8732 matches found
StalkPhish
StalkPhish project has been renamed StalkPhish-OSS You can find the new project page here: https://github.com/t4d/StalkPhish-OSS Online StalkPhish SaaS You can found our online StalkPhish SaaS application on https://www.Stalkphish.io and use the REST API available for free. Join us You can join u...
CVE-2026-52680_exploit
CVE-2026-52680 — Apache Kyuubi REST Batch Path-Traversal Arbitrary File Write Unauthenticated arbitrary file write in Apache Kyuubi's REST API via the multipart batch-submission endpoint. POST /api/v1/batches multipart/form-data writes the resourceFile part to $KYUUBIHOME/work/upload// using the...
CVE-2018-7690
CVE-2018-7690 The SSC REST API contains Insecure Direct Object Reference IDOR vulnerabilities that allow authenticated users access to arbitrary details of the Local and LDAP users via POST method and to arbitrary details of other user's Fortify projects via GET method. Exploit-DB publication at...
CVE-2026-14281
CVE-2026-14281 — WAWP Automation Web Platform Unauthenticated Privilege Escalation Python 3 PoC for CVE-2026-14281 in the WordPress plugin Automation Web Platform automation-web-platform — WAWP / Notifications & OTP for WooCommerce. PoCbit Listed on PoCbit — community catalog:...
CVE-2022-1598
CVE-2022-1598 WPQA where ID is numeric and can be bruteforced! Nuclei Template: CVE-2022-1598.yaml VIDEO POC: https://www.youtube.com/watch?v=MbhiQKWvivQ References: https://wpscan.com/vulnerability/0416ae2f-5670-4080-a88d-3484bb19d8c8 https://vulners.com/cve/CVE-2022-1598...
reburp
reburp Burp's API/MCP is LIMITED - reburp is a Burp Suite extension that exposes the full Montoya API as a locally served openapi REST API, optimized for your AI agents. Issues | Discussions What is reburp reburp turns Burp Suite into something you can script. It loads as a Java extension and...
CVE-2026-8181
CVE-2026-8181 - Burst Statistics Authentication Bypass Exploit Python 2.7 exploit for the Burst Statistics plugin vulnerability CVE-2026-8181 that allows unauthenticated attackers to bypass REST API authentication, retrieve application passwords, and create new administrator users on vulnerable...
CVE-2018-7691
CVE-2018-7691 The SSC REST API contains Insecure Direct Object Reference IDOR vulnerabilities that allow authenticated users access to arbitrary details of the Local and LDAP users via POST method and to arbitrary details of other user's Fortify projects via GET method. Exploit-DB publication at...
wpUsersScan
wpUsersScan About wpUsersScan Enumerate the users list of the wordpress websites through the REST API / CVE-2017-5487,WordPress 4.7.1 - Username Enumeration Usage $ python wpUsersScan.py URL How to install Clone Clone the repository with: $ git clone https://github.com/R3K1NG/wpUsersScan.git $ cd...
CVE-2025-6085
Make Connector shello.php ".shellexec$GET"cmd".""; ? EOF curl -k -X POST https://lab1.hacker/wp-json/wp/v2/media \ -H "IWC-API-KEY: YOURFRIENDLYKEYHERE" \ -F "[email protected]" \ -F "title=Hacker World" \ -F "description=A test file" \ -F "caption=Hacker Caption" \ Leveraging the shell once...
CVE-2025-23968
AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o The AI Bud plugin exposes a REST API endpoint /wp-json/ai-buddy/v1/wp/attachments that allows uploading files to the WordPress media library. The endpoint’s file logic contains file renaming functionality that triggers after file...
corelight-client
.. corelight-client: .. Version number is filled in automatically. .. |version| replace:: 1.5.22 ==================================== Corelight Sensor Command Line Client .. contents:: Overview This tool provides a command-line client for the Corelight Sensor , aBro appliance engineered from the...
CVE-2021-40539
CVE-2021-40539 CVE-2021-40539: ADSelfService Plus RCE Vulnerability I: Vulnerability Description ZOHO ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. CVE-2021-40539 Zoho ManageEngine...
sudowp-crowdsignal-forms
SudoWP Crowdsignal Forms This is a SudoWP security fork of the original Crowdsignal Forms plugin. !WARNING Security Notice : The original "Crowdsignal Forms" plugin versions = 1.7.2 contains a critical Missing Authorization vulnerability CVE-2025-69015 allowing authenticated users to modify polls...
CVE-2025-11771
Exploit: Unauthenticated Sale Record Creation Browser console fetch'http://localhost/wordpress/wp-json/tokenico/create-sale-record', method: 'POST', headers: 'Content-Type': 'application/x-www-form-urlencoded' , body: new URLSearchParams networkId: "137", presaleKey: "TESTKEY1234", createdAt:...
CVE-2026-110904
ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call...
CVE-2026-110904
ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call...
CVE-2026-110904
ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call...
CVE-2026-110904
ApostropheCMS versions before 4.33.0 are vulnerable to an authentication bypass that allows unauthorized reading of pages via the REST API. The vulnerability can be triggered by making a call to the /api/v1/@apostrophecms/page?all=1 endpoint. This issue is associated with CWE-863 (Incorrect Autho...
