Ghost-CMS-Code-Injection-Audit-CVE-2026-26980

Ghost CMS Code Injection Cleaner Removes injected code from every post and page on a Ghost CMS website via the Admin API. Use this to clean up a compromised Ghost site — for example, one affected by the code injection vulnerability CVE-2026-26980 — by stripping attacker-supplied tags and other...

CVE-2025-47549

Слайдер-галерея изображений до/после – BEAF 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft foreve...

CVE-2025-6934

CVE-2025-6934 escalade de privilèges non authentifiée dans Opal Estate Pro Description CVE-2025-6934 est une vulnérabilité critique dans le plugin WordPress Opal Estate Pro ≤ v1.7.5. Ce bogue permet à un attaquant non authentifié de créer un nouveau compte administrateur en envoyant une requête...

CVE-2024-27198_LAB

Лаборатория CVE-2024-27198 Описание TeamCity предоставляет страницу управления токенами, доступную только администратору, которая не защищена аутентификацией. Это позволяет неаутентифицированному пользователю создать токен доступа для администратора, если он сможет найти идентификатор существующе...

CVE-2026-105231

A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument...

EITS-Portal-Exploit-CVE-2026-31367-PoC

💥 CVE-2026-31367: EITS Admin Dashboard v2.4.0 - RCE PoC Этот репозиторий содержит Proof of Concept PoC для уязвимости неаутентифицированного удалённого выполнения кода RCE в EITS Admin Dashboard v2.4.0 CVE-2026-31367. Уязвимость возникает из-за ошибки в санитизации входных данных в конечной точке...

CVE-2026-82329-JFrog-Artifactory-

CVE-2026-82329-JFrog-Artifactory- CVE-2026-82329 — Обход аутентификации в JFrog Artifactory Уязвимость Критический обход аутентификации в JFrog Artifactory версии 7.111.20, 7.117.27, 7.125.19, 7.133.28, 7.146.37, 7.161.19. Недостаток позволяет неаутентифицированному атакующему подделать JWT,...

CVE-2026-105226

A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component Newsletter Management. Performing a manipulation of the argument module results in code injection. The attack is possible...

CVE-2026-105188

A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveEventHistory.php of the component Live Event History. The manipulation of the argument eventSubject results in cross site...

EUVD-2026-92253

A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument...

CVE-2026-105231 kishor-23 food-waste-management-system Admin Registration signup.php sql injection

A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument...

CVE-2026-105231

A SQL injection vulnerability exists in the Admin Registration component of the kishor-23 food-waste-management-system . Specifically, an unknown function within the admin/signup.php file fails to properly sanitize inputs, allowing an attacker to manipulate the email , username , or location argu...

CVE-2026-105231 kishor-23 food-waste-management-system Admin Registration signup.php sql injection

A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument...

CVE-2026-105231 kishor-23 food-waste-management-system Admin Registration signup.php sql injection

A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument...

CVE-2026-44403-WingFTP-v8.1.2-POC-Exploit

Wing FTP Server v8.1.2 содержит уязвимость удаленного выполнения кода RCE в механизме сериализации сессий. Аутентифицированный администратор может внедрить произвольный код Lua через поле mydirectory basefolder администратора домена, который выполняется на стороне сервера через loadfile. Это...

CVE-2025-65271

CVE-2025-65271 PoC pour CVE-2025-65271 Comment exécuter ? node server.js Description L'injection de templates côté client CSTI dans le tableau de bord administrateur du CMS Azuriom permet à un utilisateur à faibles privilèges d'exécuter du code template arbitraire dans le contexte de la session...

CVE-2025-4334

CVE-2025-4334 - Simple User Registration --form Arguments : -u / --url → URL de base de WordPress ex. https://target.com/wordpress/ --form → URL complète du formulaire d'inscription ex. https://target.com/wpr/default-registration/ Exemple : python3 CVE-2025-4334.py -u https://example.com/wordpres...

CVE-2024-45264

CVE-2024-45264 제안된 설명 SkySystem Arfa-CMS 5.1.3132 이전 버전의 관리자 패널에는 사이트 간 요청 위조CSRF 취약점이 있으며, 이를 통해 원격 공격자가 새 관리자를 추가하여 권한을 상승시킬 수 있습니다. 취약점 유형 CWE-352 | 사이트 간 요청 위조 CSRF 제품 공급업체 SkySystem https://skyss.ru/ 영향을 받는 제품 코드 베이스 Arfa-CMS - 5.1.3124 및 이전 버전 영향: 권한 상승 true 공급업체가 취약점을 확인하거나 인정했습니까? true 발견...

EUVD-2026-92250

A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component Newsletter Management. Performing a manipulation of the argument module results in code injection. The attack is possible...

CVE-2026-105226 osCommerce osCommerce2 Newsletter Management newsletters.php include code injection

A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component Newsletter Management. Performing a manipulation of the argument module results in code injection. The attack is possible...