MASS-CVE-2024-27956

MASS-CVE-2024-27956-RCE CVE-2024-27956的PoC，这是ValvePress Automatic插件中的一个SQL注入漏洞。该PoC利用漏洞在目标上创建用户并赋予管理员权限。成为WordPress管理员后可能导致远程代码执行。 用法 root@kitploit: git clone https://github.com/itzheartzz/MASS-CVE-2024-27956/ cd MASS-CVE-2024-27956 python3 exploit.py list.txt...

CVE-2024-27956-RCE

CVE-2024-27956-RCE CVE-2024-27956のPoCです。ValvePress AutomaticプラグインにおけるSQLインジェクションです。このPoCは脆弱性を悪用し、ターゲットにユーザーを作成し、管理者権限を付与します。WordPressで管理者になると、リモートコード実行につながる可能性があります。 使い方 root@kitploit: git clone https://github.com/diego-tella/CVE-2024-27956-RCE/ cd CVE-2024-27956-RCE python exploit.py...

CVE-2024-27956-RCE

CVE-2024-27956-RCE 针对 CVE-2024-27956 的概念验证（PoC），即 ValvePress Automatic 插件中的 SQL 注入漏洞。该 PoC 利用漏洞在目标系统中创建用户并赋予管理员权限。在 WordPress 中获得管理员权限可导致远程代码执行。 用法 root@kitploit: git clone https://github.com/diego-tella/CVE-2024-27956-RCE/ cd CVE-2024-27956-RCE python exploit.py http://target.com 有效载荷 用于创建用户的 SQ...

EUVD-2025-18543

Malicious code in bioql PyPI...

EUVD-2025-21618

Malicious code in bioql PyPI...

EUVD-2025-15500

Malicious code in bioql PyPI...

EUVD-2025-19978

Malicious code in bioql PyPI...

EUVD-2025-24746

Malicious code in bioql PyPI...

EUVD-2025-15494

Malicious code in bioql PyPI...

EUVD-2024-30480

Malicious code in bioql PyPI...

EUVD-2025-15497

Malicious code in bioql PyPI...

CVE-2025-39510

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows SQL Injection.This issue affects Pinterest Automatic Pin: from n/a through 4.19.0...

CVE-2025-39510

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows SQL Injection.This issue affects Pinterest Automatic Pin: from n/a through 4.19.0...

CVE-2025-39510

CVE-2025-39510 affects the WordPress plugin “Pinterest Automatic Pin” (ValvePress). The issue is an SQL Injection due to improper neutralization of inputs in the plugin prior to version 4.19.0. Affected versions are those before 4.19.0 (reported as

PT-2025-33169 · WordPress · Valvepress Pinterest Automatic Pin

Name of the Vulnerable Software and Affected Versions: ValvePress Pinterest Automatic Pin affected versions not specified Description: An improper neutralization of special elements used in an SQL command vulnerability exists in ValvePress Pinterest Automatic Pin. This allows for SQL injection...

CVE-2025-46500

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ValvePress Wordpress Auto Spinner wp-auto-spinner allows Reflected XSS.This issue affects Wordpress Auto Spinner: from n/a through = 3.26.0...

CVE-2025-46500

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ValvePress Wordpress Auto Spinner wp-auto-spinner allows Reflected XSS.This issue affects Wordpress Auto Spinner: from n/a through = 3.26.0...

PT-2025-29796 · WordPress · Valvepress Wordpress Auto Spinner

Name of the Vulnerable Software and Affected Versions: ValvePress Wordpress Auto Spinner versions through 3.25.0 Description: The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update ValvePress...

CVE-2025-39487

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ValvePress Rankie valvepress-rankie allows Reflected XSS.This issue affects Rankie: from n/a through = 1.8.2...

CVE-2025-39487

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ValvePress Rankie valvepress-rankie allows Reflected XSS.This issue affects Rankie: from n/a through = 1.8.2...