Lucene search
+L

54 matches found

Kitploit
Kitploit
โ€ขadded 2026/08/25 4:32 a.m.โ€ข1 views

CVE-2026-60137

wpsqli - WordPress SQLi ์ถ”์ถœ๊ธฐ CVE-2026-60137 WordPress ์ฝ”์–ด์˜ authornotin SQL ์ธ์ ์…˜ ์ทจ์•ฝ์ ์„ ์•…์šฉํ•˜๋Š” ๋น ๋ฅด๊ณ  ๋ฉ”๋‰ด ๊ธฐ๋ฐ˜์˜ ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ์ถ”์ถœ ๋„๊ตฌ์ž…๋‹ˆ๋‹ค. ์ด ๋„๊ตฌ๋Š” REST ๋ฐฐ์น˜ ๋ผ์šฐํŠธ ํ˜ผ๋™CVE-2026-63030์„ ํ™œ์šฉํ•ด ์ธ์ฆ ์—†์ด SQLi ์‹ฑํฌ์— ๋„๋‹ฌํ•˜์—ฌ, ์ˆœ์ˆ˜ํ•˜๊ฒŒ ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ์—ด๊ฑฐ์™€ ๋คํ”„์— ์ง‘์ค‘ํ•ฉ๋‹ˆ๋‹ค. ๋ชฉ์ฐจ ๊ฐœ์š” ์ทจ์•ฝ์  ์ฒด์ธ ์˜ํ–ฅ๋ฐ›๋Š” ๋ฒ„์ „ ๊ธฐ๋Šฅ ์„ค์น˜ ์‚ฌ์šฉ๋ฒ• ๋ฉ”๋‰ด ์˜ต์…˜ ์ถ”์ถœ ๋ชจ๋“œ ์„ฑ๋Šฅ ๋ฒ•์  ๊ณ ์ง€ ๊ฐœ์š” wpsqli๋Š” WordPress ์ฝ”์–ด์˜ ์ฒด์ธ ์ทจ์•ฝ์ ์„ ์•…์šฉํ•˜์—ฌ ์ธ์ฆ ์—†...

9.8CVSS9.3AI score0.97271EPSS
SaveExploits76
Kitploit
Kitploit
โ€ขadded 2026/08/25 4:30 a.m.โ€ข1 views

wp2shell

wp2shell - WordPress RCE PoC CVE-2026-63030 + CVE-2026-60137 WordPress Core์—์„œ ์ธ์ฆ๋˜์ง€ ์•Š์€ ์›๊ฒฉ ์ฝ”๋“œ ์‹คํ–‰ ์ œ์ž‘: JohenLastGen ๐Ÿ“Œ ๊ฐœ์š” ์ด ๋„๊ตฌ๋Š” ๋‘ ๊ฐ€์ง€ ์น˜๋ช…์ ์ธ WordPress ์ทจ์•ฝ์ ์„ ์—ฐ๊ณ„ํ•˜์—ฌ ์ธ์ฆ๋˜์ง€ ์•Š์€ RCE ๋ฅผ ๋‹ฌ์„ฑํ•ฉ๋‹ˆ๋‹ค: ์ทจ์•ฝ์ | CVE| ์„ค๋ช… ---|---|--- REST ๋ฐฐ์น˜ ๋ผ์šฐํŠธ ํ˜ผ๋™| CVE-2026-63030| ๊ฒ€์ฆ ์šฐํšŒ, SQLi ํŽ˜์ด๋กœ๋“œ ๋ฐ€๋ฐ˜์ž… WPQuery authornotin SQLi| CVE-2026-60137| ์›์‹œ...

