5787 matches found
WordPress plugin Easy PayPal Events & Tickets 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
WordPress plugin Easy PayPal Events & Tickets 信任管理问题漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PT-2026-36874
Name of the Vulnerable Software and Affected Versions Easy PayPal Events & Tickets plugin for WordPress versions 1.3 and earlier Description A hardcoded authentication bypass exists in the QR code scanning functionality. Unauthenticated remote attackers can bypass hash verification by providing...
pentest-automation-framework
pentest-automation-framework Built this to speed up structure...
Lyussfyuring002
lyussfyuring002 web exploitation + OSINT toolkit for people...
IASS-ISP-ASN-Security-Scanner
💀 IASS — ISP ASN Security Scanner Automated reconnaissance &...
AutoStrike
Gemini Bug Bounty Find security vulnerabilities, get paid...
gemini-bug-bounty
Gemini Bug Bounty Find security vulnerabilities, get paid...
Exploit for Missing Authentication for Critical Function in Cpanel
cPanel-CVE-2026-41940-Scanner !Licensehttps://img.shields...
hunter-max-oss
hunter-max A bug-bounty research framework. Two pieces: 1...
CVE-2026-36764
A Server-Side Request Forgery SSRF in the /ureport/datasource/testConnection endpoint of SpringBlade v4.8.0 allows authenticated attackers to scan internal resources via a crafted GET request...
Exploit for CVE-2026-41940
cPanel/WHM Auth Bypass Scanner & Exploit Tool A Go command-li...
Exploit for CVE-2026-41940
cPanel/WHM Auth Bypass Scanner & Exploit Tool A Go command-li...
CVE-2026-36757
A Server-Side Request Forgery SSRF in the /plugins/name/upgrade-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request...
CVE-2026-36759
The CVE-2026-36759 entry describes a Server-Side Request Forgery (SSRF) in halo v2.22.14 affecting the /themes/{name}/upgrade-from-uri endpoint. authenticated attackers can issue a crafted GET request to scan internal resources. The provided data includes CVSS v3.1 metrics (base score 6.5, MEDIUM...
PT-2026-36118
A Server-Side Request Forgery SSRF in the /themes/-/install-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the Proxy process. An attacker can access internal services, retrieve sensitive cloud metadata, port-scan internal networks, or trigger internal-only endpoints by creating a cluster node with an...
ExploitSense
ExploitSense ExploitSense is a local-first vulnerability anal...