wp2shell-vulnerability-scanner

ماسح WP2Shell أداة تدقيق أمني للقراءة فقط، غير تخريبية، تقوم بمسح تثبيتات ووردبريس بحثًا عن سلسلة الثغرات wp2shell. نظرة عامة ماسح WP2Shell هو أداة سطر أوامر بلغة bash تقوم بالبحث بشكل متكرر في شجرة الدلائل عن تثبيتات ووردبريس وتتحقق مما إذا كان كل موقع يشغل إصدارًا أساسيًا معرضًا لثغرات wp2shell...

CVE-2026-39492

CVE-2026-39492 — Scanner d'injection SQL aveugle pour WP Maps SQLi aveugle temporelle non authentifiée via contournement par backticks → extraction de la base de données Vue d'ensemble CVE-2026-39492 est une vulnérabilité d'injection SQL aveugle non authentifiée de sévérité critique CVSS 9.3 dans...

CVE-2024-51482-POC

ZoneMinder प्रमाणित समय-आधारित SQLi POC - CVE-2024-51482 ⚠️ केवल शैक्षिक और अधिकृत सुरक्षा अनुसंधान के लिए। इस उपकरण को उन प्रणालियों के विरुद्ध चलाना जिनके आप स्वामी नहीं हैं या जिनके परीक्षण के लिए आपके पास लिखित अनुमति नहीं है, अवैध है। विषय-सूची ZoneMinder प्रमाणित समय-आधारित SQLi POC -...

CVE-2024-13478

CVE-2024-13478 LTL Freight Quotes – TForce Edition = 5.6 AND error-based - WHERE, HAVING, O...

Fix-CVE-2026-60137-CVE-2026-63030-in-wordpress

Plugin Acyber Wordpress !WARNING CVE-2026-60137 और CVE-2026-63030 wp2shell के लिए अस्थायी आपातकालीन शमन wp2shell भेद्यता श्रृंखला के लिए अस्थायी आपातकालीन जोखिम न्यूनीकरण 🇬🇧 अंग्रेज़ी विवरण यह हल्का वर्डप्रेस प्लगइन क्रिटिकल wp2shell एक्सप्लॉइट श्रृंखला CVE-2026-60137 और CVE-2026-63030 के खिलाफ एक...

POC-AIOWPM-CVE-2026-19949

CVE-2026-19949 — Prueba de concepto documentada y reproducible en Docker Inyección SQL de segundo orden no autenticada en All-in-One WP Migration and Backup WordPress que escala a filtrado de la ai1wmsecretkey y, con ella, a ejecución remota de código RCE. Lee esto en: English · Español | ---|---...

CVE-2026-105920 Kusalkasilva Learning-Management-System Student Registration Endpoint student_signup.php sql injection

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file studentsignup.php of the component Student Registration Endpoint. This manipulation causes sql injection. The attack ma...

EUVD-2026-93414

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file studentsignup.php of the component Student Registration Endpoint. This manipulation causes sql injection. The attack ma...

CVE-2026-105920 Kusalkasilva Learning-Management-System Student Registration Endpoint student_signup.php sql injection

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file studentsignup.php of the component Student Registration Endpoint. This manipulation causes sql injection. The attack ma...

CVE-2026-105920

A SQL injection vulnerability exists in the Student Registration Endpoint of the Kusalkasilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2). The flaw is located within an unknown function in the student_signup.php file. This vulnerability allows for remote att...

CVE-2026-105919

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...

CVE-2026-76461

⚡ CVE-2026-76461 - حقن SQL حرج ثغرة حقن SQL حرجة قابلة للاستغلال عن بُعد في منطق تحليل البريد الإلكتروني في Cisco Secure Email Gateway، يمكن أن تؤدي...

CVE-2026-105919 Kusalkasilva Learning-Management-System Administrator Login Endpoint login.php mysql_query sql injection

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...

CVE-2026-105919 Kusalkasilva Learning-Management-System Administrator Login Endpoint login.php mysql_query sql injection

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...

CVE-2026-105919

A SQL injection vulnerability exists in the Administrator Login Endpoint of the Kusalkasilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2). The flaw is located in the mysql_query function within admin/login.php, where improper handling of the username and pass...

EUVD-2026-93381

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...

CVE-2026-105919 Kusalkasilva Learning-Management-System Administrator Login Endpoint login.php mysql_query sql injection

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...

wordpress-batch-rce-lab

wp2shell: ثغرة تنفيذ كود عن بُعد RCE في دفعات ووردبريس تحليل تقني لثغرة CVE-2026-63030، وهي خلل منطقي في نقطة نهاية الدفعات batch endpoint الخاصة بواجهة REST API في نواة ووردبريس، تسمح لطلب مجهول بالتنفيذ تحت مسار route وفحص صلاحيات يعودان لطلب مختلف، وتتسلسل إلى CVE-2026-60137 حقن SQL لتحقيق تنف...

CVE-2023-25813

CVE-2023-25813 CVE-2023-25813 भेद्यता पुनरुत्पादन - SQL Injection in Sequelize...

CVE-2026-105918

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...