9.8CVSS9.4AI score0.97271EPSS
SaveExploits76
Kitploit
Kitploit
โ€ขadded 2026/08/25 4:30 a.m.โ€ข2 views

Wp2Shell

wp2shell WordPress ์ฝ”์–ด์˜ ์‚ฌ์ „ ์ธ์ฆ ์›๊ฒฉ ์ฝ”๋“œ ์‹คํ–‰. CVE-2026-60137 WPQuery์˜ SQL ์ธ์ ์…˜๊ณผ CVE-2026-63030 REST API ๋ฐฐ์น˜ ๊ฒฝ๋กœ ํ˜ผ๋™์„ ์—ฐ์‡„์ ์œผ๋กœ ์‚ฌ์šฉํ•ฉ๋‹ˆ๋‹ค. ๊ต์œก ๋ฐ ์Šน์ธ๋œ ๋ณด์•ˆ ์—ฐ๊ตฌ ๋ชฉ์ ์œผ๋กœ๋งŒ ์‚ฌ์šฉํ•˜์‹ญ์‹œ์˜ค. ์˜ํ–ฅ์„ ๋ฐ›๋Š” ๋ฒ„์ „ WordPress 6.9.0๋ถ€ํ„ฐ 6.9.4๊นŒ์ง€, 7.0.0๋ถ€ํ„ฐ 7.0.1๊นŒ์ง€ ์ทจ์•ฝํ•ฉ๋‹ˆ๋‹ค. 6.9.5 ๋ฐ 7.0.2์—์„œ ์ˆ˜์ •๋˜์—ˆ์Šต๋‹ˆ๋‹ค. ์ž‘๋™ ๋ฐฉ์‹ ์ด ์ต์Šคํ”Œ๋กœ์ž‡์€ ๋‘ ๊ฐ€์ง€ ์ทจ์•ฝ์ ์„ ์—ฐ์‡„์ ์œผ๋กœ ์‚ฌ์šฉํ•ฉ๋‹ˆ๋‹ค. CVE-2026-63030 โ€” ๋ฐฐ์น˜ ๊ฒฝ๋กœ ํ˜ผ๋™...

9.8CVSS9.3AI score0.97271EPSS
SaveExploits76
Kitploit
Kitploit
โ€ขadded 2026/08/25 4:30 a.m.โ€ข1 views

wp2shell

wp2shell ์‚ฌ์ „ ์ธ์ฆ์„ ํ†ตํ•œ WordPress ์ฝ”์–ด ์›๊ฒฉ ์ฝ”๋“œ ์‹คํ–‰. CVE-2026-60137 WPQuery์˜ authornotin / authorexclude ๋งค๊ฐœ๋ณ€์ˆ˜์˜ SQLi๊ณผ CVE-2026-63030 REST API ๋ฐฐ์น˜ ๊ฒฝ๋กœ ํ˜ผ๋™์„ ์—ฐ์‡„์ ์œผ๋กœ ์‚ฌ์šฉํ•˜์—ฌ ์ธ์ฆ ์—†์ด RCE๋ฅผ ์ˆ˜ํ–‰ํ•ฉ๋‹ˆ๋‹ค. ์˜ํ–ฅ์„ ๋ฐ›๋Š” ๋ฒ„์ „...

9.8CVSS9.3AI score0.97271EPSS
SaveExploits76
Kitploit
Kitploit
โ€ขadded 2026/08/25 4:30 a.m.โ€ข1 views

wp2shell

CVE-2026-63030 + CVE-2026-60137 - โ€œwp2shellโ€: WordPress ์ฝ”์–ด์˜ ์ธ์ฆ ์—†๋Š” ์›๊ฒฉ ์ฝ”๋“œ ์‹คํ–‰ RCE REST API ๋ฐฐ์น˜ ๋ผ์šฐํŠธ ํ˜ผ๋™CVE-2026-63030๊ณผ WPQuery authornotin SQL ์ธ์ ์…˜CVE-2026-60137์˜ ์ฒด์ด๋‹ โ†’ ๊ธฐ๋ณธ WordPress ์„ค์น˜์— ๋Œ€ํ•œ ์ธ์ฆ ์ „ ์›๊ฒฉ ์ฝ”๋“œ ์‹คํ–‰. Adam KuesAssetnote / Searchlight Cyber๊ฐ€ ๋ฐœ๊ฒฌ, 2026-07-17 ๊ณต๊ฐœ. ๊ถŒ๊ณ : GHSA-ff9f-jf42-662q,...

