CVE-2024-50962

Cross-Site Scripting XSS en DonWeb Ferozo Webmail CVE-2024-50962 Descripción Una vulnerabilidad de Cross-Site Scripting XSS en Ferozo Webmail v1.1 permite a atacantes ejecutar scripts arbitrarios a través de los componentes Identities y Automatic Responses. Esta vulnerabilidad puede ser utilizada...

CVE-2024-23692-RCE-in-Rejetto-HFS

Rejetto HTTP文件服务器中的未认证RCE漏洞 CVE-2024-23692 - 漏洞利用代码 CVE-2024-23692 是 Rejetto HTTP文件服务器 HFS 2.3m 版本中的一个严重漏洞，允许未经认证的远程代码执行（RCE）。 该漏洞使攻击者能够在服务器上执行任意代码，带来重大安全风险。本文将介绍 Rejetto HFS、受影响的版本、漏洞的影响以及发现和修复时间线。 用法 漏洞利用脚本： root@kitploit: python3 exploit.py 示例： python3 exploit.py 192.168.130.100 80 calc 检测脚本：...

CVE-2021-22205

CVE-2021-22205 GitLab CE/EE Preauth RCE using ExifTool このプロジェクトは学習目的のみです。もし誰かの権利を侵害している場合は、プロジェクトを削除するためにご連絡ください。また、最後に不正に使用しないでください このツールの使用中に違法行為を行った場合、そのすべての結果は自己責任となります。本ツールのすべての開発者およびすべての貢献者は、いかなる法的および共同責任も負いません。 説明 GitLab CE/EE において、バージョン 11.9 以降のすべてに影響する問題が発見されました。GitLab...

Tenda-F3-V4

Tenda F3 ルーター エクスプロイト & ファイルダウンローダー このプロジェクトは、認証不要の脆弱性（CVE-2020-35391）を利用して Tenda F3 ルーター（v3/v4）から各種ファイルをダウンロードするためのツールです。脆弱性のあるルーターから設定ファイル、システムログ、フラッシュダンプを取得できます。 概要 このスクリプトは Tenda F3 ルーターで見つかった脆弱性を悪用し、攻撃者が認証なしで機密ファイルをダウンロードできるようにします。具体的には、以下のファイルをダウンロードできます（パスワード変更機能の追加にも取り組んでいます）： 設定ファイル...

SonLogger-vulns

CVE-2021-27964 | SonLogger - 未认证任意文件上传 Metasploit 日期: 30-01-2021 漏洞作者: Berkan Er [email protected] 厂商主页: https://www.sonlogger.com/ 软件链接: https://www.sonlogger.com/download 版本: 4.2.3.3 测试平台: Windows 10 Enterprise x64 CVE: 2021-27964 公开日期: 01-03-2021 该模块利用不安全的POST请求实现未认证的任意文件上传。已在Windows...

CVE_2022_3141

CVE-2022-3141: Inyección SQL en ACS EDU 3ª Generación Este repositorio contiene un análisis de seguridad detallado y un informe de la vulnerabilidad identificada como CVE-2022-3141, que afecta al sistema de tarjeta inteligente ACS EDU 3ª Generación. Resumen de la Vulnerabilidad ID de CVE :...

CVE-2026-8778

The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout Fields. plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the miplwcuploadfile function in all versions up to, and including, 1.2.1. This makes it possible for...

CVE-2026-84960

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL Query String in all versions up to, and including, 3.5.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

CVE-2026-81825

The Simple Ajax Chat – Add a Fast, Secure Chat Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Chat Message in all versions up to, and including, = 20260811 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

CVE-2026-81754

The Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Agent Header in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2026-78172

The Themify – WooCommerce Product Filter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query Parameter Name in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-77150

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'dataname' Parameter in all versions up to, and including, 2.0.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to injec...

CVE-2026-18964

The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.5.9 due to insufficient input sanitization and...

CVE-2026-18579

The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTPXFORWARDEDFOR' parameter in all versions up to, and including, 9.2.08.003 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2026-18562

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via SEO-friendly permalink filter URL segments in versions up to, and including, 1.4.3. This is due to insufficient input sanitization and output escaping in the wploadjs...

CVE-2026-18561

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to SQL Injection via the 'addontype' parameter in versions up to, and including, 2.0.16. This is due to insufficient escaping on the user-supplied parameter and the lack of sufficient preparation on the existing SQL query in...

CVE-2026-15462

The Sticky Chat Widget plugin for WordPress is vulnerable to SQL Injection via the 'scwformfields' parameter array keys of the 'scwsaveformdata' AJAX action in versions up to, and including, 1.4.2. This is due to the saveformdata function passing attacker-controlled POST array keys unsanitized to...

CVE-2026-12215

The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Authentication Bypass via OTP Brute Force in all versions up to, and including, 2.7.2. The vulnerability exists because the OTP rate-limit attempt counter in processotpform is keyed exclusively on the attacker-controlled...

CVE-2026-11446

The Booktics – Booking Calendar for Appointments and Service Businesses plugin for WordPress is vulnerable to unauthorized modification of data in all versions up to, and including, 1.0.23. This is due to the createorderpermission permission callback on the POST /wp-json/booktics/v1/orders REST...

CVE-2020-15931

CVE-2020-15931 Netwrix Account Lockout Examiner 4.1 域管理员账户凭据泄露漏洞 漏洞概述 5.1 版本之前的 Netwrix Account Lockout Examiner ALE 允许未认证的远程攻击者触发连接到攻击者控制的系统，并捕获拥有域管理员权限的账户的 NTLMv1/v2 挑战-响应。该域管理员账户已按照安装要求在产品中配置。攻击者可以通过在域控制器上生成单个 Kerberos 预认证失败事件（事件 ID 4771）来利用此漏洞。 关于该漏洞的更多详情，请参见以下博客 致谢 该漏洞由 Optiv 安全顾问 Robert...