CVE-2026-63030

CVE-2026-63030: wp2shell WordPress 批量 API 去同步 SQL 注入漏洞利用工具 通过 CVE-2026-63030 wp2shell 漏洞提取用户和密码哈希的概念验证工具。 漏洞信息 CVE : CVE-2026-63030 wp2shell 关联 CVE : CVE-2026-60137 类型 : 预认证盲注 SQL 注入 受影响版本 : WordPress 6.9.0–6.9.4, 7.0.0–7.0.1 修复版本 : 6.9.5, 7.0.2+ 使用方法 root@kitploit: python POC.py options 基本用法...

CVE-2022-40684

CVE-2022-40684 提取管理员用户和 Fortigate 详细信息 用法: 单个 URL： root@kitploit: .\poc-cve-2022-40684.ps1 -fgt 192.168.1.1 多个 URL： root@kitploit: .\poc-cve-2022-40684.ps1 -urlsfile urls.txt...

PT-2026-48281

Name of the Vulnerable Software and Affected Versions c2pa-web versions prior to 0.7.1 c2pa-v versions prior to 0.80.1 Description An improper limitation of a pathname to a restricted directory, known as Path Traversal, allows for an arbitrary file system write. This issue enables an attacker to...

CVE-2019-16285

If a local user has been configured and logged in, an unauthenticated attacker with physical access may be able to extract sensitive information onto a local drive...

Joomla! Component Spider FAQ - SQL Injection

Joomla! Component Spider FAQ - SQL Injection Exploit Title : Joomla Spider FAQ component SQL Injection vulnerability Author : Manish Kishan Tanwar AKA error1046 Vendor Link : http://demo.web-dorado.com/spider-faq.html Date : 21/03/2015 Discovered at : IndiShell Lab Love to : zero cool,Team...