CVE-2024-43998

CVE-2024-43998 root@kitploit: Blogpoet = 1.0.2 - Missing Authorization via blogpoetinstallandactivateplugins Published: 2024-08-29 00:00:00 Classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N cvss-score: 5.3 cve-id: CVE-2024-43998 cpe: cpe:2.3:a:blogpoet:blogpoet::::::::...

CVE-2024-1380

CVE-2024-1380 Relevanssi – A Better Search = 4.22.0 - Missing Authorization to Unauthenticated Query Log Export Description The Relevanssi – A Better Search plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relevanssiexportlogcheck function...

CVE-2023-41892_poc

CVE-2023-41892poc Customized this for my own use pocnoauth.py Basic PHP one-liner webshell OS command execution via ?cmd= pocauth.py Simple key-based authentication added webshell SHA-256 hash comparison method Commands can only be executed if the correct key is provided Code modification require...

CVE-2026-19598

🚨 CVE-2026-19598 https://plugins.trac.wordpress.org/browser/pods/tags/3.3.9/includes/general.phpL400 The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists...

CVE-2024-50450

CVE-2024-50450 WordPress Meta Data and Taxonomies Filter MDTF = 1.3.3.4 - Ejecución arbitraria de shortcode no autenticada Descripción: El plugin MDTF – Meta Data and Taxonomies Filter para WordPress es vulnerable a la ejecución arbitraria de shortcodes en todas las versiones hasta la 1.3.3.4...

CVE-2025-6934

CVE-2025-6934 🛡️ CVE-2025-6934 - Escalada de Privilegios No Autenticada en Opal Estate Pro 📝 Descripción El plugin Opal Estate Pro – Property Management and Submission para WordPress, utilizado por el tema FullHouse - Real Estate Responsive WordPress, es vulnerable a la Escalada de Privilegios en...

cve-2024-37762

Description MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution. The application offers the possibility of a creation of a form with a file upload functionality. While by default the accepted files are restricted to a common sa...

CVE-2021-38314

CVE-2021-38314 ¿Cuál es la vulnerabilidad? El plugin Gutenberg Template Library & Redux Framework = 4.2.11 para WordPress registró varias acciones AJAX disponibles para usuarios no autenticados en la función includes en redux-core/class-redux-core.php que eran únicas para un sitio dado pero...

CVE-2023-23752

Exploit de Divulgación de Información No Autenticada en Joomla CVE-2023-23752 Exploit Descripción Este repositorio contiene un exploit para una vulnerabilidad denominada "Divulgación de Información No Autenticada en Joomla" CVE-2023-23752. Tenga en cuenta que esto es simplemente un script de prue...

CVE-2026-12513

CVE-2026-12513: Shared Files 1.7.68 — Unauthenticated Arbitrary File Deletion via Path Traversal 📖 Advisory Overview CVE-2026-12513 is an unauthenticated Arbitrary File Deletion vulnerability via Path Traversal affecting the Shared Files and Shared Files Pro WordPress plugins before version 1.7.6...

CVE-2025-24893

CVE-2025-24893 - Ejecución Remota de Código No Autenticada en XWiki Exploit PoC para la vulnerabilidad de Ejecución Remota de Código No Autenticada en XWiki CVE-2025-24893. Este PoC permite ejecutar comandos arbitrarios a través de código Groovy en la macro SolrSearch. Detalles root@kitploit:...

CVE-2025-24893

CVE-2025-24893 PoC | XWiki Platform 15.10.10 - Remote Code Execution Una vulnerabilida de categoría RCE Remote Code Execution, encontrada cuando atacantes no autenticados pueden ejecutar codigo Groovy arbitrario remotamente sin la autenticación ni el accesso previo Guest User. A continuación un P...

CVE-2024-2782-PoC

CVE-2024-2782-PoC CVE-2024-2782 Proof-of-Concept The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/fluentform/v1/global-settings REST A...

CVE-2024-2771-PoC

CVE-2024-2771-PoC CVE-2024-2771 Proof-of-Concept The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the /wp-json/fluentform/v1/managers REST API endpoint in all...

Project-Exploitation-of-Webmin-Authentication-Vulnerability

Objetivo de la investigación: Realizar un análisis exhaustivo y una explotación exitosa de una vulnerabilidad de Ejecución Remota de Código RCE en Webmin versión 1.890 CVE-2019-15107, obteniendo finalmente el control total del sistema objetivo. Metodología: Reconocimiento inicial: Escaneo de red...

CVE-2018-7600

Alright boss, I've also added the usage section starting from git clone, so the README is complete. This is the final version that you just need to copy-paste into README.md on your GitHub repo. CVE-2018-7600 - Drupalgeddon2 RCE Exploit This exploit exploits a vulnerability in Drupal 7.56 and som...

CVE-2018-7600-Remote-Code-Execution

Drupalgeddon2 Python Exploit CVE-2018-7600 This repository contains a Python-based proof-of-concept exploit for the critical remote code execution vulnerability in Drupal, known as Drupalgeddon2 CVE-2018-7600. This script is designed for educational purposes and for security professionals to use ...

CVE-2021-45901

CVE-2021-45901 ServiceNow - Username Enumeration PoC Code enumSNOWUsers.py - SNOW User Enumerator Title Username Enumeration Vulnerability found in ServiceNow Application Published: Version: 1.0 Vendor: ServiceNow Product: ServiceNow https://www.servicenow.com/ Version affected: Orlando...

PoC-CVE-2015-10141-Xdebug

PoC-CVE-2015-10141 Custom Python exploit for Xdebug ≤ 2.5.5 CVE-2015-10141. Description This repository contains my Proof-of-Concept PoC exploit for the Xdebug remote code execution vulnerability in versions 2.5.5 and earlier. The script leverages the unauthenticated debugging protocol exposed on...

CVE-2024-12209

CVE-2024-12209 WP Umbrella: Update Backup Restore & Monitoring = 2.17.0 - Vulnerabilidad de inclusión de archivos locales no autenticada Descripción El plugin WP Umbrella: Update Backup Restore & Monitoring para WordPress es vulnerable a Inclusión de Archivos Locales en todas las versiones hasta ...