Lucene search
+L

25 matches found

Kitploit
Kitploit
added 2026/09/22 10:17 a.m.10 views

Wordpress-DOS-Attack-CVE-2018-6389

Wordpress-DOS-Attack-CVE-2018-6389 El archivo load-scripts.php, cuyo propósito es recuperar varios paquetes de JavaScript a través de una sola solicitud. root@kitploit: $ chmod +x Execute.sh $ ./Execute.sh ¡Cómo funciona! El problema radica en el archivo load-scripts.php, cuyo propósito es...

7.5CVSS7.9AI score0.82598EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/22 8:19 a.m.12 views

Wordpress-DOS

Exploit CVE-2018-6389 para sitios Wordpress Un pequeño script de DOS dirigido a una vulnerabilidad sin parchear en sitios Wordpress. Utiliza /wp-admin/load-scripts.php para solicitar scripts adicionales al servidor de alojamiento. Incluye una gran lista de scripts como carga útil de la solicitud...

7.5CVSS7.7AI score0.82598EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/21 4:47 p.m.12 views

CVE-2018-6389

CVE-2018-6389 Exploit CVE-2018-6389 Checker — una pequeña herramienta Python no destructiva que comprueba indicadores de la vulnerabilidad CVE‑2018‑6389 de WordPress realizando tres solicitudes controladas a load-scripts.php y analizando el tamaño de la respuesta, el tiempo y los patrones de toke...

7.5CVSS7.7AI score0.82598EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/21 4:41 p.m.12 views

CVE-2018-6389

CVE-2018-6389 Wordpress Exploit CVE-2018-6389 Exploit Can Down Any Wordpress site under 4.9.3 The flaw affects the load-scripts.php WordPress script, it receives a parameter called load About PoC A simple Script In Python With threading could allow anyone to take down most WordPress websites with...

7.5CVSS7.4AI score0.82598EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/21 4:13 p.m.7 views

wordpress-CVE-2018-6389

wordpress-CVE-2018-6389 Módulo de Metasploit para DOS de WordPress load-scripts.php CVE-2018-638...

7.5CVSS7.8AI score0.82598EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/21 3:41 p.m.7 views

wordpress-cve-2018-6389

WordPress-CVE-2018-6389 WordPress Core - 'load-scripts.php' Denegación de Servicio = 4.9.4 Fecha: 05/02/2018 Enlace del software: WordPress Versión: = 4.9.4 Probado en: KaLi Linux 2018.1 CVE: CVE-2018-6389 Descubierto por: Barak Tawily Exploit por: Javier Olmedo ¿CÓMO USARLO? Clona este repositor...

7.5CVSS7.8AI score0.82598EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/09/21 3:24 p.m.11 views

tvsz

CVE-2018-6389 PoC node js multisite with proxy This script is based on CVE-2018-6389, a rather insidious problem in Wordpress, which unfortunately will likely not be fixed by the team developing the platform, even though it has been known for quite some time. !!! IMPORTANT BEFORE YOU CONTINUE !!!...

7.5CVSS7.5AI score0.82598EPSS
SaveExploits12References2
Kitploit
Kitploit
added 2026/09/16 4:36 a.m.9 views

wordpress-fix-cve-2018-6389

wordpress-fix-cve-2018-6389 Regla Apache RewriteRule para mitigar un posible ataque DoS mediante el archivo wp-admin/load-scripts.php de Wordpress Divulgación inicial por Barak Tawily: https://baraktawily.blogspot.in/2018/02/how-to-dos-29-of-world-wide-websites.html...

7.5CVSS7.8AI score0.82598EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/15 9:54 p.m.10 views

Shiva

Shiva En primer lugar, mantén a Shiva en observación. Con el tiempo lo actualizaré hasta convertirlo en una suite completa de pruebas de estrés. Shiva está diseñado para realizar ataques de Denegación de Servicio DOS en sitios wordpress cargando todos los scripts de jquery a la vez a través de...

7.5CVSS7.7AI score0.82598EPSS
SaveExploits12References1
Hacker One
Hacker One
added 2020/01/08 10:08 p.m.175 views

Ian Dunn: Dos https://iandunn.name/ via CVE-2018-6389 exploitation

Similar to 752010 Detail:- There is possibility in /wp-admin/load-scripts.php script to generate large 3Mb amount of data via simple non-authenticated request to server. The vulnerability is registered as https://vulners.com/cve/CVE-2018-6389 Detailed attack scenario is described for example here...

