Moodle-CVE-2019-3810

Moodle CVE-2019-3810 Moodle 3.6.2, 3.5.4, 3.4.7, 3.1.16 XSS PoC para escalada de privilegios Estudiante a Admin. Este es uno de los errores pasados que descubrí durante un pentest anterior en una institución académica. Fue lo suficientemente exitoso en ese momento para prácticamente robar el acce...

CVE-2021-24545

CVE-2021-24545 WP HTML Author Bio alert/XSS/ Luego visualiza una publicación hecha por el autor para desencadenar el XSS Video POC: https://www.youtube.com/watch?v=fhzJZ5hSI-g...

profilehound

/ \ / / / / / / / / / // / / / // / / / // / / / / / / / / / / / // / / / / / / // / // / / / / // / // // // ///// ///,// //,/ ProfileHound ProfileHound is a post-escalation tool to help find and achieve red-teaming objectives by locating domain user profiles on machines. It uses the...

CVE-2025-55182-PoC

CVE-2025-55182-PoC PoC para CVE-2025-55182 Usage: python3 poc.py -u http://target.com --cmd "" Aviso legal Esta herramienta se proporciona únicamente con fines educativos y para pruebas de seguridad autorizadas. El uso de esta herramienta para atacar objetivos sin consentimiento mutuo previo es...

CVE-2020-25627

CVE-2020-25627 XSS almacenado a través del parámetro moodlenetprofile en el perfil de usuario Mi PoC sobre este CVE Requisito de usuario: Estudiante o el sitio para registro XSS en moodlenetprofile Step 1: Log in with an authenticated user Can register or through creating a new user without...

User Profile Builder 3.16.4 - Unauthenticated Authentication Bypass

The User Profile Builder plugin for WordPress version 3.16.4 is vulnerable to an authentication bypass via type confusion. Profile Builder's automatic-login-after-registration handler passes the return value of wpinsertuser through absint before testing it with iswperror, so the error check runs...

User Profile Picture < 2.5.0 - Sensitive Information Disclosure

The REST API endpoint getusers in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functionality to users with the uploadfiles capability. This included password hashes, hashed user activation keys, usernames, emails, and other less...

CVE-2019-0986

Investigación de seguridad por diversión Todo enfocado en el sistema operativo Microsoft Windows CVE-2019-0986 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0986 Este es el PoC que envié a Microsoft cuando reporté la vulnerabilidad anterior. Este PoC explota "User...

osi.ig

Open Source Information Instagram so recently ig started sending html response insted of json to "unknown" requests. i REALLY wanted this to work without login since i don't use ig anymore, tried few ways i knew to get it working without login but it didn't work :/ anyways since lot of people are...

CVE-2024-6366

To create a Metasploit module to exploit the RCE vulnerability in the User Profile Builder WordPress plugin before version 3.11.8, we need to take advantage of the lack of proper authorization in the media file upload functionality. Here is how you can create such a Metasploit module: Metasploit...

WordPress Ultimate Member 2.1.3 - 2.8.2 – SQL Injection

The Ultimate Member - User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the ‘sorting’ parameter in versions 2.1.3 to 2.8.2 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2022-38577-Processmaker

Este repositorio ha sido archivado y movido a: https://github.com/sornram9254/CVE-BBP-VDP ProcessMaker - Escalada de Privilegios en el Perfil de Usuario CVE-2022-38577 Se descubrió que ProcessMaker anterior a v3.5.4 contiene permisos inseguros en la página de perfil de usuario. Esta vulnerabilida...

CVE-2025-15030

CVE-2025-15030 User Profile Builder 3.15.2 - Unauthenticated Arbitrary Password Reset CVE-2025-15030 User Profile Builder — Unauthenticated Password Reset → Admin Takeover + Shell Upload / / \ |/ / / / / / \ / / / \ / \ | / | | //| \ / /| / | / /| \ | || | / | / || / | | | // | /\/...

EUVD-2026-89726

A flaw was found in Moodle. User list filters do not properly enforce visibility restrictions on user profile fields. An authorized user with manager privileges can filter user lists using profile attributes they are not permitted to view directly, resulting in unauthorized information disclosure...

CVE-2024-6366-PoC

CVE-2024-6366-PoC User Profile Builder = 3.11.7 - Subida de medios sin autenticación Descripción El plugin User Profile Builder de WordPress anterior a 3.11.8 no cuenta con la autorización adecuada, lo que permite a usuarios no autenticados subir archivos multimedia mediante la funcionalidad de...

CVE-2026-95866

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Field in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-93656

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Field in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-95866 User Profile Builder <= 4.0.2 - Unauthenticated Stored Cross-Site Scripting via Avatar Field

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Field in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it...

EUVD-2026-86598

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Field in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-95866 User Profile Builder <= 4.0.2 - Unauthenticated Stored Cross-Site Scripting via Avatar Field

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Field in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it...