mitigation-cve-2019-9787

mitigation-cve-2019-9787 POC 1. simple xss : 2. simple csrf : code du site de l'attaquant --- https://github.com/kuangting4231/wordpress.github.io 3. csrf exécution de code à distance : code du site de l'attaquant --- https://github.com/kuangting4231/assigment1.github.io mitigation 1. corriger le...

CVE-2026-3494_Verfication

CVE-2026-3494 — Проверка ведения журнала аудита MariaDB serveraudit PoC Этот проект предоставляет специализированную среду для проверки и анализа потенциального обхода журналирования аудита в плагине serveraudit MariaDB при использовании определённых встроенных комментариев , -- в SQL-запросах...

CVE-2024-7514

CVE-2024-7514 WordPress Comments Import & Export = 2.3.7 - Authenticated Author+ Arbitrary File Read via Directory Traversal Description The WordPress Comments Import & Export plugin for WordPress is vulnerable to to arbitrary file read due to insufficient file path validation during the comments...

CVE-2026-103289

Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data...

CVE-2026-103274

Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, bypassing privacy settings...

CVE-2026-103289

The Ghost content management system, specifically versions 5.9.0 before 6.44.1 , is vulnerable to an authorization bypass within its comments feature . An input validation issue allows authenticated members to access and view restricted comment data for which they lack proper authorization. No sp...

CVE-2026-103289 Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comments

Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data...

CVE-2026-103289 Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comments

Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data...

EUVD-2026-90682

Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data...

CVE-2026-103289 Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comments

Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data...

EUVD-2026-90667

Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, bypassing privacy settings...

PoC-CVE-2025-62222

PoC: CVE-2025-62222 - GitHub Copilot Chat RCE Ce dépôt contient une preuve de concept PoC pour la vulnérabilité CVE-2025-62222. Il démontre comment une exécution de code à distance RCE peut être réalisée sur la machine d'un développeur en manipulant le contexte de GitHub Copilot Chat dans VS Code...

CVE-2026-100278

In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments...

EUVD-2026-90022

In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments...

CVE-2026-100278

In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments...

CVE-2026-100278

In JetBrains YouTrack versions prior to 2026.2.19197 , a vulnerability allows users with restricted permissions to edit and hide comments belonging to other users. This flaw impacts the integrity of user comments within the platform. No specific exploit information or remediation details are prov...

CVE-2026-93547

A missing authorization check in the Vaadin Spreadsheet component allows an authenticated user of an application that renders a spreadsheet to add or replace cell comments on a sheet that has protection enabled, including on cells that are locked. Writing a comment to a cell that does not exist y...

CVE-2026-93547

The Vaadin Spreadsheet component (including the Spreadsheet add-on for Vaadin Framework 7 and 8) contains a missing authorization check that allows authenticated users to add or replace cell comments on sheets with enabled protection, including locked cells. The underlying cause is that the handl...

CVE-2026-93547 Missing Authorization Check in Vaadin Spreadsheet Allows Cell Comments to Be Written to Protected Sheets and Locked Cells

A missing authorization check in the Vaadin Spreadsheet component allows an authenticated user of an application that renders a spreadsheet to add or replace cell comments on a sheet that has protection enabled, including on cells that are locked. Writing a comment to a cell that does not exist y...

EUVD-2026-89952

A missing authorization check in the Vaadin Spreadsheet component allows an authenticated user of an application that renders a spreadsheet to add or replace cell comments on a sheet that has protection enabled, including on cells that are locked. Writing a comment to a cell that does not exist y...