CVE-2023-5561-PoC

PoC CVE-2023-5561 - Offenlegung von Benutzer-E-Mail-Adressen in WordPress Beschreibung Dieses Skript nutzt die Schwachstelle CVE-2023-5561 in WordPress aus, um Benutzer-E-Mail-Adressen über den API-Endpunkt /wp-json/wp/v2/users aufzulisten und offenzulegen. Voraussetzungen Python 3.x...

CVE-2026-8181-Lab

CVE-2026-8181 — Laboratorio di Bypass dell'Autenticazione di Burst Statistics Laboratorio Docker locale per CVE-2026-8181 , un bypass dell'autenticazione nel plugin WordPress Burst Statistics – Privacy-Friendly WordPress Analytics. Questo laboratorio confronta una versione vulnerabile del plugin...

CVE-2026-82452

rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handler signatures. Unauthenticated attackers can create, update, list, retrieve, and delete user accounts by directly accessing unprotected...

teamcity-exploit-cve-2023-42793

TeamCity Exploit Cve 2023 42793 Ein schnelles Skript, um den cve-2023-42793 Bug auszunutzen. Weitere Informationen zum Exploit finden Sie hier: https://www.fortinet.com/blog/threat-research/teamcity-intrusion-saga-apt29-suspected-exploiting-cve-2023-42793​...

EUVD-2026-68107

rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handler signatures. Unauthenticated attackers can create, update, list, retrieve, and delete user accounts by directly accessing unprotected...

CVE-2026-82452

rust-iot-platform (through commit 5df942ab) contains an authentication bypass caused by most REST API routes lacking authentication guards in their handler signatures, as seen in the user router. An unauthenticated attacker over the network with low complexity can create, update, list, retrieve, ...

CVE-2026-82452 rust-iot-platform Authentication Bypass via Missing Request Guards

rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handler signatures. Unauthenticated attackers can create, update, list, retrieve, and delete user accounts by directly accessing unprotected...

CVE-2026-27541-Analysis-Lab

CVE-2026-27541 — Laboratorio di Escalation dei Privilegi Autenticata in WooCommerce Wholesale Prices Panoramica Questo progetto è un laboratorio Docker locale per analizzare e riprodurre il comportamento di CVE-2026-27541 nel plugin WooCommerce Wholesale Prices / Wholesale Suite , confrontando le...

CVE-2026-33137

CVE-2026-33137 XWiki Platform – Nicht authentifizierter XAR-Import via REST/wikis/wikiName Beschreibung Der REST-API-Endpunkt POST /wikis/wikiName in der XWiki-Plattform führt einen XAR-Import XWiki-Archiv durch, ohne dabei eine Authentifizierungs- oder Autorisierungsprüfung vorzunehmen. Ein nich...

CVE-2024-8529

CVE-2024-8529 LearnPress – Plugin LMS per WordPress = 4.2.7 - SQL Injection non autenticata tramite 'cfields' Descrizione Il plugin LearnPress – WordPress LMS Plugin per WordPress è vulnerabile a SQL Injection tramite il parametro 'cfields' dell'endpoint API REST...

Wp2Shell

wp2shell Esecuzione remota di codice pre-autenticazione nel core di WordPress. CVE-2026-60137 SQL Injection in WPQuery in combinazione con CVE-2026-63030 REST API Batch Route Confusion. Solo per scopi educativi e di ricerca sulla sicurezza autorizzata. Versioni interessate Le versioni di WordPres...

CVE-2024-27198_LAB

Laboratorio CVE-2024-27198 Descrizione TeamCity fornisce una pagina riservata agli amministratori per la gestione dei token che non è protetta da autenticazione. Ciò consente a un utente non autenticato di generare un token di accesso per l'utente amministratore se riesce a trovare l'ID di un...

CVE-2026-49060-Lab

CVE-2026-49060 - Hippoo Mobile App for WooCommerce Assegnazione di privilegi errata / Escalation dei privilegi Sintesi esecutiva Questa repository contiene un laboratorio Docker locale per riprodurre e validare CVE-2026-49060, una vulnerabilità di assegnazione dei privilegi errata che interessa i...

CVE-2025-9074-Docker-Desktop-API-Escape-PoC

🐚 docker-shell Un leggero script bash senza dipendenze che ti fornisce una shell interattiva emulata all'interno di un container Docker — usando solo curl, dd, od e awk. Nessun Python, nessun jq, nessun editor richiesto. Realizzato per ambienti in cui hai solo accesso shell grezzo e devi eseguire...

wp2shell-lab

mini-wp-rest Una reimplementazione compatta e senza dipendenze di una piccola parte dell'API REST di WordPress — sufficiente per servire una raccolta pubblica di post ed eseguire più sotto-richieste in un'unica chiamata. Utile per insegnare come il routing di WordPress, WPQuery e $wpdb si combina...

CVE-2026-77010

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation checks on its REST API routes and does not consistently enforce the per-class access code, allowing unauthenticated users to obtain a signed meeting join link for any classroom,...

CVE-2026-77007

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform any authorisation check on one of its REST API routes, allowing unauthenticated users to retrieve its stored settings, including the shared secret used to sign API requests to the connected...

CVE-2026-19430

The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its REST API routes, and the token identifying the requested content is forgeable client side, allowing unauthenticated users to list and download the contents of folders that were never published on the...

CVE-2026-77010

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin (through 1.0.3 ) fails to perform authorisation checks on its REST API routes and does not consistently enforce the per-class access code. This allows unauthenticated users to obtain a signed meeting join link for any classro...

EUVD-2026-68056

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation checks on its REST API routes and does not consistently enforce the per-class access code, allowing unauthenticated users to obtain a signed meeting join link for any classroom,...