9.8CVSS9.2AI score0.97271EPSS
SaveExploits76References6
Kitploit
Kitploit
โ€ขadded 2026/08/25 4:27 a.m.โ€ข1 views

CVE-2022-21661

CVE-2022-21661 1.์†Œ๊ฐœ WordPress v4.1v5.8.2 WPQuery SQL Injection POC 2.์‚ฌ์šฉ๋ฒ• root@kitploit: poc -h 192.168.1.1 // ๅ•ไธชๆ‰ซๆ poc -f host.txt // ๆ‰น้‡ๆ‰ซๆ 3.๋ฉด์ฑ… ์กฐํ•ญ ์ด ๋„๊ตฌ๋Š” ํ•™์Šต, ์—ฐ๊ตฌ ๋ฐ ์ž์ฒด ์ ๊ฒ€ ์šฉ๋„๋กœ๋งŒ ์‚ฌ์šฉํ•˜์‹ญ์‹œ์˜ค. ๋ถˆ๋ฒ•์ ์ธ ๋ชฉ์ ์œผ๋กœ ์‚ฌ์šฉํ•ด์„œ๋Š” ์•ˆ ๋˜๋ฉฐ, ๊ด€๋ จ ๋ฒ•๋ฅ  ๋ฐ ๊ทœ์ •์„ ์ค€์ˆ˜ํ•˜์‹œ๊ธฐ ๋ฐ”๋ž๋‹ˆ๋‹ค. ๋ณธ ๋„๊ตฌ๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ๋ฐœ์ƒํ•˜๋Š” ๋ชจ๋“  ์œ„ํ—˜์€ ์ž‘์„ฑ์ž์™€ ๋ฌด๊ด€ํ•ฉ๋‹ˆ๋‹ค!...

8CVSS8.1AI score0.97795EPSS
SaveExploits14
Kitploit
Kitploit
โ€ขadded 2026/08/25 4:25 a.m.โ€ข1 views

CVE-2022-21661

CVE-2022-21661 PoCๅ‹•็”ป | WordPress Core 5.8.2 - 'WPQuery' SQLใ‚คใƒณใ‚ธใ‚งใ‚ฏใ‚ทใƒงใƒณ CVE-2022-21661 : EDB : https://www.exploit-db.com/exploits/50663...

8CVSS7.5AI score0.97795EPSS
SaveExploits14
Kitploit
Kitploit
โ€ขadded 2026/08/25 4:24 a.m.โ€ข2 views

CVE-2024-50498

CVE-2024-50498 ์˜ํ–ฅ์„ ๋ฐ›๋Š” ๋ฒ„์ „ WP Query Console =1.0 ํฌ๋ ˆ๋”ง https://github.com/RandomRobbieBF/CVE-2024-50498 ์ „์ œ ์ฟผ๋ฆฌ ์œ ํ˜•์€ WPQuery์ด๊ณ  WP Query Console์€ ์ผ๋ถ€ PHP ํ•จ์ˆ˜๋ฅผ ์‹คํ–‰ํ•ฉ๋‹ˆ๋‹ค. ์‚ฌ์šฉ๋ฒ• python .\CVE-2024-50498.py 192.168.41.163 --query "id"...

10CVSS9AI score0.53135EPSS
SaveExploits4
Kitploit
Kitploit
โ€ขadded 2026/08/25 4:15 a.m.โ€ข1 views

WordPress--CVE-2022-21661

CVE-2022-21661 POC ๋™์˜์ƒ | WordPress Core 5.8.2 - 'WPQuery' SQL ์ธ์ ์…˜ CVE-2022-21661 EDB : https://www.exploit-db.com/exploits/50663...