5CVSS0.5AI score0.82598EPSS
SaveExploits12
Hacker One
Hacker One
added 2019/12/07 4:20 a.m.421 views

Yelp: DoS of https://blog.yelp.com/ and other WP instances via CVE-2018-6389

Description: There is possibility in /wp-admin/load-scripts.php script to generate large 3Mb amount of data via simple non-authenticated request to server. The vulnerability is registered as https://vulners.com/cve/CVE-2018-6389 Details: Detailed attack scenario is described for example here:...

5CVSS0.6AI score0.82598EPSS
SaveExploits12
Hacker One
Hacker One
added 2019/12/05 2:58 p.m.237 views

Nord Security: DoS of https://nordvpn.com/ via CVE-2018-6389 exploitation

There is possibility in /wp-admin/load-scripts.php script to generate large 3Mb amount of data via simple non-authenticated request to server. The vulnerability is registered as https://vulners.com/cve/CVE-2018-6389 Details Detailed attack scenario is described for example here:...

5CVSS7.4AI score0.82598EPSS
SaveExploits12
Hacker One
Hacker One
added 2019/09/13 2:58 p.m.377 views

OLX: load scripts DOS vulnerability

1 vulnerability description WordPress allows users to load multiple JS files and CSS files through load-scripts.php files at once. For example, https://wpwebsite.com/wp-admin/load-scripts.php?c=1&load%5B%5D=jquery-ui-core,editor&ver=4.9.1, file load-scripts.php will load jquery-ui-core and editor...

5CVSS0.1AI score0.82598EPSS
SaveExploits12
Hacker One
Hacker One
added 2019/09/07 11:48 p.m.271 views

FormAssembly: scripts loader DOS vulnerability

1 vulnerability description WordPress allows users to load multiple JS files and CSS files through load-scripts.php files at once. For example, https://wpwebsite.com/wp-admin/load-scripts.php?c=1&load%5B%5D=jquery-ui-core,editor&ver=4.9.1, file load-scripts.php will load jquery-ui-core and editor...

5CVSS0.1AI score0.82598EPSS
SaveExploits12
Hacker One
Hacker One
added 2019/09/07 11:24 p.m.229 views

MariaDB: scripts loader (denial of service) vulnerability

1 vulnerability description WordPress allows users to load multiple JS files and CSS files through load-scripts.php files at once. For example, https://wpwebsite.com/wp-admin/load-scripts.php?c=1&load=jquery-ui-core,editor&ver=4.9.1, file load-scripts.php will load jquery-ui-core and editor files...

5CVSS0.2AI score0.82598EPSS
SaveExploits12
Hacker One
Hacker One
added 2018/04/09 9:10 p.m.455 views

LocalTapiola: DoS of www.lahitapiolarahoitus.fi via CVE-2018-6389 exploitation

Description There is possibility in /wp-admin/load-scripts.php script to generate large 3Mb amount of data via simple non-authenticated request to server. The vulnerability is registered as https://vulners.com/cve/CVE-2018-6389 Details Detailed attack scenario is described for example here:...

5CVSS0.2AI score0.82598EPSS
SaveExploits12
seebug.org
seebug.org
added 2018/02/07 12:00 a.m.206 views

WordPress Core - 'load-scripts.php' Denial of Service(CVE-2018-6389)

According to wordpress.com, the WordPress platform powers 29% of the worldwide internet websites. In this article I am going to explain how Denial of Service can easily be caused to almost any WordPress website online, and how you can patch your WordPress website in order to avoid this...

5CVSS7.7AI score0.82598EPSS
SaveExploits12
GithubExploit
GithubExploit
added 2018/02/06 3:16 p.m.21 views

Exploit for Uncontrolled Resource Consumption in Wordpress

CVE-2018-6389 Wordpress Exploit CVE-2018-6389 Exploit Can Dow...

7.5CVSS7AI score0.82598EPSS
SaveExploits12
The Hacker News
The Hacker News
added 2018/02/05 12:42 a.m.134 views

Unpatched DoS Flaw Could Help Anyone Take Down WordPress Websites

A simple yet serious application-level denial of service DoS vulnerability has been discovered in WordPress CMS platform that could allow anyone to take down most WordPress websites even with a single machine—without hitting with a massive amount of bandwidth, as required in network-level DDoS...

7.7AI score0.82598EPSS
SaveExploits12
Packet Storm
Packet Storm
added 2018/02/05 12:00 a.m.207 views

WordPress Core load-scripts.php Denial Of Service

import requests import sys import threading import random import re import argparse host='' headersuseragents= requestcounter=0 printedMsgs = def printMsgmsg: if msg not in printedMsgs: print "\n"+msg + " after %i requests" % requestcounter printedMsgs.appendmsg def useragentlist: global...

7.5AI score0.82598EPSS
SaveExploits12
Rows per page
Query Builder