CVE-2023-41425-wonderCMS_RCE

CVE-2023-41425-wonderCMSRCE Wonder CMS v.3.2.0～v.3.4.2におけるクロスサイトスクリプティングの脆弱性により、リモート攻撃者がinstallModuleコンポーネントにアップロードした細工されたスクリプトを介して任意のコードを実行できる可能性があります。 教育目的のみ loginURLの知識、管理者アクセス権、または管理者にXSSリンクをクリックさせる能力が必要です。 1. リポジトリをクローンする root@kitploit: git clone...

CVE-2024-31666

脆弱性の概要 Flusity-CMS v.2.33 には脆弱性が存在し、リモート攻撃者が細工されたスクリプトを通じて editaddonpost.php コンポーネントで任意のコードを実行できる可能性があります。 影響を受けるバージョン Flusity-CMS v.2.33 脆弱性の詳細 攻撃者は editaddonpost.php コンポーネントに細工されたスクリプトを送信することでこの脆弱性を悪用し、標的サーバー上で任意のコードを実行する可能性があります。 影響 この脆弱性により、攻撃者がサーバー上で任意のコードを実行し、サーバー全体を制御できる可能性があります。 発見者：胡詩雅...

CVE-2024-31666

Vulnerability Overview A vulnerability exists in Flusity-CMS v.2.33 that allows a remote attacker to execute arbitrary code via a crafted script in the editaddonpost.php component. Affected Versions Flusity-CMS v.2.33 Vulnerability Details An attacker can exploit this vulnerability by sending a...

VulnCheck KEV: CVE-2026-72530

TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system...

A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.

...

Linux Distros Unpatched Vulnerability : CVE-2026-38753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in the awksub function editors/awk.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...

Linux Distros Unpatched Vulnerability : CVE-2026-38752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK...

AZL-92835 CVE-2026-38752 affecting package busybox for versions less than 1.36.1-26

A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...

DEBIAN-CVE-2026-38752

A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...

CVE-2026-38752

A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...

CVE-2026-38753

A use-after-free in the awksub function editors/awk.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...

CVE-2026-38753

A use-after-free in the awksub function editors/awk.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...

JLSEC-2026-556

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

JLSEC-2026-558

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3 allows attackers to perform Sandbox Escape via a crafted script file...

PT-2026-47116

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3 allows attackers to perform Sandbox Escape via a crafted script file...

PT-2026-47115

Stack overflow in lua resume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

EUVD-2023-31489

An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted PHP file...

PT-2026-37629

Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...

CVE-2026-30603

An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...

CVE-2026-30603

An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...