8CVSS8.1AI score0.97795EPSS
SaveExploits14
Kitploit
Kitploit
โ€ขadded 2026/08/25 4:14 a.m.โ€ข1 views

CVE-2022-21661-Technical-Analysis

CVE-2022-21661 ๊ฐœ์š” CVE-2022-21661์€ WordPress์— ์กด์žฌํ•˜๋Š” SQL ์ธ์ ์…˜ ์ทจ์•ฝ์ ์œผ๋กœ, ํŠนํžˆ 5.8.3 ์ด์ „ ๋ฒ„์ „์— ์˜ํ–ฅ์„ ๋ฏธ์นฉ๋‹ˆ๋‹ค. ์ด ์ทจ์•ฝ์ ์€ ์‚ฌ์šฉ์ž ์ •์˜ ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ์ฟผ๋ฆฌ์— ์‚ฌ์šฉ๋˜๋Š” WPQuery ํด๋ž˜์Šค์˜ ๋ถ€์ ์ ˆํ•œ ์‚ญ์ œsanitization๋กœ ์ธํ•ด ๋ฐœ์ƒํ•ฉ๋‹ˆ๋‹ค. ์ด๋Š” ์ „ํ˜•์ ์ธ SQL ์ธ์ ์…˜ ์ทจ์•ฝ์ ์œผ๋กœ, ๊ณต๊ฒฉ์ž๊ฐ€ ์•…์˜์ ์ธ ์ž…๋ ฅ์„ ์ฃผ์ž…ํ•˜์—ฌ ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ์ฟผ๋ฆฌ๋ฅผ ์กฐ์ž‘ํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์ด๋กœ ์ธํ•ด ๋ฏผ๊ฐํ•œ ๋ฐ์ดํ„ฐ์— ๋Œ€ํ•œ ๋ฌด๋‹จ ์•ก์„ธ์Šค, ๋ฐ์ดํ„ฐ ์กฐ์ž‘, ๋˜๋Š” ์˜ํ–ฅ์„ ๋ฐ›๋Š” WordPress ์‚ฌ์ดํŠธ์˜ ์™„์ „ํ•œ ์†์ƒ์œผ๋กœ...

8CVSS7.7AI score0.97795EPSS
SaveExploits14
Kitploit
Kitploit
โ€ขadded 2026/08/24 5:41 p.m.โ€ข1 views

wp2shell-poc

wp2shell ๐Ÿ’™ ํ”„๋กœ์ ํŠธ ์ง€์› ์ œ ์ž‘์—…์ด ๋„์›€์ด ๋˜์…จ๋‹ค๋ฉด, USDTTRC20๋กœ ํ”„๋กœ์ ํŠธ๋ฅผ ํ›„์›ํ•ด ์ฃผ์‹ค ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค: TQBA72kakjCZLnJt8fJYcD7dyQCEpzNtVN WordPress ์ฝ”์–ด ์‚ฌ์ „ ์ธ์ฆ RCE ์ฒด์ธ wp2shell ์€ WordPress ์ฝ”์–ด์˜ ์‚ฌ์ „ ์ธ์ฆ ์ทจ์•ฝ์  ์ฒด์ธ์„ ์‹œ์—ฐํ•˜๋Š” ๋ณด์•ˆ ์—ฐ๊ตฌ์šฉ ๊ฐœ๋… ์ฆ๋ช… ๋„๊ตฌ๋กœ, ๋‹ค์Œ๊ณผ ๊ฐ™์€ ์ทจ์•ฝ์ ์„ ๊ฒฐํ•ฉํ•ฉ๋‹ˆ๋‹ค: CVE-2026-63030 โ€” REST API ๋ฐฐ์น˜ ๋ผ์šฐํŠธ ํ˜ผ๋™ CVE-2026-60137 โ€” WPQuery SQL ์ธ์ ์…˜ ์ด ์ฒด์ธ์€ ์ด๋Ÿฌํ•œ ์ทจ์•ฝ์ ๋“ค์ด ๊ฒฐํ•ฉ๋˜...

