4705 matches found
CVE-2023-2916
CVE-2023-2916 CVE-2023-2916 PoC WordPress็จInfiniteWP Clientใใฉใฐใคใณ๏ผใใผใธใงใณ1.11.1ไปฅๅ๏ผใซใฏใๆฉๅฏๆ ๅ ฑๆผๆดฉใฎ่ๅผฑๆงใๅญๅจใใพใใใใฎ่ๅผฑๆงใซใใใ่ณผ่ชญ่ ใฌใใซใฎๆจฉ้ไปฅไธใๆใค่ช่จผๆธใฟๆปๆ่ ใใ่จญๅฎ่ฉณ็ดฐใๅซใๆฉๅฏใใผใฟใๆฝๅบใงใใๅฏ่ฝๆงใใใใพใใใใฎ่ๅผฑๆงใฎๆช็จใฏใใใฉใฐใคใณใไบๅใซ่จญๅฎใใใฆใใชใๅ ดๅใซใฎใฟๅฏ่ฝใงใใๅฅใฎไปปๆใฎใใฉใฐใคใณใคใณในใใผใซใใใณๆๅนๅใฎ่ๅผฑๆงใจ็ตใฟๅใใใใจใใตใคใใฎใชใขใผใ็ฎก็ใๆจฉ้ๆๆ ผใซใคใชใใๅฏ่ฝๆงใใใใพใใ...
CVE-2019-1653
CVE-2019-1653 Cisco Small Business RV320 ใใใณ RV325 Dual Gigabit WAN VPN ใซใผใฟใผใฎ Web ใใผใน็ฎก็ใคใณใฟใผใใงใผในใซใใใ่ๅผฑๆงใซใใใ่ช่จผใใใฆใใชใใชใขใผใๆปๆ่ ใๆฉๅฏๆ ๅ ฑใๅๅพใงใใๅฏ่ฝๆงใใใใพใใ ใใฎใทใณใใซใช Python ในใฏใชใใใฏใCVE-2019-1653 ใฎ่ชๅใจใฏในใใญใคใใงใใใCisco Small Business RV320 ใใใณ RV325 ใใใคในใซๆๆใใพใใๆช็จใใใๆๅใฎ่ๅผฑๆงใฏ...
djangohunter
Djangohunter ๆจๅจๅธฎๅฉ่ฏๅซ้่ฏฏ้ ็ฝฎ็Djangoๅบ็จ็จๅบ๏ผ่ฟไบๅบ็จ็จๅบๆญฃๅจๆด้ฒๆๆไฟกๆฏใ https://www.reddit.com/r/django/comments/87qcf4/28165thousanddjangorunningserversareexposed/ https://twitter.com/6ix7ine/status/978598496658960384?lang=en ไฝฟ็จๆนๆณ root@kitploit: Usage: python3 djangohunter.py --key shodan Dorks: 'DisallowedHost',...
CVE-2024-1209
CVE-2024-1209 LearnDashใซใใใ่ชฒ้ก็ต็ฑใฎๆฉๅฏๆ ๅ ฑๆผๆดฉใ่ช่จผใใใฆใใชใ่จชๅ่ ใฏใขใใใญใผใใใใ่ชฒ้กใ้ฒ่ฆงใปใใฆใณใญใผใใงใใพใใ ่ๅผฑๆง: CVE-2024-1209 ่ชฒ้ก็ต็ฑใฎๆฉๅฏๆ ๅ ฑๆผๆดฉ CVSS: 5.3 Medium ใฝใใใฆใงใข: LearnDash sfwd-lms ๅฝฑ้ฟใๅใใใใผใธใงใณ: = 4.10.1 ใใใ้ฉ็จๆธใฟใใผใธใงใณ: 4.10.2 ้จๅ็ใซ, 4.10.3 ๅฎๅ จใซ ้็บ่ : LearnDash ็ ็ฉถ่ : Karl Emil Nikka, Nikka Systems ๅ ฌ้ๆฅ: 2024-02-05 ๆ็ตๆดๆฐๆฅ: 2024-02-05...
