EUVD-2025-210830

The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc...

CVE-2025-15485

CVE-2025-15485 affects the Auto x LINE WordPress plugin through version 1.0.0 . The plugin lacks authorization checks on certain REST API endpoints , enabling unauthenticated users to invoke them and update plugin settings or clear logs . The vulnerability carries a CVSS v3.1 score of 8.2 (HIGH) ...

CVE-2025-15485 Auto x LINE <= 1.0.0 – Unauthenticated REST API Endpoints Call

The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc...

CVE-2025-15485 Auto x LINE <= 1.0.0 – Unauthenticated REST API Endpoints Call

The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc...

XCP_ng_CVE-2026-43284_tester

Diagnóstico de Dirty Frag para XCP-ng — CVE-2026-43284 Una herramienta de diagnóstico comunitaria para determinar si un host dom0 de XCP-ng está expuesto a CVE-2026-43284 "Dirty Frag", una vulnerabilidad de escalada de privilegios local en el subsistema xfrm-ESP del kernel de Linux. TL;DR — Todas...

xz

xz — portable binary distribution Vendored xz-utils @ 5.8.3 post-CVE-2024-3094 — portable binary distribution for the x-cmd package ecosystem. Install root@kitploit: macOS / Linux anywhere with x: x eget x-cmd-build/xz --to /usr/local/bin/xz Manual: 1. Go to...

Drupalgeddon-Python3

Edición Python3 de Drupalgeddon Un POC reescrito sobre CVE-2014-3704, realizado como parte de mi entrenamiento CPTS en HackTheBox. https://nvd.nist.gov/vuln/detail/CVE-2014-3704 CVE-2014-3704 conocido como Drupalgeddon, afecta las versiones 7.0 hasta 7.31 y fue corregido en la versión 7.32. Esta...

CVE-2022-24112

CVE-2022-24112 CVE-2022-24112: Apache APISIX apisix/batch-requests RCE Plantilla de nuclei: CVE-2022-24112.yaml La esencia de esta vulnerabilidad es similar a CVE-2021-45232, ambas consisten en eludir la autorización o acceder sin ella para ejecutar comandos maliciosos mediante filterfunc o scrip...

CVE-2026-3854

CVE-2026-3854: RCE on GitHub via X-Stat header injection Practical summary of how the vulnerability discovered by Wiz Research in GitHub.com and GitHub Enterprise Server's internal git push pipeline works. Disclaimer This material is for educational purposes and offensive security research. The...

Lab-for-cve-2018-15133

Resumen: Explotación de la vulnerabilidad de deserialización CVE-2018-15133 Este exploit aprovecha una vulnerabilidad de deserialización en Laravel Framework hasta 5.5.40 y 5.6.x hasta 5.6.29. Descripción La ejecución remota de código podría ocurrir como resultado de una llamada a unserialize sob...

CVE-2025-29927_demo

CVE-2025-29937 Reproduction Steps root@kitploit: npm i npm run dev curl -H "x-middleware-subrequest: middleware:middleware:middleware:middleware:middleware" http://localhost:3000/protected...

AZL-98441 CVE-2026-14957 affecting package libreswan 4.15-2

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

CVE-2026-14957

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

CVE-2017-7504-poc

JBoss 4.x JBossMQ JMS Deserialization Vulnerability poc -h view usage instructions...

EUVD-2026-69820

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

CVE-2026-14957

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

mantis_rce

mantisrce Python script to obtain RCE on Mantis Bug Tracker prior to version 1.2.x Check CVE-2008-4687 for additional information...

SUSE CVE-2026-37236

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

EUVD-2026-69718

WWBN AVideo fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For headers, allowing attackers to spoof the client address used by enforceRateLimit. Attackers can rotate the header value per request to bypass login rate limiting and perform unlimited credential guessing...

CVE-2018-14667

CVE-2018-14667 Después de pasar mucho tiempo para entender y explotar correctamente este CVE, decidí construir un repositorio sobre el bug RCE de RichFaces 3.X y compartir los HOWTOs paso a paso con la comunidad. 0x00 : Introducción sobre el bug de RichFaces 3.X El lunes 19 de noviembre, Joao F M...