9.8CVSS9.2AI score0.97271EPSS
SaveExploits76
Kitploit
Kitploit
โ€ขadded 2026/08/24 12:09 p.m.โ€ข1 views

wp2shell-Wordpress-TOWN

wp2shell ์ œ์ž‘: lucifer0xf WordPress ์ฝ”์–ด์šฉ ์ธ์ฆ ์—†๋Š” ์›๊ฒฉ ์ฝ”๋“œ ์‹คํ–‰ PoC CVE-2026-63030 + CVE-2026-60137 wp2shell๋Š” WordPress ์ฝ”์–ด์˜ ์น˜๋ช…์ ์ธ ์ทจ์•ฝ์  ์ฒด์ธ์„ ์œ„ํ•œ ์ต์Šคํ”Œ๋กœ์ž‡์ž…๋‹ˆ๋‹ค. REST API ๋ฐฐ์น˜ ๋ผ์šฐํŠธ ํ˜ผ๋™ ๋ฒ„๊ทธ์™€ WPQuery์˜ SQL ์ธ์ ์…˜์„ ์—ฐ๊ฒฐํ•˜์—ฌ ์ทจ์•ฝํ•œ WordPress ์„ค์น˜ ํ™˜๊ฒฝ์—์„œ ์ธ์ฆ ์—†๋Š” ์›๊ฒฉ ์ฝ”๋“œ ์‹คํ–‰ ์„ ๋‹ฌ์„ฑํ•ฉ๋‹ˆ๋‹ค...

9.8CVSS0.97271EPSS
SaveExploits76
Kitploit
Kitploit
โ€ขadded 2026/08/24 12:06 p.m.โ€ข1 views

wp2shell

wp2shell โ€” WordPress ์ฝ”์–ด ์‚ฌ์ „ ์ธ์ฆ RCEPre-Auth RCE CVE-2026-63030 + CVE-2026-60137์„ ์—ฐ์‡„์ ์œผ๋กœ ํ™œ์šฉํ•˜๋Š” ์ธ์ฆ๋˜์ง€ ์•Š์€ WordPress ์ฝ”์–ด RCE PoC์ž…๋‹ˆ๋‹ค. ์Šน์ธ๋œ ํ…Œ์ŠคํŠธ ์ „์šฉ์ž…๋‹ˆ๋‹ค. wp2shell.py๋Š” ๋‘ ๊ฐ€์ง€ WordPress ์ฝ”์–ด ์ทจ์•ฝ์ ์„ ์—ฐ์‡„ํ•˜์—ฌ ์ธ์ฆ๋˜์ง€ ์•Š์€ ์›๊ฒฉ ์ฝ”๋“œ ์‹คํ–‰์„ ๋‹ฌ์„ฑํ•˜๋Š” ๋‹จ์ผ ํŒŒ์ผ, ํ‘œ์ค€ ๋ผ์ด๋ธŒ๋Ÿฌ๋ฆฌ ์ „์šฉ ๊ฐœ๋… ์ฆ๋ช…PoC์ž…๋‹ˆ๋‹ค. CVE| ๊ตฌ์„ฑ ์š”์†Œ| ๋ฒ„๊ทธ ---|---|--- CVE-2026-63030| REST /batch/v1 ํ•ธ๋“ค๋Ÿฌ| ...

