Information Into Sent Data vulnerability in Shamim Rajani Pie Register pie-register allows Retrieve Embedded Sensitive Data.This issue affects Pie Register: from n/a through 3.8.4.13...

CVE-2026-103345

The Pie Register WordPress plugin (versions

CVE-2026-103345 WordPress Pie Register plugin <= 3.8.4.13 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Shamim Rajani Pie Register pie-register allows Retrieve Embedded Sensitive Data.This issue affects Pie Register: from n/a through 3.8.4.13...