39 matches found
CVE-2025-53694-to-CVE-2025-53691
Sitecore CVE Chain Exploits This repository contains proof-of-concept exploits for a critical vulnerability chain in Sitecore Experience Platform XP versions up to 10.4.1. Vulnerabilities CVE-2025-53694: Information Disclosure CVE-2025-53693: Cache Poisoning CVE-2025-53691: Remote Code Execution...
POC_CVE-2026-41940
POCCVE-2026-41940 ๅฟซ้ๅผๅง root@kitploit: python3 pocCVE-2026-41940.py -h ไฝฟ็จ็คบไพ ๆซๆๅไธชไธปๆบ root@kitploit: python3 pocCVE-2026-41940.py -u https://target.example:2086 ๆๅๅฉ็จ้พๅๅๅบ่ดฆๆท root@kitploit: python3 pocCVE-2026-41940.py -u https://target.example:2086 --action list ๆง่ก shell ๅฝไปค root@kitploit: python3...
wp2shell-scanner
wp2Shell ๆซๆๅจ โ ้ๅธฆ PoC CVE-2026-63030 ๅ CVE-2026-60137 โ WordPress wp2shell ๆผๆด้พๆซๆๅจ ็ปๆๆ็ๅฎๅ จ็ ็ฉถๅทฅๅ ท๏ผๅธฆๆๅฏ้ๅฝไปค้ช่ฏ PoCใ wp2shell-scanner ้่ฟ้ช่ฏๅ ฌๅผ็ WordPress ่ฏๆฎใๆ็บนๆด้ฒ็็ๆฌใๆฃๆฅ REST ๆนๅค็่กไธบไปฅๅๆต้ไธปๅจๆถๅบๅทฎๅผ๏ผๆฅๆฃๆต WordPress wp2shell ๆผๆด้พใๅฎ้็จไบๆๆ็้ฒๅพกๆง็ ็ฉถใCTF ็ฏๅขไปฅๅไฝ ๆฅๆๆ็ฎก็็็ณป็ปใ โ ๏ธ ๆณๅพไธ้ๅพทๅฃฐๆ ๆฌ้กน็ฎไธฅๆ ผ้ไบๆๆ็ๅฎๅ จๆต่ฏๅ้ฒๅพกๆง็ ็ฉถใ ไป ้ๅฏนไฝ ๆฅๆใ็ฎก็ๆๅทฒ่ทๅพๆ็กฎ่ฎธๅฏ็็ณป็ปไฝฟ็จใ...
wp2shell-lab
wp2shell lab & detector + pre-auth RCE PoC A self-contained lab, non-destructive detector , and full pre-auth RCE proof-of-concept for wp2shell โ the pre-authentication vulnerability chain in WordPress core:...
Wordfence Argus Finds Complex 6 Step Critical RCE in Avada Theme with 1 Million Sales
A year ago we wrote that we'd put AI to work across the whole company, turning everyone on the team into a capable AI operator so our defenders could stay ahead of the threat actors attacking the sites we protect. In April we showed where it was heading: in the space of a few months, AI-assisted...
CVE-2026-44103
The CVE-2026-44103 entry details an unauthenticated remote code/integrity issue where the JupiCore firmware update mechanism transmits updates without integrity or verification checks, allowing an attacker to inject malicious firmware into the internal charging module. This could compromise devic...
WP2Shell WordPress Exploit Technical Analysis and Real Attack Data
On July 17th, 2026, the WordPress Security Team released updates to WordPress core addressing a critical vulnerability chain that can be leveraged by unauthenticated attackers to create an administrator account and then execute code through normal administrator capabilities, such as uploading a...
wp2shell
wp2shell โ Pre-Auth RCE in WordPress core Unauthenticated W...
The Hardest Fork
Mythos is real. I know a big chunk of the industry thinks it's a marketing stunt, and I get why. I get it. But I've seen the findings, and they're bad. These aren't "whoops, this line right here is wrong, and that's RCE." They're novel combinations of a few dozen issues out of thousands of things...
Linux Kernel - Local Privilege Escalation
Titles: Linux Kernel Local Privilege Escalation CVE-2026-43284 / CVE-2026-43500 / CVE-2026-46300 Author: nu11secur1ty Date: 2026-05-11 Vendor: Linux Kernel Software: Linux Kernel All major distributions Vulnerability Type: Page-Cache Write / Memory Corruption Status: HIGH / CRITICAL --- Descripti...
Exploit for CVE-2026-47102
CVE-2026-47102 โ LiteLLM Privilege Escalation via /user/updat...
PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian Networks
A pro-Ukrainian hacktivist group called PhantomCore has been attributed to attacks actively targeting servers running TrueConf video conferencing software in Russia since September 2025. That's according to a report published by Positive Technologies, which found the threat actors to be leveragin...
@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (>=0.8.3-beta.1, <=0.9.0-beta.7) +18 more potentially affected by CVE-2026-43569 via openclaw (>=2026.3.22, <=2026.4.5)
openclaw NPM version =2026.3.22, =0.1.0, =0.8.3-beta.1, =0.1.0, =2026.3.25, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =4.2.0 - openclaw-chatclaw 0.1.0 and more Source cves: CVE-2026-43569 Source advisory: OSV:GHSA-939R-RJ45-G2RJ...
GHSA-37J7-56XC-C468 Idno Vulnerable to Remote Code Execution via Chained Import File Write and Template Path Traversal
Affected Versions: Tested on current dev branch build fingerprint 505...7bd86 CVSS v4 Score: 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Privileges Required: Web application admin account for file write, any authenticated user for RCE trigger --- Summary Two separate...
๐ Sitecore Experience Manager / Experience Platform 10.1 Shell Upload / Hardcoded Credentials
Proof of concept exploit for a remote code execution vulnerability chain affecting Sitecore Experience Platform versions 10.x combining hardcoded credentials with file upload vulnerabilities for complete system compromise...
Exploit for Incorrect Authorization in Suse Pam-Config
CVE-2025-6018 + CVE-2025-6019 Exploit Chain This exploit was...
Exploit-chain
Exploit-chain Exploit chain range building and penetration xx...
PT-2025-31845 ยท Nvidia ยท Nvidia Triton Inference Server
Name of the Vulnerable Software and Affected Versions: NVIDIA Triton Inference Server versions prior to 25.07 Description: NVIDIA Triton Inference Server contains a vulnerability in the Python backend that allows an attacker to cause an out-of-bounds write by sending a specially crafted request...
GO-2025-3791 Babylon vulnerable to chain half when transaction has fees different than `ubbn` in github.com/babylonlabs-io/babylon
Babylon vulnerable to chain half when transaction has fees different than ubbn in github.com/babylonlabs-io/babylon...
CVE-2023-32523
Affected versions of Trend Micro Mobile Security Enterprise 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities. Please note: an attacker must first obtain the ability to execute low-privileged code on the target...