easy-exploits

easy-exploits The current repository contains exploits of different CVE IDs that were identified in the past by me CVE-2021-37910, CVE-2021-40288, CVE-2021-41435, CVE-2021-41436, CVE-2021-41437, CVE-2021-41441, CVE-2021-41442, CVE-2021-41445, CVE-2021-41449, CVE-2021-41450, CVE-2021-41451,...

How American Political Campaigns Are Using AI—and What They’re Spending on the Tools

This essay was written with Nathan E. Sanders, and originally appeared inThe Guardian. New campaign finance disclosure data shines a light on which US political campaigns are using AI tools and how much they are spending on them. Candidates', parties' and committees' spending reveals that AI is...

CVE-2018-9995_dvr_credentials

Tool show DVR Credentiales Exploit Title: "Gets DVR Credentials" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel twitter:@capitanalfa Exploit: $ curl...

cve-2018-9995

cve-2018-9995 exploit camera with vuln cve-2018-9995 Novo CeNova QSee Pulnix XVR 5 in 1 title: "XVR Login" Securus, - Security. Never Compromise !! - Night OWL DVR Login HVR Login MDVR Login...

CVE-2026-66625

Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...

EUVD-2026-81507

Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...

CVE-2026-66625 WordPress WC Vendors Marketplace plugin <= 2.7.2.1 - SQL Injection vulnerability

Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...

CVE-2026-66625

WC Vendors Marketplace , a WordPress plugin, is vulnerable to an administrator-level SQL injection in versions

CVE-2026-66625 WordPress WC Vendors Marketplace plugin <= 2.7.2.1 - SQL Injection vulnerability

Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...

WordPress WC Vendors Marketplace plugin <= 2.7.2.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WC Vendors Marketplace versions = 2.7.2.1...

CVE-2026-66625: Improper Neutralization of Special Elements used in an SQL Command

Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...

CVE-2026-81427

The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order, allowing any authenticated vendor to mark another vendor's order as shipped, add an order note falsely attributed to the victim vendor, and...

CVE-2026-81426

The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment status actions, which could allow attackers to make a logged-in vendor change the shipment status of their own orders via a crafted request...

CVE-2026-81428

The WC Vendors WordPress plugin before 2.7.2.1 does not verify ownership or the object type of user-supplied IDs when saving product variations, allowing authenticated users with the vendor role to modify product variations belonging to other vendors, and to change the status and title of arbitra...

WordPress WC Vendors plugin < 2.7.2.1 - Vendor+ Cross-Vendor Order Shipment Status Change vulnerability

Vendor+ Cross-Vendor Order Shipment Status Change vulnerability discovered by Bhaveshkumar Parmar in WordPress Plugin WC Vendors Marketplace versions 2.7.2.1...

CVE-2026-81428

The WC Vendors WordPress plugin (versions before 2.7.2.1 ) is vulnerable to an Insecure Direct Object Reference (IDOR) flaw. The plugin fails to verify the ownership or object type of user-supplied IDs during the process of saving product variations. This allows authenticated users with the vendo...

CVE-2026-81427

The WC Vendors WordPress plugin (versions before 2.7.2.1 ) contains a Missing Authorization vulnerability. The plugin fails to verify that a vendor owns the referenced order when submitting a shipment status change from the front-end. This allows any authenticated vendor to modify another vendor'...

WordPress WC Vendors plugin < 2.7.2.1 - Vendor+ Cross-Vendor Product and Arbitrary Post Modification vulnerability

Vendor+ Cross-Vendor Product and Arbitrary Post Modification vulnerability discovered by Usama Arshad in WordPress Plugin WC Vendors Marketplace versions 2.7.2.1...

EUVD-2026-69854

The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order, allowing any authenticated vendor to mark another vendor's order as shipped, add an order note falsely attributed to the victim vendor, and...

EUVD-2026-69855

The WC Vendors WordPress plugin before 2.7.2.1 does not verify ownership or the object type of user-supplied IDs when saving product variations, allowing authenticated users with the vendor role to modify product variations belonging to other vendors, and to change the status and title of arbitra...