CVE-2023-32117

CVE-2023-32117 Integrate Google Drive ","username":"admin","name":"admin","email":"[email protected]","role":"Administrator","folders":,"id":2,"avatar":"img alt='' src="http:///%5C/%5C/2.gravatar.com%5C/avatar%5C/b58996c504c5638798eb6b511e6f49af?s=32&d=mm&r=g"...

Nextjs-middleware-vulnerable-appdemo-CVE-2025-29927

Aplicación Next.js Vulnerable para Práctica de Pentesting Esta es una aplicación Next.js diseñada intencionalmente para ser vulnerable a CVE-2025-29927: La Vulnerabilidad de Bypass de Autorización de Middleware de Next.js. ⚠️ Aviso Legal Esta aplicación es solo para fines educativos y de hacking...

CVE-2024-13479

CVE-2024-13479 LTL Freight Quotes – SEFL Edition = 3.2.4 - Inyección SQL no autenticada Descripción El plugin LTL Freight Quotes – SEFL Edition para WordPress es vulnerable a Inyección SQL a través de los parámetros 'dropshipeditid' y 'editid' en todas las versiones hasta la 3.2.4 inclusive, debi...

CVE-2023-27350-PoC

CVE-2023-27350 Este PoC demuestra cómo es posible eludir la autenticación en las versiones de PaperCut MF/NG desde la 8.0 hasta, sin incluir, 20.1.7, 21.2.11 y 22.0.9. Permite interactuar con el sistema sin utilizar credenciales de inicio de sesión válidas. Consultas de Shodan 1...

CVE-2024-43919

CVE-2024-43919 YARPP = 5.30.10 - Autorización faltante Descripción El plugin YARPP – Yet Another Related Posts Plugin para WordPress es vulnerable a acceso no autorizado debido a una verificación de capacidad faltante en el archivo /includes/yarppprosetdisplaytypes.php en todas las versiones hast...

CVE-2025-14269

CVE-2025-14269 A security issue was discovered in the in-cluster version of Headlamp where unauthenticated users may be able to reuse cached credentials to access Helm functionality through the Headlamp UI. Kubernetes clusters are only affected if Headlamp is installed, is configured with...

CVE-2026-3629

CVE-2026-3629 - Comprobador de Escalada de Privilegios en WordPress Una herramienta de línea de comandos para detectar CVE-2026-3629 , una vulnerabilidad crítica de escalada de privilegios en el plugin de WordPress "Import and export users and customers". 📢 Únete a Nuestra Comunidad ¡Mantente al...

CVE-2018-10933

libSSH-Authentication-Bypass Accede a una shell sin credenciales utilizando CVE-2018-10933 Exploit-DB : https://www.exploit-db.com/exploits/45638 Información sobre CVE-2018-10933 por libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt Versión de corrección de errores por libSSH...

CVE-2022-41876

CVE-2022-41876 - eZ Platform user information disclosure A vulnerability emerged in eZ Platform letting an unauthenticated user access every contributor password's hash. This PoC enumerates every possible GraphQL path leading to a 'User' object, and then requests these paths to retrieve users'...

CVE-2024-1208-and-CVE-2024-1210

CVE-2024-1208 and CVE-2024-1210 Sensitive Information Exposure via API in LearnDash. Unauthenticated visitors can browse the quizzes and quiz questions without being enrolled in a connected course. Vulnerability: CVE-2024-1208 and CVE-2024-1210 Sensitive Information Exposure via API CVSS: 5.3...

CVE-2024-21893.py

CVE-2024-21893 is server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication. run python CVE-2024-21893.py -u...

CVE-2024-42919

eScan Management Console Exploit Title : eScan Management Console - Incorrect Access Control Author : Jeyabalaji Affected Versions : 14.0.1400.2281 Tested on : Windows 11 CVE : CVE-2024-42919 Description: The Escan Management Console implements authentication mechanisms; however, the...

CVE-2020-14882

WebLogic RCE Vulnerability - CVE-2020-14882 Introduction CVE-2020-14882 is a remote code execution RCE flaw in the Console component of Oracle WebLogic Server. The pre-authentication flaw was given an attack complexity of “low” and highlighted as “easily exploitable” by Oracle resulting in it bei...

CVE-2018-9995_dvr_credentials

Herramienta Mostrar credenciales DVR root@kitploit: Título del Exploit: "Obtener credenciales DVR" CVE: CVE-2018-9995 Puntuación Base CVSS v3: 7.3 / 10 Vector CVSS: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Fecha: 09/04/2018 Autor del Exploit: Fernandez Ezequiel twitter:@capitanalfa Exploit:...

CVE-2015-7808

CVE-2015-7808 Código PoC de la vulnerabilidad PreAuth de vBulletin Uso: perl vbulletin.pl www.vbulletin.com/forum id...

CVE-2026-8337

CVE-2026-8337 CVE-2026-8337 is an Insecure Direct Object Reference IDOR vulnerability in Concrete CMS that affects the Survey feature. Unlike CVE-2026-8347 which involved Express associations, this vulnerability allows an unauthenticated attacker to participate in a restricted/private survey unde...

CVE-2026-90552

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist ownership in the Playlists_schedules/list.json.php and Live/calendar.json.php endpoints. This missing authorization check allows both authenticated users with canStream privileges and unauthenticated us...

EUVD-2026-76870

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist ownership in the Playlistsschedules/list.json.php and Live/calendar.json.php endpoints, allowing authenticated and unauthenticated users to read private playlist schedule metadata. Attackers with...

CVE-2026-90551

WWBN AVideo (through commit c3edcc274) has a missing authorization flaw in its video_from_program API endpoint, which fails to validate playlist ownership before returning results. An unauthenticated network attacker can query the endpoint to enumerate private playlist names, owner information, a...

EUVD-2026-76869

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist ownership in the videofromprogram API endpoint, allowing unauthenticated access to private playlist contents. Attackers can query the API without authentication to enumerate private playlist names, owne...