CVE-2024-27956-RCE

CVE-2024-27956-RCE 针对 CVE-2024-27956 的概念验证（PoC），即 ValvePress Automatic 插件中的 SQL 注入漏洞。该 PoC 利用漏洞在目标系统中创建用户并赋予管理员权限。在 WordPress 中获得管理员权限可导致远程代码执行。 用法 root@kitploit: git clone https://github.com/diego-tella/CVE-2024-27956-RCE/ cd CVE-2024-27956-RCE python exploit.py http://target.com 有效载荷 用于创建用户的 SQ...

CVE-2024-27956-RCE

CVE-2024-27956-RCE CVE-2024-27956のPoCです。ValvePress AutomaticプラグインにおけるSQLインジェクションです。このPoCは脆弱性を悪用し、ターゲットにユーザーを作成し、管理者権限を付与します。WordPressで管理者になると、リモートコード実行につながる可能性があります。 使い方 root@kitploit: git clone https://github.com/diego-tella/CVE-2024-27956-RCE/ cd CVE-2024-27956-RCE python exploit.py...

MASS-CVE-2024-27956

MASS-CVE-2024-27956-RCE Un PoC per CVE-2024-27956, un SQL Injection nel plugin ValvePress Automatic. Questo PoC sfrutta la vulnerabilità creando un utente nel target e assegnando diritti di Amministratore. Essere un amministratore in WordPress può portare a Remote Code Execution. Utilizzo...

EUVD-2024-30480

Malicious code in bioql PyPI...

CVE-2024-32693

Cross-Site Request Forgery CSRF vulnerability in ValvePress Automatic.This issue affects Automatic: from n/a before 3.93.0...

Exploit for SQL Injection in Valvepress Automatic

CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection i...

Exploit for SQL Injection in Valvepress Automatic

MASS-CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Inject...

Exploit for SQL Injection in Valvepress Automatic

CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection i...

VulnCheck KEV: CVE-2024-27956

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic through 3.92.0...

CVE-2024-32693

Cross-Site Request Forgery CSRF vulnerability in ValvePress Automatic.This issue affects Automatic: from n/a before 3.93.0...

CVE-2024-32693

CVE-2024-32693 is a CSRF vulnerability in the WordPress WordPress Automatic Plugin (ValvePress Automatic) affecting versions prior to 3.93.0. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L with a base score of 7.6 (HIGH). Impact: confidentiality is Low, integrity is High, ava...

CVE-2024-27956

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0...

CVE-2024-27956

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0...

CVE-2024-27956

Summary of CVE-2024-27956 (WordPress WP Automatic SQLi) : The WP Automatic plugin (WordPress) is vulnerable to unauthenticated SQL Injection, affecting versions up to 3.92.0 (and variants noting patch to 3.92.1). The underlying issue is insufficient input handling in the plugin’s SQL queries, ena...

PT-2024-3159

Name of the Vulnerable Software and Affected Versions ValvePress Automatic versions prior to 3.92.1 Description The issue is related to an SQL Injection vulnerability that allows attackers to execute arbitrary SQL commands. This can lead to site takeovers and malicious activities. The vulnerabili...