4771 matches found
Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
The Uncanny Automator - Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.0.2. This is due to addrole and userrole functions missing proper capability checks performed through the...
lk_scraper
LinkedIn Scraper Scrapes Any LinkedIn Data Installation $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a Selenium server $ docker run -d -...
CVE-2025-64446-Exploit
CVE-2025-64446-Exploit CVE-2025-64446 exploit on fortiweb waf whit this exploit you can crate user and password . hwo to runing ? python3 exploitforti.py targets.txt python3 exploitforti.py 192.168.1.1 python3 exploitforti.py 192.168.1.1:8443 python3 exploitforti.py https://192.168.1.1:8443 smape...
surf
Surf - Escalate your SSRF vulnerabilities on Modern Cloud Environments surf allows you to filter a list of hosts, returning a list of viable SSRF candidates. It does this by sending a HTTP request from your machine to each host, collecting all the hosts that did not respond, and then filtering th...
archerysec
Support. Your generous donations will keep us motivated. Paypal: Archery Overview of the tool Note Requirements OpenVAS OWASP Zap Burp Scanner SSLScan Nikto NMAP Vulners Installation Windows Installation Note on installation for developers and contributors Note on manual and automated installatio...
EUVD-2026-112924
Incorrect Authorization CWE-863 in Elastic Cloud Enterprise ECE can lead to unauthorized modification of platform-level settings via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user with read-only access to the platform can change an installation-wide accoun...
CVE-2022-24734
CVE-2022-24734 PoC An RCE can be obtained on MyBB's Admin CP in Configuration - Add New Setting. The user must have a rights to add or update setting. This is tested on MyBB 1.8.29. Sources: https://github.com/mybb/mybb/ https://vulners.com/cve/CVE-2022-24734...
CVE-2026-47100-Analysis-Lab
CVE-2026-47100 — FunnelKit / Funnel Builder for WooCommerce Checkout Stored XSS Lab Local Docker lab for reproducing CVE-2026-47100 in a safe, least-harm way. This lab compares a vulnerable FunnelKit version against a patched version and verifies the behavior using a harmless JavaScript...
CVE-2018-8414-POC
CVE-2018-8414 POC Windows Shell Package Setting Remote Code Execution Vulnerability Since : Windows 10 Version 1703 to 1803 / Windows Server Version 1709 to 1803 Note : Some time the exploit fail depending of the file location default policy settings, so for that just copy the file in the Package...
tapodate
tapodate Uses https://github.com/hacefresko/CVE-2021-4045 exploit to set the date and other commands to an offline Tapo C200...
CVE-2026-99196
In the Linux kernel, the following vulnerability has been resolved: net: au1000: move setting of netops to fix crash au1000probe calls au1000miiprobe, which connects the PHY, before dev-netdevops is assigned. phyattachdirect - phylinktopoaddphy reads dev-netdevops through netdevneedopslock since...
CVE-2026-116236
A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this issue is the function plugininit of the file /tmp/uploadfiles of the component PPPoE WAN Setting Handler. Such manipulation of the argument pppdoptions leads to unrestricted upload. The attack may be launched remotel...
CVE-2026-116236 Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload
A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this issue is the function plugininit of the file /tmp/uploadfiles of the component PPPoE WAN Setting Handler. Such manipulation of the argument pppdoptions leads to unrestricted upload. The attack may be launched remotel...
EUVD-2026-109682
A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this issue is the function plugininit of the file /tmp/uploadfiles of the component PPPoE WAN Setting Handler. Such manipulation of the argument pppdoptions leads to unrestricted upload. The attack may be launched remotel...
CVE-2026-116236
A vulnerability exists in Oray Pugongying X5 Pro 7.6.1 within the PPPoE WAN Setting Handler component. Specifically, the plugin_init function in the /tmp/upload_files file is susceptible to a flaw where manipulation of the pppd_options argument leads to unrestricted upload . This vulnerability ca...
PT-2026-123216
A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this issue is the function plugin init of the file /tmp/upload files of the component PPPoE WAN Setting Handler. Such manipulation of the argument pppd options leads to unrestricted upload. The attack may be launched...
Secure Integrated Sensing and Communications with Movable Beyond-Diagonal RIS
In integrated sensing and communication ISAC, when the sensed target is itself an eavesdropper, the illumination required for sensing coincides with the leakage that secrecy must suppress. This paper shows how a beyond-diagonal reconfigurable intelligent surface BD-RIS with movable elements...
EUVD-2026-108590
The Essential Addons for Elementor WordPress plugin before 6.8.7 does not validate the HTML tag setting of some of its widgets before using it to build markup, which could allow users with the author role and above to inject iframe and form elements into published pages...
DEBIAN-CVE-2026-89419
OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/ident - in other words, not using the specific maintenance endpoint...