270203 matches found
CVE-2026-78657
The SigmaForms Pro – AI Generated Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deletesubmissionfiles function in all versions up to, and including, 1.4.11. This makes it possible for unauthenticated attackers to delete arbitra...
CVE-2026-19116
The User Frontend WordPress plugin before 4.3.11 does not prevent user-supplied field values from being deserialized when a submitted post is reopened in its frontend editing form, allowing authenticated users with subscriber-level access and above to perform PHP Object Injection, which may lead ...
CVE-2026-14357
The DevKit Pro plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.3.0. This is due to a missing capability check and missing nonce validation in the DPDEVinstallthemesfunc function registered on the wpajaxDPDEVinstallthemes action. This makes it possib...
CVE-2019-16278_Nostromo-1.9.6---Remote-Code-Execution
POC Dépôt : https://github.com/CybermonkX/CVE-2019-16278Nostromo-1.9.6---Remote-Code-Execution.git 📜 Description Ce dépôt contient un exploit Python pour CVE-2019-16278 , une vulnérabilité dans Nostromo 1.9.6 un serveur web. Cette vulnérabilité permet l'exécution de code à distance Remote Code...
weblogic_honeypot
WebLogic honeypot Cymmetria Research, 2018. https://www.cymmetria.com/ Автор: Omer Cohen @omercnet Особая благодарность: Imri Goldberg @lorgandon, Itamar Sher, Nadav Lev Контакт: [email protected] WebLogic Honeypot — это хонпот с низким уровнем взаимодействия для обнаружения CVE-2017-10271 в...
PoC_CVE-2016-2098_Rails42
Un PoC de la CVE-2016-2098 rails 4.2.5.1 la vue contient un code vulnérable app/views/poc/render1.html.erb la commande suivante provoquera une exécution de code à distance $ curl ':3000/poc/render1?template\inline='...
CVE-2023-47129
CVE-2023-47129 - Statamic CMS versions 4.33.0 - Exécution de code à distance Description Dans les versions 4.33.0 de Statamic CMS où le frontal comporte un formulaire avec téléchargement de fichiers actif, il est possible d'envoyer des fichiers PHP créés pour ressembler à des images, indépendamme...
CVE-2021-36260
Vulnérabilité RCE CVE-2021-36260 de Hikvision Description de la vulnérabilité Cette vulnérabilité permet à un attaquant de prendre totalement le contrôle de l’appareil avec un shell root sans restriction, même si le propriétaire de l’appareil est limité à un shell protégé restreint psh. Outre...
CVE-2022-2992
CVE-2022-2992 Exécution de commandes à distance authentifiée dans Gitlab via l'importation GitHub. Une vulnérabilité dans GitLab CE/EE affectant toutes les versions de 11.10 avant 15.1.6, toutes les versions à partir de 15.2 avant 15.2.4, toutes les versions à partir de 15.3 avant 15.3.2 permet à...
gegl04 security update
An update is available for gegl04. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GEGL Generic Graphics Library is a graph-based image processing framework...
RLSA-2026:62170 Important: gegl04 security update
GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...
CVE-2021-29440
CVE-2021-29440 Traitement non sécurisé de Twig des pages statiques menant à une exécution de code à distance RCE dans Grav CMS 1.7.10 Grav est une plateforme web basée sur des fichiers. Le traitement Twig des pages statiques peut être activé dans le front matter par tout utilisateur administratif...
CVE-2026-19116
The User Frontend WordPress plugin before 4.3.11 allows PHP Object Injection via its frontend post editing form. When a submitted post is reopened, user-supplied field values are deserialized without proper sanitization, enabling any authenticated user with subscriber-level access or above to inj...
CVE-2026-19116 WP User Frontend < 4.3.11 - Subscriber+ PHP Object Injection via Frontend Post Edit Form
The User Frontend WordPress plugin before 4.3.11 does not prevent user-supplied field values from being deserialized when a submitted post is reopened in its frontend editing form, allowing authenticated users with subscriber-level access and above to perform PHP Object Injection, which may lead ...
EUVD-2026-69865
The User Frontend WordPress plugin before 4.3.11 does not prevent user-supplied field values from being deserialized when a submitted post is reopened in its frontend editing form, allowing authenticated users with subscriber-level access and above to perform PHP Object Injection, which may lead ...
CVE-2025-1094-Lab-Setup
🛠️ Лабораторная среда CVE-2025-1094 ⚠️ Дисклеймер Данная лабораторная работа предназначена только для образовательных и исследовательских целей. НЕ используйте информацию или методы, продемонстрированные здесь, на системах, которыми вы не владеете или на тестирование которых у вас нет явного...
CVE-2022-24112
CVE-2022-24112 Apache APISIX apisix/batch-requests RCE...
EUVD-2026-69872
The SigmaForms Pro – AI Generated Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deletesubmissionfiles function in all versions up to, and including, 1.4.11. This makes it possible for unauthenticated attackers to delete arbitra...
CVE-2026-78657
The SigmaForms Pro – AI Generated Forms WordPress plugin (versions ≤ 1.4.11) is affected by an unauthenticated arbitrary file deletion vulnerability rooted in insufficient file path validation in the delete_submission_files function. An attacker submits a malicious path traversal URL via the plug...