9.8CVSS0.97271EPSS
SaveExploits76References2
Kitploit
Kitploit
โ€ขadded 2026/08/24 10:59 a.m.โ€ข1 views

CVE-2026-63030-Wp2Shell

CVE-2026-63030 wp2shell โ€” WordPress ํ•ต์‹ฌ Pre-Auth RCE REST API ๋ฐฐ์น˜ ๋ผ์šฐํŠธ ํ˜ผ๋™, CVE-2026-60137 SQL ์ธ์ ์…˜๊ณผ ์—ฐ์‡„ TL;DR โ€” ์ธ์ฆ๋˜์ง€ ์•Š์€ ๊ณต๊ฒฉ์ž๊ฐ€ WordPress REST API ๋ฐฐ์น˜ ๋ผ์šฐํŒ… ๋ฒ„๊ทธ์™€ WPQuery์˜ SQL ์ธ์ ์…˜์„ ์—ฐ์‡„ํ•˜์—ฌ ๊ธฐ๋ณธ WordPress ์„ค์น˜์—์„œ ์™„์ „ํ•œ ์›๊ฒฉ ์ฝ”๋“œ ์‹คํ–‰RCE์— ๋„๋‹ฌํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ํ”Œ๋Ÿฌ๊ทธ์ธ, ๊ณ„์ •, ์‚ฌ์šฉ์ž ์ƒํ˜ธ์ž‘์šฉ์ด ํ•„์š”ํ•˜์ง€ ์•Š์Šต๋‹ˆ๋‹ค. ์ด ์ทจ์•ฝ์ ์€ Adam KuesAssetnote / Searchlight Cyber๊ฐ€...

9.8CVSS0.97271EPSS
SaveExploits76
Kitploit
Kitploit
โ€ขadded 2026/08/24 2:32 a.m.โ€ข1 views

wp-cve-2026-63030-check

wp2shell-check WordPress ใฎ "wp2shell" ไบ‹ๅ‰่ช่จผ RCE ใƒใ‚งใƒผใƒณใซๅฏพใ™ใ‚‹้žไพต่ฅฒๅž‹ๆšด้œฒใƒใ‚งใƒƒใ‚ซใƒผ ๏ผˆCVE-2026-63030 + CVE-2026-60137๏ผ‰ใ€‚ โš ๏ธ ่จฑๅฏใ•ใ‚ŒใŸไฝฟ็”จใฎใฟใ€‚ ๆ‰€ๆœ‰ใ—ใฆใ„ใ‚‹ใ€ใพใŸใฏๆ˜Ž็คบ็š„ใชใƒ†ใ‚นใƒˆ่จฑๅฏใ‚’ๅพ—ใŸ WordPress ใ‚คใƒณใ‚นใ‚ฟใƒณใ‚นใซๅฏพใ—ใฆใฎใฟๅฎŸ่กŒใ—ใฆใใ ใ•ใ„ใ€‚ ใ“ใ‚Œใฏใƒˆใƒชใ‚ขใƒผใ‚ธๆ”ฏๆดใƒ„ใƒผใƒซใงใ‚ใ‚Šใ€ใ‚จใ‚ฏใ‚นใƒ—ใƒญใ‚คใƒˆใงใฏใ‚ใ‚Šใพใ›ใ‚“ใ€‚่จฑๅฏใชใใ‚ทใ‚นใƒ†ใƒ ใ‚’ใ‚นใ‚ญใƒฃใƒณใ™ใ‚‹ใจ้•ๆณ•ใจใชใ‚‹ๅ ดๅˆใŒใ‚ใ‚Šใพใ™ใ€‚ ๆฉŸ่ƒฝ wp2shell-check ใฏใ€URL ใ‚’ไธŽใˆใ‚‹ใจๆฌกใฎใ“ใจใ‚’่กŒใ„ใพใ™: 1. ใƒ›ใƒผใƒ ใƒšใƒผใ‚ธใฎ generator meta...

