CVE-2026-75121

PLANET GS-4210-16P2S managed switches with firmware prior to 3.441b260626 are affected by an authenticated OS command injection in /cgi-bin/dispatcher.cgi. The web_vlan_membership_edit_dialog_post handler incorporates the memberTags POST parameter directly into a shell command without sanitizatio...

EUVD-2026-67781

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The webvlanmembershipeditdialogpost handler incorporates the memberTags POST parameter into a shell command without sanitization. A remote authenticated...

CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - SQL-Injection-Schwachstelle im Online-Eventbuchungs- und Reservierungssystem Version 2.3.0. Technische Beschreibung: Eine SQL-Injection-Schwachstelle existiert in der Eventmanagement-Software Version 2.3.0. Ein Angreifer kann den anfälligen Parameter „id“ auf der...

PressVector

🧨 PressVector — WordPress CVE-2026-63030 / CVE-2026-60137 Exploitation Framework ⚡ Advanced Pre-Auth RCE & Blind SQLi Exploitation Framework for WordPress Core 📌 Overview PressVector is a comprehensive, fully automated exploitation framework targeting CVE-2026-63030 and CVE-2026-60137 — two...

CVE-2026-63030

CVE-2026-63030 — WordPress wp2shell Exploit Unauthenticated detection and exploitation tool for the WordPress core batch-confusion vulnerability CVE-2026-63030 / CVE-2026-60137, which leads to SQL injection and remote code execution RCE through the REST API batch endpoint. ⚠️ For authorized...

CVE-2026-43499-RMX5200

CVE-2026-43499 per realme RMX5200 Escalation locale dei privilegi SO per: Elemento| Valore ---|--- Dispositivo| realme RMX5200 / RE6030L1 Android| 16 Kernel| 6.12.23-android16-5-gb2a876903b49-ab14541642-4k Fingerprint| realme/RMX5200/RE6030L1:16/BP2A.250605.015/...:user/release-keys Binario...

CVE-2014-2383-LFI-to-RCE-Escalation

CVE-2014-2383 تصعيد LFI/RFI إلى RCE بيئة الاختبار: dompdf 0.6.0 - php 7.3.33 - apache 2.4.25 أثناء تقييم أمني تم اكتشاف وجود CVE-2014-2383. هذه الوثيقة هي إثبات مفهوم Proof of Concept ولا تتضمن تفاصيل الاكتشاف الأولي حفاظًا على خصوصية العميل. ومع ذلك، يحاكي المحتوى الموجود في هذه الوثيقة البيئة...

CVE-2025-5287

CVE-2025-5287 Plugin Likes and Dislikes = 1.0.0 - SQL Injection Non Autenticata Descrizione Il plugin Likes and Dislikes per WordPress è vulnerabile a SQL Injection tramite il parametro 'post' in tutte le versioni fino alla 1.0.0 inclusa, a causa di un escaping insufficiente sul parametro fornito...

CVE-2025-4578

CVE-2025-4578 File Provider = 1.2.3 - Injeção de SQL Não Autenticada Descrição O plugin File Provider para WordPress é vulnerável a Injeção de SQL por meio do parâmetro 'fileId' em todas as versões até, e incluindo, a 1.2.3, devido ao escape insuficiente no parâmetro fornecido pelo usuário e à...

CVE-2025-22777

CVE-2025-22777 GiveWP – Donation Plugin and Fundraising Platform = 3.19.3 - Nicht authentifizierte PHP-Objektinjektion Beschreibung Das WordPress-Plugin GiveWP – Donation Plugin and Fundraising Platform ist in allen Versionen bis einschließlich 3.19.3 anfällig für PHP-Objektinjektion durch die...

