TryHack3M-Bricks-Heist

cible : 10.201.6.98 énumération root@kitploit: nmap -A 10.201.6.98 comme il y a un wordpress nommé "brick by brick" et que le nom de cette salle est brick, c'est probablement là que nous pouvons trouver une vulnérabilité énumérons donc wordpress root@kitploit: wpscan --url https://bricks.thm...

CVE-2023-41425-RCE-WonderCMS-4.3.2

🚨 Инструмент эксплуатации RCE для WonderCMS CVE-2023-41425 Этот инструмент для наступательного тестирования безопасности, написанный на Python, автоматизирует эксплуатацию уязвимости удалённого выполнения кода RCE в WonderCMS 4.3.2 , а именно CVE-2023-41425. Он упрощает процесс создания...

raven

Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...

DC30-Badge-Challenge-Writeup

DC30-Badge-Challenge-Writeup Table of Contents 소개 도전 과제 1부: 메모 수집 도전 과제 2부: YИИEႱ에게 전화 걸기 도전 과제 2A: 앨리스 도전 과제 2B: 밥 도전 과제 2C: 캐럴 도전 과제 2D: 댄 도전 과제 2E: 이브 도전 과제 2F: 트레버 도전 과제 3부: 마지막 실마리 컨퍼런스에서 전화기를 놓쳤다면? 뒤돌아보며 소개 안녕하세요! 저는 Pete입니다 - 일명 Kybr - 그리고 이것은 DEF CON 30 배지 챌린지에 대한 제 공략기입니다. 올해 챌린지는 음악과 해커...

CVE-2024-43998

CVE-2024-43998 root@kitploit: Blogpoet = 1.0.2 - Autorisation manquante via blogpoetinstallandactivateplugins Publié : 2024-08-29 00:00:00 Classification : cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N cvss-score: 5.3 cve-id: CVE-2024-43998 cpe: cpe:2.3:a:blogpoet:blogpoet::::::::...

WordPress-XStore-theme-SQL-Injection

WordPress-XStore-theme-SQL-Injection CVE-2024-33559 Thème XStore - Injection SQL La CVE-2024-33551 est une vulnérabilité d'injection SQL découverte dans 8theme XStore, une plateforme e-commerce basée sur WordPress. Cette vulnérabilité permet aux attaquants d'exécuter des commandes SQL malveillant...

ngrev

ngrev Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run you...

CVE-2021-24499

CVE-2021-24499 Массовая эксплуатация CVE-2021-24499: неаутентифицированная загрузка, ведущая к удаленному выполнению кода в теме Workreap. AJAX-действия workreapawardtempfileuploader и workreaptempfileuploader не выполняли проверки nonce и не проверяли, что запрос исходит от действительного...

wpscvn

wpscvn est un outil pour les pentesteurs, propriétaires de sites web pour tester si leurs sites ont des plugins ou thèmes vulnérables L'auteur ne peut être tenu responsable de la mauvaise utilisation de cet outil, rappelez-vous que l'attaque de cibles sans consentement préalable est illégale et...

CVE-2025-6758

Real Spaces - Тема каталога недвижимости для WordPress ≤ 3.6 Неавторизованное повышение привилегий до администратора через imicagentregister 📝 Описание CVE-2025-6758 Оценка CVSS: 9.8 критическая Тема Real Spaces - WordPress Properties Directory Theme для WordPress уязвима к повышению привилегий...

CVE-2024-25600_Nuclei-Template

CVE-2024-25600Nuclei-Template Modèle Nuclei et informations sur le POC pour CVE-2024-25600 Description 📝 Le thème Bricks pour WordPress est vulnérable à une exécution de code à distance dans toutes les versions jusqu'à la version 1.9.6 incluse. Cela permet à des attaquants non authentifiés...

Newspaper Theme 6.4–6.7.1 - Privilege Escalation

Newspaper Theme versions 6.4 to 6.7.1 for WordPress lacked proper options access control through tdajaxupdatepanel, which led to a Privilege Escalation vulnerability. id: CVE-2016-10972 info: name: Newspaper Theme 6.4–6.7.1 - Privilege Escalation author: pussycat0x severity: critical description:...

ScoreMe Theme - Cross-Site Scripting

WordPress ScoreMe theme through 2016-04-01 contains a reflected cross-site scripting vulnerability via the s parameter which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal...

WordPress JNews Theme <8.0.6 - Cross-Site Scripting

WordPress JNews theme before 8.0.6 contains a reflected cross-site scripting vulnerability. It does not sanitize the catid parameter in the POST request /?ajax-request=jnews with action=jnewsbuildmegacategory. id: CVE-2021-24342 info: name: WordPress JNews Theme =8.0.6 to mitigate the XSS...

WordPress 15Zine <3.3.0 - Cross-Site Scripting

WordPress 15Zine before 3.3.0 is vulnerable to reflected cross-site scripting because the theme does not sanitize the cbi parameter before including it in the HTTP response via the cbsa AJAX action. id: CVE-2020-36510 info: name: WordPress 15Zine 3.3.0 - Cross-Site Scripting author: veshraj...

Yellow Pencil Visual Theme Customizer < 7.2.1 - Privilege Escalation

The WaspThemes Visual CSS Style Editor aka yellow-pencil-visual-theme-customizer plugin before 7.2.1 for WordPress allows ypoptionupdate CSRF, as demonstrated by use of ypremoteget to obtain admin access. id: CVE-2019-11886 info: name: Yellow Pencil Visual Theme Customizer 7.2.1 - Privilege...

WordPress tagDiv Composer < 3.5 - Authentication Bypass

The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag WordPress theme before 5.2.2, does not properly implement the Facebook login feature, allowing unauthenticated attackers to login as any user by just knowing their email address id:...

WordPress WP Child Theme Generator < 1.1.3 - Arbitrary File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in WEN Solutions WP Child Theme Generator.This issue affects WP Child Theme Generator- from n/a through 1.0.9. id: CVE-2023-47873 info: name: WordPress WP Child Theme Generator 1.1.3 - Arbitrary File Upload author: cysamu,Crux severity...

WordPress Jannah Theme <5.4.4 - Cross-Site Scripting

WordPress Jannah theme before 5.4.4 contains a reflected cross-site scripting vulnerability. It does not properly sanitize the options JSON parameter in its tiegetuserweather AJAX action before outputting it back in the page. id: CVE-2021-24364 info: name: WordPress Jannah Theme 5.4.4 - Cross-Sit...

WordPress CAS Theme <= 1.0.0 - Server-Side Request Forgery

The CAS WordPress theme through version 1.0.0 is vulnerable to Server-Side Request Forgery SSRF via the 'url' parameter in the getremotedata.php script. This vulnerability allows unauthenticated attackers to make the server perform requests to arbitrary URLs. id: CVE-2024-4399 info: name: WordPre...