Articles

§06 · Field notes

CVE · PLUGINS · ZERO-DAYS

GitHub

Jul 26, 2026 · CVE-2026-14266

CVE-2026-14266: 7zip

## The Exploit The following exploit requires no authentication. It triggers a failed compilation or unintended behavior when 7-Zip processes a crafted archive that forces inclusion of the wrong Windows header file. ```bash # This constructs a malformed 7z archive that triggers...

7zip

3 min read · 0 findings

Read →

latest · 226 of 226

All 226 WordPress Plugins 0 GitHub 226 Folder 0

GitHub

Dec 21, 2025 · 2 min read

CVE-2025-13361

## The Exploit Attacker needs to trick a logged-in WordPress administrator into issuing a forged POST request. ```http POST /wp-admin/admin.php?page=wpscl-map-fields HTTP/1.1 Host: target.example.com Cookie: wordpress_logged_in_abcd=YOUR_...

Read article →