CVE-2024-5084

Hash Form 9.9.1 file upload vulnerability Exploit The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fileuploadaction' function in all versions up to, and including, 1.1.0. This makes it possible for...

CVE-2025-60574

Descubridores de Vulnerabilidades y Autores de Exploits Stefano Andreatta & Jacopo Candido Augelli CVE-2025-60574 Descripción de la Vulnerabilidad Se ha identificado una vulnerabilidad de Inclusión de Archivos Locales LFI en tQuadra CMS 4.2.1117. El problema existe en la ruta "/styles/", que no...

CVE-2025-69459

CVE-2025-69459 – Sistema de Calificación de Películas 1.0 Control de Acceso Roto Creación de Cuenta de Administrador No Autenticado WriteUp CVE-2025-69459 – ExploitDB 50621...

CVE-2021-26084

CVE-2021-26084 Atlassian Confluence Pre-Auth RCE...

CVE-2026-89063

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 28.1 via the 'conversationid' parameter due to missing validation on a user controlled key. This makes it possible for...

CVE-2026-18555

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'icn' parameter in all versions up to, and including, 2.15.22 due to insufficient input sanitization and output escaping. This makes it possib...

CVE-2025-12721

g-FFL Cockpit = 1.7.1 - Exposición de Información no Autenticada El plugin g-FFL Cockpit no implementa verificaciones de autorización adecuadas en el endpoint de la API REST serverstatus, permitiendo que usuarios no autenticados accedan a información sensible de configuración del servidor, ajuste...

CVE-2024-3495-POC

CVE-2024-3495-POC The Country State City Dropdown CF7 WordPress plugin versions up to 2.7.2 is vulnerable to SQL Injection via 'cnt' and 'sid' parameters. Insufficient escaping and lack of preparation in the SQL query allow unauthenticated attackers to append queries, potentially extracting...

CVE-2025-67159

CVE-2025-67159 — Cámaras IP basadas en Vatilon Resumen El firmware de las cámaras IP basadas en Vatilon contiene una elusión de autenticación y exposición de credenciales en texto claro en la API /cgi-bin/web.cgi. La interfaz web procesa solicitudes que contienen parámetros username y password en...

buds-audit

buds-audit Versión 1.0.0 Herramienta de evaluación de seguridad Bluetooth para auriculares inalámbricos afectados por la cadena de vulnerabilidades del SDK Airoha CVE-2025-20700 / CVE-2025-20701 / CVE-2025-20702. Escanea dispositivos cercanos, identifica chipsets Airoha conocidos y vulnerables, y...

CVE-2017-20192-formidable-forms

CVE-2017-20192 — Formidable Forms WordPress — Vulnerable Docker Lab Reproducible Docker lab for CVE-2017-20192 Formidable Forms 2.05.03 stored XSS. Quickstart root@kitploit: docker compose up -d --build Target: http://127.0.0.1:18080 Validate lab helper This helper script: submits a crafted entry...

cve-2021-44228-log4shell_rce_reproduction

CVE-2021-44228 — Log4Shell: Apache Log4j2 Remote Code Execution CVSS 10.0 CRITICAL | CWE-502: Deserialization of Untrusted Data | CWE-917: Improper Neutralization for Expression Language Injection Overview Log4Shell CVE-2021-44228 is arguably the most severe vulnerability of the 2020s, affecting...

CVE-2021-43798

GrafanaArbitraryFileRead Usage 1. show info root@kitploit: ❯ go run main.go -s INF VulnInfo: "Name": "Grafana Arbitrary File Read", "VulID": "nil", "Version": "1.0", "Author": "z3", "VulDate": "2021-12-07", "References": "https://nosec.org/home/detail/4914.html" , "AppName": "Grafana",...

CVE-2026-23744

CVE-2026-23744 — MCPJam Inspector Unauthenticated RCE Unauthenticated remote code execution PoC for CVE-2026-23744. MCPJam Inspector 1.4.2 and earlier expose functionality through /api/mcp/connect that can launch an attacker-controlled MCP server command without authentication. For authorized...

CVE-2025-3248-Langflow-RCE

mitsec - CVE-2025-3248 Langflow RCE Exploit Remote Code Execution RCE exploit for Langflow applications vulnerable to CVE-2025-3248. Affected Endpoint: /api/v1/validate/code 🚀 Exploit Features Remote and unauthenticated RCE No authentication required Python3 one-liner script Colorized terminal...

CVE-2026-18555 Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress <= 2.15.22 - Reflected Cross-Site Scripting via 'icn' Parameter

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'icn' parameter in all versions up to, and including, 2.15.22 due to insufficient input sanitization and output escaping. This makes it possib...

CVE-2026-18555

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) via the icn parameter in all versions up to and including 2.15.22 . The root cause is insufficient input sanitization and output escaping. An unauth...

EUVD-2026-80113

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'icn' parameter in all versions up to, and including, 2.15.22 due to insufficient input sanitization and output escaping. This makes it possib...

EUVD-2026-80112

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 28.1 via the 'conversationid' parameter due to missing validation on a user controlled key. This makes it possible for...

CVE-2026-89063 Online Scheduling and Appointment Booking System <= 28.1 - Insecure Direct Object Reference to Unauthenticated Sensitive Data Access and Message Injection via 'conversation_id' Parameter

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 28.1 via the 'conversationid' parameter due to missing validation on a user controlled key. This makes it possible for...