CVE-2021-29447

WordPress 5.6-5.7 - XXE Autenticado Author+ CVE-2021-29447 Utilização Passo 1. Executar o WordPress root@kitploit: $ make up-wp Passo 2. Executar o servidor web do atacante root@kitploit: $ make up-mal Passo 3. Gerar arquivo WAV malicioso Sem o wavefile npm Recomendado root@kitploit: $ echo -en...

CVE-2021-29447

Ordem de instalação e execução 0. Executar docker root@kitploit: $docker-compose up 1. Executar wordpress.sh Antes de instalar o WordPress, configure o arquivo wp-config.php. root@kitploit: $docker exec -it -u root wordpress /bin/bash -c "/usr/local/bin/wordpress.sh" 2. Instalar o WordPress...

blind-xxe-controller-CVE-2021-29447

Controlador de XXE cego Criei este controlador ao fazer a máquina metatwo no HackTheBox para explorar a CVE-2021-29447, que é uma vulnerabilidade XXE do WordPress na Biblioteca de Mídia que afeta as versões 5.7, 5.6.2, 5.6.1, 5.6, 5.0.11. Nela, um usuário autenticado com permissão para enviar...

CVE-2021-29447

CVE-2021-29447 - Exploit della vulnerabilità XXE di WordPress Descrizione Questo repository contiene un exploit per CVE-2021-29447, una vulnerabilità XXE XML External Entity presente in WordPress 5.7.0 e versioni precedenti. La vulnerabilità risiede nella libreria multimediale che elabora file WA...

CVE-2021-29447

WAV iXML XXE Exploit Generator Erzeugt bösartige WAV-Dateien, die XXE-Schwachstellen in WordPress-Plugins ausnutzen, die iXML-Metadaten-Chunks parsen z.B. BookingPress │ Target │ └──────────┘ └──────────┘ ▲ │ │ │ 2. Parse XML │ │ │ 3. GET /xxe.dtd │ │─────────────────────────────┘ │ │ 4. GET...

Project-Project-Chimera-Exploiting-a-Modern-WordPress-XXE-to-Pillage-Secrets-

Projektziel: Demonstration einer vollständigen Angriffskette auf eine verwundbare WordPress-Installation unter Ausnutzung von CVE-2021-29447 XXE in der Medienbibliothek zur Erlangung von Remote-Codeausführung und vollständiger Systemkompromittierung. Phase 1: Aufklärung & Enumeration Netzwerkscan...

CVE-2021-29447

CVE-2021-29447 Impatto Divulgazione arbitraria di file: il contenuto di qualsiasi file sul filesystem dell'host potrebbe essere recuperato, ad esempio wp-config.php che contiene dati sensibili come le credenziali del database. Server-Side Request Forgery SSRF: potrebbero essere effettuate richies...

demo-CVE-2021-29447-lezione

POC CVE-2021029447 - XXE in WordPress WordPress 5.6-5.7 - Authentifizierter Autor+ XXE CVE-2021-29447 https://vulners.com/cve/CVE-2021-29447 Verwendung Schritt 1. WordPress ausführen root@kitploit: $ make up-wp Schritt 2. Angreifer-Webserver ausführen root@kitploit: $ make up-mal Schritt 3...

cve-2021-29447_auto-script

CVE-2021-29447: WordPress Media Library XXE-Schwachstelle Dieses Repository beschreibt die CVE-2021-29447-Schwachstelle, einen kritischen Sicherheitsfehler in WordPress, der authentifizierte XML-External-Entity-Angriffe XXE über die Media Library ermöglichte. Es enthält außerdem ein automatisches...

CVE-2021-29447-POC

CVE-2021-29447-POC परिचय यह स्क्रिप्ट Wordpress में मीडिया अपलोड कार्यक्षमता में CVE-2021-29447 का शोषण करने और XXE के माध्यम से फ़ाइलें निकालने के लिए आवश्यक चरणों को स्वचालित करती है। उपयोग root@kitploit: ./generatepayloads.py --help usage: generatepayloads.py -h --local-ip LOCALIP --local-port...

SUSE CVE-2026-19387

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. Thi...

CVE-2026-19387

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. Thi...

PT-2026-69329

Name of the Vulnerable Software and Affected Versions GStreamer gst-plugins-bad affected versions not specified Description A heap out-of-bounds write occurs in the adpcmdec element when decoding IMA/DVI ADPCM audio. This is caused by insufficient validation of the per-block sample count for...

libsndfile: integer overflow in ima_reader_init()

A flaw was found in the libsndfile library. An integer overflow in the IMA ADPCM codec can occur when a specially crafted WAV audio file is processed, specifically with malicious samplesperblock and blocks values. This can lead to a heap-based buffer overflow, causing a crash to the application...

Astra Linux – Vulnerability in wavpack

WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variables. The impact includes unexpected control flow, crashes, and segfaults. The affected component is ParseCaffHeaderConfig caff.c:486. The attack vector is a maliciously crafted .wav file. The fixed version is after the...

CVE-2026-4009

A vulnerability has been found in jarikomppa soloud up to 20200207. Impacted is the function drwavreadpcmframess16msadpcm in the library src/audiosource/wav/drwav.h of the component WAV File Parser. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The exploi...

CVE-2018-25212 Boxoft wav-wma Converter 1.0 Local Buffer Overflow SEH

Boxoft wav-wma Converter 1.0 contains a local buffer overflow vulnerability in structured exception handling that allows attackers to execute arbitrary code by crafting malicious WAV files. Attackers can create a specially crafted WAV file with excessive data and ROP gadgets to overwrite the SEH...

EUVD-2026-11542

A vulnerability has been found in jarikomppa soloud up to 20200207. Impacted is the function drwavreadpcmframess16msadpcm in the library src/audiosource/wav/drwav.h of the component WAV File Parser. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The exploi...

CVE-2026-4009

A vulnerability has been found in jarikomppa soloud up to 20200207. Impacted is the function drwavreadpcmframess16msadpcm in the library src/audiosource/wav/drwav.h of the component WAV File Parser. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The exploi...

CVE-2026-4009

CVE-2026-4009 affects jarikomppa soloud, specifically the WAV File Parser component. The vulnerability is in the function drwav_read_pcm_frames_s16__msadpcm within src/audiosource/wav/dr_wav.h, causing an out-of-bounds read. The issue can be exploited locally, and the exploit has been disclosed p...