9.8CVSS0.97271EPSS
SaveExploits76
Kitploit
Kitploit
โ€ขadded 2026/08/24 1:03 a.m.โ€ข1 views

wp2shell

wp2shell ไฝœ่€…: ek0ms savi0r WordPress Core ๅ‘ใ‘ใฎๆœช่ช่จผใƒชใƒขใƒผใƒˆใ‚ณใƒผใƒ‰ๅฎŸ่กŒ POC CVE-2026-63030 + CVE-2026-60137 wp2shell ใฏใ€WordPress ใ‚ณใ‚ขใฎ้‡ๅคงใช่„†ๅผฑๆ€งใƒใ‚งใƒผใƒณใ‚’ๅˆฉ็”จใ™ใ‚‹ใ‚จใ‚ฏใ‚นใƒ—ใƒญใ‚คใƒˆใงใ™ใ€‚REST API ใฎใƒใƒƒใƒใƒซใƒผใƒˆๆททไนฑใƒใ‚ฐใจ WPQuery ใฎ SQL ใ‚คใƒณใ‚ธใ‚งใ‚ฏใ‚ทใƒงใƒณใ‚’็ต„ใฟๅˆใ‚ใ›ใ€่„†ๅผฑใช WordPress ใ‚คใƒณใ‚นใƒˆใƒผใƒซไธŠใง ๆœช่ช่จผใฎใƒชใƒขใƒผใƒˆใ‚ณใƒผใƒ‰ๅฎŸ่กŒ ใ‚’้”ๆˆใ—ใพใ™ใ€‚ ่ฉณ็ดฐ| ๆƒ…ๅ ฑ ---|--- CVE| CVE-2026-63030 REST ใƒใƒƒใƒใƒซใƒผใƒˆๆททไนฑ +...

9.8CVSS0.97271EPSS
SaveExploits76
Kitploit
Kitploit
โ€ขadded 2026/08/22 9:00 a.m.โ€ข1 views

wp2shell-lab

mini-wp-rest ไธ€ไธช็ดงๅ‡‘ใ€ๆ— ไพ่ต–็š„ WordPress REST API ๅฐ็‰‡ๆฎต้‡ๆ–ฐๅฎž็Žฐโ€”โ€”ไป…ๅคŸๆœๅŠกไธ€ไธชๅ…ฌๅผ€ๆ–‡็ซ ้›†ๅˆ๏ผŒๅนถๅœจไธ€ๆฌกๅพ€่ฟ”ไธญๆ‰ง่กŒๅคšไธชๅญ่ฏทๆฑ‚ใ€‚้€‚ๅˆ็”จไบŽๆ•™ๅญฆ WordPress ่ทฏ็”ฑใ€WPQuery ๅ’Œ $wpdb ๅฆ‚ไฝ•ๅๅŒๅทฅไฝœ๏ผŒ่€Œๆ— ้œ€ๅผ•ๅ…ฅๆ•ดไธชๆ ธๅฟƒใ€‚ ็ซฏ็‚น...

5.3AI score
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/08/21 1:18 a.m.โ€ข1 views

wp2shell-PoC

wp2shell-PoC โš  ์ด ๋„๊ตฌ๋Š” ๊ต์œก ๋˜๋Š” ๋ฒ„๊ทธ ๋ฐ”์šดํ‹ฐ ๋ชฉ์ ์œผ๋กœ๋งŒ ์ œ์ž‘๋˜์—ˆ์Šต๋‹ˆ๋‹ค. ํ†ต์ œ๋œ ํ™˜๊ฒฝ ์™ธ์—์„œ์˜ ๋ฌด๋‹จ ์‚ฌ์šฉ์€ ์—„๊ฒฉํžˆ ๊ธˆ์ง€๋ฉ๋‹ˆ๋‹ค. ๊ฐœ์š” WordPress Core์— ์˜ํ–ฅ์„ ์ฃผ๋Š” wp2shell ์ทจ์•ฝ์  ์ฒด์ธCVE-2026-63030 ๋ฐ CVE-2026-60137 ๊ฒฐํ•ฉ์˜ ๊ฐœ๋… ์ฆ๋ช…์ž…๋‹ˆ๋‹ค. ์ด ํ”„๋กœ์ ํŠธ๋Š” REST API Batch ๋ผ์šฐํŠธ ํ˜ผ๋™ ์ทจ์•ฝ์ ๊ณผ WPQuery SQL ์‚ฝ์ž… ๊ฐ„์˜ ์ƒํ˜ธ ์ž‘์šฉ์„ ์‹œ์—ฐํ•˜์—ฌ, ์ธ์ฆ ์—†์ด WordPress ์ „์ฒด๋ฅผ ์žฅ์•…ํ•˜๊ณ  ์›๊ฒฉ ์ฝ”๋“œ ์‹คํ–‰RCE์— ์ด๋ฅด๋Š” ๊ฒฝ๋กœ๋ฅผ ๋ณด์—ฌ์ค๋‹ˆ๋‹ค. ์ „์ฒด ๊ถŒ๊ณ ๋ฌธ์€์—ฌ๊ธฐ์—์„œ...

