CVE-2025-15489 Passster < 4.2.24 - Password Protection Bypass

The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password protected content...

EUVD-2025-210831

The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password protected content...

CVE-2025-15489 Passster < 4.2.24 - Password Protection Bypass

The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password protected content...

CVE-2025-15489

The Passster WordPress plugin before version 4.2.24 contains an improper input handling flaw in an AJAX action , allowing unauthenticated users to retrieve the value of password-protected content. This constitutes a password protection bypass , with a CVSS 3.1 score of 5.3 (Medium) reflecting net...

EUVD-2025-210830

The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc...

CVE-2025-15481 Notification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data Disclosure

The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails...

CVE-2025-15485 Auto x LINE <= 1.0.0 – Unauthenticated REST API Endpoints Call

The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc...

CVE-2025-15481 Notification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data Disclosure

The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails...

CVE-2025-15485

CVE-2025-15485 affects the Auto x LINE WordPress plugin through version 1.0.0 . The plugin lacks authorization checks on certain REST API endpoints , enabling unauthenticated users to invoke them and update plugin settings or clear logs . The vulnerability carries a CVSS v3.1 score of 8.2 (HIGH) ...

CVE-2025-15481

The Notification Bar for WordPress plugin (slug 8-degree-notification-bar) through version 1.1.8 exposes an unauthenticated CSV export script at inc/backend/blocks/export-csv.php, allowing anyone to download all stored subscriber email addresses without authentication. The vulnerability is rated ...

EUVD-2025-210829

The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails...

CVE-2025-15485 Auto x LINE <= 1.0.0 – Unauthenticated REST API Endpoints Call

The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc...

CVE-2026-37067

CVE-2026-37067 Veno File Manager Project 4.4.9 中 /vfm-admin/admin-panel/view/save-cvs.php 存在不正确的访问控制，允许未经身份验证的攻击者通过特制的 POST 请求从指定日期起提取所有应用程序日志。 https://github.com/user-attachments/assets/fa313c9e-aed2-449f-8e58-22297ba1de82...

exploit-cve-2023-36808

CVE-2023-36808 - Inyección SQL no autenticada en GLPI Vulnerabilidad Las versiones de GLPI se inyecta directamente en una consulta SQL sin sanitización: root@kitploit: SELECT id FROM glpiagents WHERE deviceid = '' No se requiere autenticación. La vulnerabilidad permite acceso de lectura completo ...

CVE-2025-32433-Exploit-edited

CVE-2025-32433 漏洞利用（Windows兼容） Erlang/OTP SSH 未经认证的远程代码执行 描述 本仓库包含针对 CVE-2025-32433 的漏洞利用代码，这是 Erlang/OTP SSH 服务器中的一个严重未经认证的远程代码执行漏洞。 主要特性： ✅ 预认证 RCE 漏洞利用 ✅ 修复了 Windows GBK 编码兼容性问题 ✅ 适用于 Erlang/OTP 版本 ≤ 27.3.2, ≤ 26.2.5.10, ≤ 25.3.2.19 漏洞详情 CVE ID: CVE-2025-32433 严重性: 严重 影响: 未经认证的远程代码执行...

CVE-2025-61777

CVE-2025-61777 1. Modificación no autorizada de plantillas de insignias en FlagforgeCTF CVE-2025-61777 Resumen La aplicación Flagforge https://flagforge.xyz expone vulnerabilidades críticas en sus endpoints de API administrativa, específicamente /api/admin/badge-templates GET y...

CVE-2026-49777

CVE-2026-49777 CVE-2026-49777 - ShapedPlugin Product Slider Pro para WooCommerce Backdoor RCE Análisis Técnico en Profundidad: Vulnerabilidad Backdoor de Product Slider Pro Base y Causa de la Vulnerabilidad CWE-1284 El origen técnico de la vulnerabilidad se clasifica como CWE-1284: "Validación...

OpenSSH-CVE-2024-6387-Fix

CVE-2024-6387 OpenSSH 漏洞缓解脚本 概述 本 Bash 脚本旨在帮助缓解 OpenSSH 中的 CVE-2024-6387 漏洞。该漏洞影响特定版本的 OpenSSH，可能允许未经身份验证的远程攻击者在您的系统上执行任意代码。此脚本为您提供两个选项：升级到安全版本的 OpenSSH，或应用临时修复以降低被利用的风险。 受影响版本 易受攻击的版本： 早于 4.4p1 的 OpenSSH 版本（除非已打上 CVE-2006-5051 和 CVE-2008-4109 的补丁）存在漏洞。 从 8.5p1 到 9.8p1（不包括...

CVE-2025-6254

CVE-2025-6254 — Doctreat Core = 1.6.8 — Escalada de Privilegios No Autenticada mediante Inyección de Rol 🔥 Resumen de la Vulnerabilidad El plugin de WordPress Doctreat Core versiones = 1.6.8 es vulnerable a una vulnerabilidad de escalada de privilegios no autenticada. Esta falla crítica permite a...

CVE-2025-39247

CVE-2025-39247 目标: HikCentral Professional（HCMP，集中式 VMS 服务器） CVE: CVE-2025-39247 — 访问控制漏洞 CVSS 3.1: 8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N 受影响版本: V2.3.1 – V2.6.2 及 V3.0.0 修复版本: V2.6.3 / V3.0.1 / 修复包 CVE-2025-39247 披露日期: 2025-08-28 分析日期: 2026-05-21 1. 开源情报收集 在下载任何内容之前，先看已有哪些公开信息： 来源| 提供的信息 ---|--...