TCExam <= 14.8.1 - Sensitive Information Exposure
When installed following the default/recommended settings, TCExam = 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which includes sensitive database backup files. id: CVE-2021-20114 info: name: TCExam = 14.8.1 - Sensitive Information Exposure author: push4d severity:...
Lokomedia CMS - Local File Inclusion
A Local File Inclusion LFI vulnerability exists in Lokomedia CMS. The application allows an attacker to include files on the server that should not be accessible, potentially exposing sensitive information. id: CVE-2010-2018 info: name: Lokomedia CMS - Local File Inclusion author: r3Y3r53 severit...
Jira - Local File Inclusion
Jira before version 7.13.4, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1, allows remote attackers to access files in the Jira webroot under the META-INF directory via local file inclusion. id: CVE-2019-8442 info: name: Jira - Local File Inclusion author:...
LiteSpeed Cache <= 6.4.1 - Sensitive Information Exposure
The LiteSpeed Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.4.1 through the debug.log file that is publicly exposed. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...
Label Studio - Sensitive Information Exposure
An attacker can construct a filter chain to filter tasks based on sensitive fields for all user accounts on the platform by exploiting Django's Object Relational Mapper ORM. Since the results of query can be manipulated by the ORM filter, an attacker can leak these sensitive fields character by...
LearnPress < 4.2.7.4 - Course Material - Information Disclosure
LearnPress โ WordPress LMS Plugin contains a sensitive information exposure caused by insecure handling in class-lp-rest-material-controller.php, letting unauthenticated attackers extract paid course material, exploit requires no authentication. id: CVE-2024-11868 info: name: LearnPress 4.2.7.4 -...
CVE-2025-22828
CVE-2025-22828 ๐ ์ค๋ช Apache CloudStack 4.16.0 ์ด์ ๋ฒ์ ์๋ ๋ฆฌ์์ค UUID๋ฅผ ์๊ณ ์๋ ์ฌ์ฉ์๊ฐ ์ ๊ทผ ๊ถํ์ด ์๋ ๋ฆฌ์์ค์ ๋ํด ๋๊ธ์ฃผ์์ ์ฝ๊ฑฐ๋ ์ถ๊ฐํ ์ ์๊ฒ ํ๋ ์์๋ ์ ๊ทผ ์ ์ด ๋ฌธ์ ๊ฐ ์์ต๋๋ค. UUID๋ ์ฌ์ฉ์๊ฐ ์ฒ์์ ๋ฆฌ์์ค์ ์ ๊ทผํ ์ ์์์ง๋ง ๊ด๋ฆฌ ์ ํ์ผ๋ก ์ธํด ๋์ค์ ์ ๊ทผ ๊ถํ์ ์์คํ๋ ๊ฒฝ์ฐ ๋ฑ ์ ํ๋ฆฌ์ผ์ด์ ์ ์ฌ๋ฌ ๋ถ๋ถ์์ ๋ ธ์ถ๋ ์ ์์ต๋๋ค. ๐ ์ทจ์ฝ์ ์ธ๋ถ ์ ๋ณด ์ ํ: ์์๋ ์ ๊ทผ ์ ์ด ์ํฅ: ์ฃผ์ ๋ฐ ์ ์ฌ์ ์ผ๋ก ๋ฏผ๊ฐํ ๋ฐ์ดํฐ์ ๋ํ ๋ฌด๋จ ์ ๊ทผ ์ํฅ์ ๋ฐ๋ ๋ฒ์ :...
