CVE-2024-28000

LiteSpeed Cache 权限提升 PoC - CVE-2024-28000 🎤 自述文件翻译 English فارسی 📸 截图 💎 介绍 该仓库包含针对 LiteSpeed Cache WordPress 插件中发现的一个关键权限提升漏洞的概念验证（PoC）。该漏洞编号为 CVE-2024-28000，允许未经授权的用户通过利用弱安全哈希获得 WordPress 站点的管理员级别访问权限。 💀 漏洞概述 LiteSpeed Cache 插件的用户模拟功能由一个弱且可预测的安全哈希保护。此 PoC 演示了攻击者如何暴力破解该安全哈希，从而在目标 WordPress...

CVE-2026-9242

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to Authentication Bypass via Insufficient Verification of Data Authenticity in all versions up to and including 6.0.8.6. This is due to the PayPal IPN callback handler...

EUVD-2020-20197

Malware in sbrugna...

EUVD-2015-7927

Malware in sbrugna...

CVE-2025-3530

The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to product price manipulation in all versions up to, and including, 5.1.2. This is due to a logic flaw involving the inconsistent use of parameters during the cart addition process. The plugin uses the parameter 'producttmptwo'...

Exploit for Incorrect Privilege Assignment in Litespeedtech Litespeed_Cache

LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000 Thi...

CVE-2016-10844

The chcpass script in cPanel before 11.54.0.4 reveals a password hash SEC-77...

RHEL 5 / 6 : php53 and php (RHSA-2012:0019)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0019 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. It was found that the hashing routine used by PHP...

CVE-2001-1017

rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while updating the original file, which could allow local users to gain privileges by reading the copied file while rmuser is running, obtain the password hashes, and crack the passwords...