EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 Root Remote Code Execution

An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier.The usbinteract.cgi script fails to properly sanitize user input passed to the path parameter, allowing unauthenticated remote attackers to inject arbitrary shell commands.The injected comman...

WordPress Loginizer < 1.6.4 – Unauthenticated SQL Injection via `log` Parameter

The Loginizer plugin before 1.6.4 for WordPress allows SQL injection with resultant XSS, related to loginizerloginfailed and lzvalidip. id: CVE-2020-27615 info: name: WordPress Loginizer 1.6.4 – Unauthenticated SQL Injection via log Parameter author: intelligent-ears severity: critical descriptio...

WordPress Epsilon Framework Themes <=2.4.8 - Remote Code Execution

WordPress themes including Shapely = 1.2.7, NewsMag = 2.4.1, Activello = 1.4.0, Illdy = 2.1.4, Allegiant = 1.2.2, Newspaper X = 1.3.1, Pixova Lite = 2.0.5, Brilliance = 1.2.7, MedZone Lite = 1.2.4, Regina Lite = 2.0.4, Transcend = 1.1.8, Affluent = 1.1.0, Bonkers = 1.0.4, Antreas = 1.0.2, Sparkli...

Good Layers LMS Plugin <= 2.1.4 - SQL Injection

An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin = 2.1.4 exists due to the usage of "wpajaxnopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlrlmscancelbooking" where POST Parameter "id" was sent straight into SQL query witho...

Mitel ShoreTel 19.46.1802.0 Devices - Cross-Site Scripting

Mitel ShoreTel 19.46.1802.0 devices and their conference component are vulnerable to an unauthenticated attacker conducting reflected cross-site scripting attacks via the PATHINFO variable to index.php due to insufficient validation for the timezone object in the HOMEMEETING& page. id:...

Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation

The Simple User Registration plugin ≤ 6.3 is vulnerable to privilege escalation. It lacks proper restrictions on user meta values during registration. Unauthenticated attackers can exploit this to register as administrators. id: CVE-2025-4334 info: name: Simple User Registration = 6.3 -...

IBM Langflow - Remote Code Execution

IBM Langflow OSS 1.0.0 through 1.10.0 contains a remote code execution caused by chaining /api/v1/autologin and /api/v1/validate/code endpoints, letting unauthenticated attackers execute arbitrary code remotely, exploit requires no authentication. id: CVE-2026-9198 info: name: IBM Langflow - Remo...

Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection

The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

LiteLLM - Command Injection

A critical unauthenticated remote code execution vulnerability exists in LiteLLM due to improper input handling in the MCP stdio test endpoint. An attacker can send a specially crafted request to the /mcp-rest/test/connection endpoint with controlled parameters, resulting in arbitrary command...

Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials Bypass

Keycloak versions prior to 26.7.2, 26.6.6, and 26.4.15 contain a flaw in the reset-credentials flow that allows an unauthenticated attacker to bypass email verification and take over any user account. Two bugs are chained: 1 the tryAnotherWay handler stores a generic "true" selector note not scop...

Progress ShareFile Storage Zones Controller - Authentication Bypass

Customer Managed ShareFile Storage Zones Controller SZC contains an authentication bypass Execution After Redirect that allows unauthenticated attackers to access restricted configuration pages. This leads to changing system configuration and potential remote code execution. id: CVE-2026-2699 inf...

PrestaShop AP Pagebuilder <= 2.4.4 - SQL Injection

A SQL injection vulnerability in the productalloneimg and imageproduct parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data. id: CVE-2022-22897 info: name: PrestaShop AP Pagebuilder = 2.4.4 - SQL Injection...

ludus_crushftp_cve-2025-31161

Ruolo Ansible: CrushFTP CVE-2025-31161 Ludus Un ruolo Ansible che distribuisce un'istanza vulnerabile di CrushFTP 10.8.0 su Windows per test di penetrazione autorizzati di CVE-2025-31161 bypass dell'autenticazione. Il binario vulnerabile di CrushFTP è ospitato su rufflabs/crushftpcve-2025-31161 e...

CVE-2026-6271

CVE-2026-6271 — Scanner RCE per il Plugin WordPress Career Section Plugin: Career Section career-section CVE ID: CVE-2026-6271 Punteggio CVSS: 9.8 Critical Vettore CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tipo di vulnerabilità: Unauthenticated Arbitrary File Upload → Remote Code Executi...

CVE-2021-43798-Grafana-Exp

Grafana V8. Exploit per lettura arbitraria di file – Script di verifica batch Descrizione della vulnerabilità Grafana è una suite open-source per l'analisi e la visualizzazione di metriche. Spesso utilizzata per la visualizzazione di serie temporali di infrastrutture e analisi di applicazioni, è...

cve-2025-66398

CVE-2025-66398 — Signal K Server RCE PoC 📜 Descrizione CVE-2025-66398 è un problema di Signal K Server in cui un attaccante non autenticato può avvelenare lo stato di ripristino del server tramite /skServer/validateBackup, quindi dirottare la configurazione tramite /skServer/restore per iniettare...

CVE-2023-0297

pyloadCVE-2023-0297poc Una vulnerabilità di code injection nelle versioni di pyLoad precedenti alla 0.5.0b3.dev31 porta a una RCE pre-autenticazione sfruttando la funzionalità di js2py. uso Utilizzo di CVE-2023-0297poc.exe: root@kitploit: -f string fileName:IP.txt -u string...

Drag-and-Drop-Multiple-File-Uploader-PRO-Path-Traversal

CVE-2023-1112 - Drag and Drop Multiple File Uploader PRO - Contact Form 7 v5.0.6.1 Path Traversal Informazioni Path Traversal in Drag and Drop Multiple File Uploader PRO - Contact Form 7 versione 5.0.6.1 consente a un attaccante remoto non autenticato di caricare file in qualsiasi punto scrivibil...

CVE-2021-21972

CVE-2021-21972 Proof of Concept Exploit per vCenter CVE-2021-21972 Crediti di ricerca a: https://swarm.ptsecurity.com/unauth-rce-vmware/, http://noahblog.360.cn/vcenter-6-5-7-0-rce-lou-dong-fen-xi/ Testato su target vCenter VCSA sia Windows che Unix. Utilizzo Per verificare in modo innocuo se il...

CVE-2021-27403

Cross-Site Scripting NON AUTENTICATO - Modem Fibra Internet Askey Fornitore: Askey Versione software: BRSVg11.11RTFTEF001V6.54V014 Modello: RTF8115VW Parametro vulnerabile: curWebPage Payload: ";alert'xss'// Non testato su altri modelli/versioni. Tramite richiesta GET root@kitploit: Nella richies...