9.8CVSS0.97271EPSS
SaveExploits76
Kitploit
Kitploit
โ€ขadded 2026/08/19 6:14 p.m.โ€ข1 views

POC-CVE-2026-63030-CVE-2026-60137-

PoC: WP2Shell โ€” CVE-2026-63030 & CVE-2026-60137 -red?style=for-the-badge ๐Ÿ“Œ ๊ฐœ์š” Overview WP2Shell ์€ WordPress Core ์†Œ์Šค ์ฝ”๋“œ์˜ ์‹ฌ๊ฐํ•œ ์ทจ์•ฝ์  ์ฒด์ธExploit Chain์œผ๋กœ, ์›๊ฒฉ ๊ณต๊ฒฉ์ž๊ฐ€ ์ธ์ฆ ์—†์ดUnauthenticated Remote Attacker ์„œ๋ฒ„๋ฅผ ์™„์ „ํžˆ ์žฅ์•…ํ•  ์ˆ˜ ์žˆ๊ฒŒ ํ•ฉ๋‹ˆ๋‹ค Full Server Takeover / RCE. ์ด ์ต์Šคํ”Œ๋กœ์ž‡ ์ฒด์ธ์€ ๋‘ ๊ฐ€์ง€ ๋ณด์•ˆ ์ทจ์•ฝ์ ์„ ๊ฒฐํ•ฉํ•ฉ๋‹ˆ๋‹ค: 1. CVE-2026-63030 REST A...

9.8CVSS9.4AI score0.97271EPSS
SaveExploits76
Kitploit
Kitploit
โ€ขadded 2026/08/19 12:35 p.m.โ€ข1 views

CVE-2026-60137-WordPress-Core-SQL-Injection-PoC

CVE-2026-60137 โ€” WordPress ์ฝ”์–ด SQL ์ธ์ ์…˜ PoC CVE-2026-60137 ์— ๋Œ€ํ•œ ๋น„ํŒŒ๊ดด์  ๊ฐœ๋… ์ฆ๋ช…proof-of-concept ๋ฐ ๊ฒ€์ฆ ํ•˜๋„ค์Šค์ž…๋‹ˆ๋‹ค. WordPress ์ฝ”์–ดWPQuery::authornotin์˜ ๋ธ”๋ผ์ธ๋“œ SQL ์ธ์ ์…˜์œผ๋กœ, REST API์˜ authorexclude ํŒŒ๋ผ๋ฏธํ„ฐ๋ฅผ ํ†ตํ•ด ๋„๋‹ฌํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ๊ทผ๋ณธ ์›์ธ WPQuery::getposts๋Š” authornotin ์ฟผ๋ฆฌ ๋ณ€์ˆ˜๋ฅผ ๋ฌธ์ž์—ด๋กœ ์—ฐ๊ฒฐํ•˜์—ฌ SQL์„ ์ƒ์„ฑํ•ฉ๋‹ˆ๋‹ค: root@kitploit: ... AND...

9.1CVSS0.78305EPSS
SaveExploits57
Rows per page
Query Builder