c0ntextomy

c0ntextomy an informal fallacy and a type of false attribution in which a passage is removed from its surrounding matter in such a way as to distort its intended meaning Wikipedia - Contextomy A Proof of Concept demonstrating the vulnerability with a debug session hijack, remote code execution, a...

CVE-2025-34077

CVE-2025-34077 Unauthenticated Admin Session Hijack - Pie Register Plugin ≤ 3.7.1.4 📌 Description This exploit targets a vulnerability in the Pie Register WordPress plugin versions ≤ 3.7.1.4, allowing unauthenticated session hijacking of admin accounts. 🛡️ This tool is for authorized testing and...

soplanning-1.52-exploits

Exploit Title: SOPlanning v1.52.00 'groupesave.php' XSS Reflected XSS Application: SOPlanning Version: 1.52.00 Date: 4/22/24 Exploit Author: Joseph McPeters Liquidsky Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/ Tested on: Linux CVE:...

CVE-2023-41425-RCE-WonderCMS-4.3.2

🚨 WonderCMS RCE Exploit Tool CVE-2023-41425 This Python-based offensive security tool automates the exploitation of a Remote Code Execution RCE vulnerability in WonderCMS 4.3.2 , specifically CVE-2023-41425. It streamlines the process of crafting a malicious ZIP theme module and delivering a...

Parse Server < 8.6.21 / 9.x < 9.5.2 - Session Token Exfiltration

Parse Server 8.6.21 / 9.x 9.5.2 contains an information disclosure vulnerability caused by improper handling of the redirectClassNameForKey query parameter, letting authenticated or unauthenticated attackers exfiltrate session tokens, exploit requires ability to create or update an object with a...

XWiki Platform Distribution Flavor Main - Cross-Site Scripting

XWiki Platform Distribution Flavor Main versions prior to 17.6.0 are vulnerable to reflected cross-site scripting XSS due to improper sanitization of user-supplied input in the extensionId parameter. An attacker can exploit this issue by injecting malicious JavaScript, which will be executed in t...

YesWiki < 4.5.4 - Cross-Site Scripting

YesWiki 4.5.4 contains a reflected cross-site scripting caused by unsanitized idformulaire parameter in /?BazaR endpoint, letting attackers steal cookies and hijack sessions, exploit requires user to click malicious link. id: CVE-2025-46550 info: name: YesWiki 4.5.4 - Cross-Site Scripting author:...

PyPsPipeJack

PyPsPipeJack This tool is the continuation of my other tool, OpenPsPipeJack. This one is python based and works on Linux largely using Impacket. In summary, if you have local admin on a remote host, you can connect to remote PowerShell sessions on that host and execute commands within those...

moodle-cve

Challenge creation Inspiration moodle CVE-2025-26529: posoning admin logs to full admin account takeover @ref: https://www.youtube.com/watch?v=dhVF6hQUzWU @ref: https://github.com/NightBloodz/moodleTestingEnv @ref: https://medium.com/@Nightbloodz/admin-account-takeover-in-moodle-093708a0f749...

CVE-2026-55184

EspoCRM is an open source customer relationship management application. Prior to 9.3.9, a user with Email Template or PDF Template edit permission can store crafted HTML that bypasses moderateSanitizeHtml. When another user opens the template in edit mode and clientCspDisabled is true, the stored...

CVE-2026-55184

The open source customer relationship management application EspoCRM is vulnerable to Stored XSS in wysiwyg template fields prior to version 9.3.9 . A user with permissions to edit Email Templates or PDF Templates can inject crafted HTML that bypasses the moderateSanitizeHtml() function. If anoth...

Kotaemon-CVE-2025-56526-56527-disclosure

Kotaemon CVE-2025-56526 & CVE-2025-56527 Public Disclosure Stored Cross-Site Scripting in the Kotaemon Information Panel combines with plaintext credential storage in localStorage, enabling full session compromise from a single malicious PDF upload. Executive Summary Affected Product / Versions :...

CVE-2026-91013

Adobe Commerce is affected by a stored Cross-site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this by injecting malicious scripts into vulnerable form fields . When a victim views the affected page, the malicious JavaScript may execute in their browser, potentially allowing th...

CVE-2026-84734

The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before authenticating them, allowing unauthenticated attackers to obtain a session as the administrator account the Mindstien Quick Login WordPress...

CVE-2026-103964

The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the 'firstname' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the administrator's full...

EUVD-2026-96061

The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the 'firstname' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the administrator's full...

CVE-2026-103964 Download Manager <= 3.3.71 - Authenticated (Subscriber+) Sensitive Information Exposure via Email Template Token Injection in 'first_name' Profile Field Token Injection into Suspension Email

The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the 'firstname' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the administrator's full...

CVE-2026-103964

The Download Manager plugin for WordPress (versions up to and including 3.3.71 ) is vulnerable to Sensitive Information Exposure via Email Template Token Injection in the first_name parameter. An authenticated attacker with subscriber-level access or higher can exploit this by triggering a Suspen...

CVE-2026-103964: Exposure of Sensitive Information to an Unauthorized Actor

The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the 'firstname' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the administrator's full...

CVE-2026-92414

A flaw was found in jackrabbit-webdav. The WebDAV Web Distributed Authoring and Versioning server attaches a cached authenticated session when request header tokens—such as lock, transaction, or subscription identifiers—match, without verifying user credentials. An unauthenticated remote attacker...