WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE

Description WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the authornotin WPQuery SQL Injection CVE-2026-60137, could allow an attacker to perform SQL Injection and achieve Remote Code Execution...

CVE-2026-51385

An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code via the validateurl, safefetch, buildopener, fetchhtml and downloadbinary functions...

PT-2026-61663

Name of the Vulnerable Software and Affected Versions Chamilo versions prior to 1.11.41 Description Authenticated users enrolled in a course, such as students, teachers, or DRH, can achieve remote code execution. The issue exists in the 'main/inc/ajax/lang.ajax.php' endpoint, which is only...

Cisco ASA IKEv1/IKEv2 Buffer Overflow (CVE-2016-1287)

A vulnerability in the Internet Key Exchange IKE version 1 v1 and IKE version 2 v2 code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code...

Exploit for CVE-2026-63030

wp2shell: WordPress Batch RCE A technical breakdown of CVE-20...

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched on July 15 in nginx 1.30.4 stable and 1.31.3 mainline, and in NGINX Plus 37.0.3.1; anyone on an...

Exploit for CVE-2026-63030

wp2shell \CVE-2026-63030/CVE-2026-60137 Pre Authentication...

Exploit for CVE-2026-63030

CVE-2026-63030 — WordPress wp2shell Exploit Unauthenticated d...

Exploit for Eval Injection in Langflow

Langflow RCE Exploitation Framework CVE-2026-33017 · Auth...

NGINX ngx_http_ssi_module vulnerability

...

Exploit for CVE-2026-63030

wp2shell Pre-Authentication Remote Code Execution in WordPres...

OESA-2026-2981 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

MiracleLinux 9 : unbound-1.24.2-3.el9_8.1 (AXSA:2026-1303:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1303:08 advisory. unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options CVE-2026-42944 unbound: Unbound DNSSEC Validator Denial of Service...

Exploit for CVE-2026-63030

CVE-2026-63030 The WordPress REST API batch routing confusi...

Exploit for CVE-2026-60137

wp2shell - WordPress RCE PoC CVE-2026-63030 + CVE-2026-60137...

Exploit for CVE-2026-60137

wp2shell-detect Blackbox, non-intrusive detector for wp...

Exploit for CVE-2026-63030

wp2shell-scan A scanner and proof-of-concept toolkit for CVE-202...

Exploit for CVE-2026-60137

Unauthenticated pre-auth RCE PoC for the WordPress wp2shell chai...

Exploit for CVE-2026-63030

CVE-2026-63030: WordPress Pre-Auth RCE Explained 📖 Read t...

Imperva Customers Protected Against “wp2shell” Pre-Authentication RCE in WordPress Core

TL;DR : A critical pre-authentication Remote Code Execution RCE vulnerability, dubbed "wp2shell" CVE-2026-63030, has been identified in WordPress Core. This vulnerability allows an unauthenticated attacker to execute arbitrary code on a vulnerable WordPress installation without any preconditions,...