840 matches found
CVE-2025-26159
CVE-2025-26159 This script may only be used in authorized environments where explicit permission has been granted. The author is not responsible for any misuse, damage, or consequences resulting from the use of this script. This script decodes, filters, and extracts cookies as part of the...
log4shell-example
Log4Shell Exploit Test The goal of this project is to demonstrate the log4j cve-2021-44228 exploit vulnerability in a spring-boot setup, and to show how to fix it. This project contains three submodules. One of these has vulnerable code, the other two are patched. How to use this project Run ./mv...
CVE-2026-62134
Contributor Insecure Direct Object References IDOR in Starter Templates = 4.7.5 versions...
EUVD-2026-76203
Contributor Insecure Direct Object References IDOR in Starter Templates = 4.7.5 versions...
CVE-2026-62134 WordPress Starter Templates plugin <= 4.7.5 - Insecure Direct Object References (IDOR) vulnerability
Contributor Insecure Direct Object References IDOR in Starter Templates = 4.7.5 versions...
CVE-2026-62134
An Insecure Direct Object References (IDOR) vulnerability was identified in the WordPress Starter Templates plugin (versions ≤ 4.7.5 ). The flaw allows a contributor-level authenticated user to manipulate objects they should not have access to, resulting in a low integrity impact (CVSS 4.3, MEDIU...
abhinavagarwal07.github.io
Chirpy Starter When installing the Chirpy theme through RubyGems.org, Jekyll can only read files in the folders data, layouts, includes, sass and assets, as well as a small part of options of the config.yml file from the theme's gem. If you have ever installed this theme gem, you can use the...
WordPress Starter Templates plugin <= 4.7.5 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Starter Templates versions = 4.7.5...
astro_CVE-2026-33532
Astro Starter Kit: Minimal root@kitploit: npm create astro@latest -- --template minimal 🧑🚀 Seasoned astronaut? Delete this file. Have fun! 🚀 Project Structure Inside of your Astro project, you'll see the following folders and files: root@kitploit: / ├── public/ ├── src/ │ └── pages/ │ └──...
CVE-2026-18843
The Beaver Builder Plugin Starter Version plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'noresultsmessage' nodepreview Parameter in all versions up to, and including, 2.11.0.1 due to insufficient input sanitization and output escaping. This makes it possible for...
EUVD-2026-68297
A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...
CVE-2026-82594
A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...
CVE-2026-82594
LogNet grpc-spring-boot-starter (up to version 5.2.0 ) contains an improper authorization flaw in its Annotation Processing component, exploitable over the network. The specific function affected is described as unknown. The attack requires low privileges and has high complexity , limiting practi...
CVE-2026-82594 LogNet grpc-spring-boot-starter Annotation Processing improper authorization
A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...
CVE-2026-82594 LogNet grpc-spring-boot-starter Annotation Processing improper authorization
A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...
Malicious code in optimizely-starter-kit-for-fastly-compute (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b7bcd65cbf07a90130de5e4a29fb72bc99badb287a1e1dc7373c288a1ae0be package.json declares preinstall: node index.js, causing index.js to run automatically on npm install. The script collects host identifiers...
MAL-2026-14138 Malicious code in optimizely-starter-kit-for-fastly-compute (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b7bcd65cbf07a90130de5e4a29fb72bc99badb287a1e1dc7373c288a1ae0be package.json declares preinstall: node index.js, causing index.js to run automatically on npm install. The script collects host identifiers...
CVE-2026-73997
Unauthenticated Denial of Service Attack in Starter Templates by Kadence WP = 2.3.3 versions...