CVE-2024-27956-RCE

CVE-2024-27956-RCE Un PoC para CVE-2024-27956, una inyección SQL en el plugin ValvePress Automatic. Este PoC explota la vulnerabilidad creando un usuario en el objetivo y otorgándole derechos de Administrador. Ser administrador en WordPress puede llevar a la Ejecución Remota de Código. Uso...

MASS-CVE-2024-27956

MASS-CVE-2024-27956-RCE CVE-2024-27956のPoCです。ValvePress AutomaticプラグインにおけるSQLインジェクションです。このPoCは脆弱性を悪用して、ターゲットにユーザーを作成し、管理者権限を付与します。WordPressで管理者になることで、リモートコード実行が可能になります。 使用方法 root@kitploit: git clone https://github.com/itzheartzz/MASS-CVE-2024-27956/ cd MASS-CVE-2024-27956 python3 exploit.py list....

CVE-2024-27956-RCE

CVE-2024-27956-RCE CVE-2024-27956のPoCです。ValvePress AutomaticプラグインにおけるSQLインジェクションです。このPoCは脆弱性を悪用し、ターゲットにユーザーを作成し、管理者権限を付与します。WordPressで管理者になると、リモートコード実行につながる可能性があります。 使い方 root@kitploit: git clone https://github.com/diego-tella/CVE-2024-27956-RCE/ cd CVE-2024-27956-RCE python exploit.py...

EUVD-2024-30480

Malicious code in bioql PyPI...

CVE-2024-32693

Cross-Site Request Forgery CSRF vulnerability in ValvePress Automatic.This issue affects Automatic: from n/a before 3.93.0...

Exploit for SQL Injection in Valvepress Automatic

CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection i...

Exploit for SQL Injection in Valvepress Automatic

MASS-CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Inject...

Exploit for SQL Injection in Valvepress Automatic

CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection i...

VulnCheck KEV: CVE-2024-27956

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0...

CVE-2024-32693

Cross-Site Request Forgery CSRF vulnerability in ValvePress Automatic.This issue affects Automatic: from n/a before 3.93.0...

CVE-2024-32693

CVE-2024-32693 is a CSRF vulnerability in the WordPress WordPress Automatic Plugin (ValvePress Automatic) affecting versions prior to 3.93.0. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L with a base score of 7.6 (HIGH). Impact: confidentiality is Low, integrity is High, ava...

CVE-2024-27956

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0...

CVE-2024-27956

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0...

CVE-2024-27956

Summary of CVE-2024-27956 (WordPress WP Automatic SQLi) : The WP Automatic plugin (WordPress) is vulnerable to unauthenticated SQL Injection, affecting versions up to 3.92.0 (and variants noting patch to 3.92.1). The underlying issue is insufficient input handling in the plugin’s SQL queries, ena...

PT-2024-3159

Name of the Vulnerable Software and Affected Versions ValvePress Automatic versions prior to 3.92.1 Description The issue is related to an SQL Injection vulnerability that allows attackers to execute arbitrary SQL commands. This can lead to site takeovers and malicious activities. The vulnerabili...