CVE-2024-9014
์ด ๊ฒ์๋ฌผ์ EQSTLab์์ ๋ฐํํ ์ฐ๊ตฌ ๊ธฐ์ฌ์ ๋๋ค. CVE-2024-9014 โ CVE-2024-9014 ๋ฏผ๊ฐ ์ ๋ณด ๋ ธ์ถ PoC โ ์ค๋ช CVE-2024-9014 : pgAdmin4 ๋ฏผ๊ฐ ์ ๋ณด ๋ ธ์ถ ์ค๋ช : pgAdmin 8.11 ๋ฐ ์ด์ ๋ฒ์ ์ OAuth2 ์ธ์ฆ์ ๋ณด์ ๊ฒฐํจ์ด ์์ต๋๋ค. ์ด ์ทจ์ฝ์ ์ผ๋ก ์ธํด ๊ณต๊ฒฉ์๊ฐ ํด๋ผ์ด์ธํธ ID์ ์ํฌ๋ฆฟ์ ํ๋ํ์ฌ ์ฌ์ฉ์ ๋ฐ์ดํฐ์ ๋ฌด๋จ ์ก์ธ์คํ ์ ์์ต๋๋ค. PoC ๋ช ๋ น์ด root@kitploit: curl URLTOTEST/login?next=/ | grep -o...
CVE-2024-1302---Badgermeter-moni-tool-Sensitive-information-exposure
CVE-2024-1302 --- Badgermeter moni tool - ๋ฏผ๊ฐํ ์ ๋ณด ๋ ธ์ถ https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool CVE-2024-1302: 7.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N | CWE-200. ์ํํธ์จ์ด ๋งํฌ : https://www.s-can.at/en/product/monitool/ ๋ฒ์ : 4.6.3...
CVE-2026-18887
IBM i 7.3 through 7.6 are affected by a sensitive information exposure vulnerability in the Portable Application Solutions Environment (PASE) , classified as CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). An authenticated attacker with low privileges can access process info...
CVE-2023-47529
CVE-2023-47529 Cloud Templates & Patterns collection = 1.2.2 - ้่ฟๆฅๅฟๆไปถๆณ้ฒๆๆไฟกๆฏ root@kitploit: ๆ่ฟฐ๏ผ WordPress ๆไปถ Cloud Templates & Patterns collection ๅจ 1.2.2๏ผๅซ๏ผๅไนๅ็ๆๆ็ๆฌไธญ๏ผๅ ๆฅๅฟๆไปถๅ็งฐๅฏ้ขๆต่ๅญๅจๆๆไฟกๆฏๆณ้ฒๆผๆดใๆช็ป่บซไปฝ้ช่ฏ็ๆปๅป่ ๅฏไปฅๅๆญคๆๅๆๆๆฐๆฎใ ไธฅ้ๆง๏ผไธญ็ญ CVE ID: CVE-2023-47529 CVSS Score: 5.3 CVSS Metrics:...
CVE-2023-5359
CVE-2023-5359 - W3 Total Cache ๅนณๆไฟๅญใฎ่ๅผฑๆง ่ชฌๆ CVE-2023-5359 ใฏใWordPress ใใฉใฐใคใณ W3 Total Cache ใฎใใผใธใงใณ โค 2.7.5 ใซๅฝฑ้ฟใใๅนณๆไฟๅญใฎ่ๅผฑๆงใงใใใใฎ่ๅผฑๆงใซใใใใชใขใผใใฎๆปๆ่ ใฏใๅ ฌ้ใใใฆใใๆๅทๅใใใฆใใชใ PHP ใใกใคใซใซไฟๅญใใใๆฉๅฏใฎ่ช่จผๆ ๅ ฑใซใขใฏใปในใงใใพใใ ๆทฑๅปๅบฆ CVSS ในใณใข : 7.5 ้ซ ใใฏใฟใผ : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N ใฟใคใ : ๆฉๅฏๆ ๅ ฑใฎ้ฒๅบ ๆ่ก็ใช่ๅผฑๆง ๆ นๆฌๅๅ W3 Total...
CVE-2026-75133
Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...
EUVD-2026-68608
Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...
CVE-2026-75133
The Keep Backup Daily WordPress plugin (versions before 2.1.4 ) contains a sensitive information exposure vulnerability in the kbd_cron_process parameter. The parameter is publicly accessible without authentication, allowing an unauthenticated attacker over the network to trigger a full MySQL dat...
CVE-2026-75133 Keep Backup Daily WordPress Plugin < 2.1.4 Sensitive Information Exposure via kbd_cron_process
Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...