CVE-2024-50491

CVE-2024-50491 RSVP ME = 1.9.9 - अप्रमाणित SQL इंजेक्शन विवरण RSVP ME WordPress प्लगइन 1.9.9 तक के संस्करणों में SQL इंजेक्शन के लिए संवेदनशील है, क्योंकि उपयोगकर्ता द्वारा प्रदान किए गए पैरामीटर पर अपर्याप्त एस्केपिंग और मौजूदा SQL क्वेरी पर पर्याप्त तैयारी का अभाव है। इससे अप्रमाणित हमलावरों के...

CVE-2024-13489

CVE-2024-13489 LTL Freight Quotes – Old Dominion Edition = 4.2.10 - SQL Injection non autenticata Descrizione Il plugin LTL Freight Quotes – Old Dominion Edition per WordPress è vulnerabile a SQL Injection tramite i parametri 'editid' e 'dropshipeditid' in tutte le versioni fino alla 4.2.10...

CVE-2024-13485

CVE-2024-13485 LTL Freight Quotes – ABF Freight Edition = 3.3.7 - SQL Injection non autenticata Descrizione Il plugin LTL Freight Quotes – ABF Freight Edition per WordPress è vulnerabile a SQL Injection tramite i parametri 'editid' e 'dropshipeditid' in tutte le versioni fino alla 3.3.7 inclusa, ...

CVE-2024-13478

CVE-2024-13478 LTL Freight Quotes – TForce Edition = 3.6.4 - SQL Injection non autenticata Descrizione Il plugin LTL Freight Quotes – TForce Edition per WordPress è vulnerabile a SQL Injection tramite i parametri 'dropshipeditid' e 'editid' in tutte le versioni fino alla 3.6.4 inclusa, a causa di...

CVE-2023-5412

CVE-2023-5412 Image horizontal reel scroll slideshow = 13.2 - Iniezione SQL autenticata Subscriber+ tramite shortcode Descrizione: Il plugin Image horizontal reel scroll slideshow per WordPress è vulnerabile a SQL Injection tramite lo shortcode del plugin nelle versioni fino alla 13.2 inclusa a...

CVE-2023-41652

CVE-2023-41652 RSVPMarker = 10.6.6 - Nicht authentifizierte SQL-Injection Beschreibung: Das RSVPMarker-Plugin für WordPress ist in den Versionen bis einschließlich 10.6.6 anfällig für SQL-Injection über den Parameter 'email', da die vom Benutzer bereitgestellten Parameter nicht ausreichend escape...

CVE-2023-0630

CVE-2023-0630 CVE-2023-0630 - Slimstat Analytics 4.9.3.3 - SQL Injection Subscriber+ Requisiti sqlmap installato e un nome utente e password validi con privilegi di Subscriber+ Utilizzo root@kitploit: usage: CVE-2023-0630.py -h -w URL -u USERNAME -p PASSWORD options: -h, --help show this help...

CVE-2022-45808

CVE-2022-45808 LearnPress Plugin 4.2.0 - SQL injection cieca basata sul tempo non autenticata Descrizione Il plugin non sanitizza e non sfugge correttamente il parametro order by prima di utilizzarlo in una dichiarazione SQL, portando a una SQL injection sfruttabile da utenti non autenticati. POC...

CVE-2022-0439

CVE-2022-0439 CVE-2022-0439 - Email Subscribers & Newsletters 5.3.2 - Blind SQL injection da subscriber+ Requisiti sqlmap installato e un nome utente e password validi con subscriber+ Utilizzo root@kitploit: usage: CVE-2022-0439.py -h -w URL -u USERNAME -p PASSWORD options: -h, --help show this...

CVE-2025-43300

CVE-2025-43300 CVE-2025-43300: Speicherkorruption in der DNG-Bildverarbeitung von iOS/macOS Zusammenfassung Eine Schwachstelle in der Bildverarbeitung von Apple RawCamera.bundle betrifft iOS 18.6.1 und macOS. Das Problem tritt auf, wenn DNG-Dateien nicht übereinstimmende TIFF-Metadaten und...