EUVD-2026-84821

Gardener implements the automated management and operation of Kubernetes clusters as a service. Prior to 1.142.6, 1.143.3, 1.144.2, and 1.145.0, the customverbauthorizer admission plugin's mustCheckProjectMembers manage-members check compares changes to User subjects but does not account for Grou...

wildfly-messaging-activemq-subsystem: artemis-server: jgroups: artemis cluster password leak via jgroups spoof

Artemis and JGroups lack of access controls in certain situations can allow an attacker to spoof a password request in JGroups and subsequently gain access to the cluster. This allows the attacker manage-level authority for provided messaging and queue operations...

Oracle E-Business Suite <=12.2 - Authentication Bypass

Oracle E-Business Suite component: Manage Proxies 12.1 and 12.2 are susceptible to an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise it by self-registering for an account. Successful attacks of this vulnerability can result in...

Atlassian Jira <7.13.3/8.0.0-8.1.1 - Incorrect Authorization

Atlasssian Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 is susceptible to incorrect authorization. The ManageFilters.jspa resource allows a remote attacker to enumerate usernames via an incorrect authorization check, thus possibly obtaining sensitive information, modifyi...

cve-2020-28653-poc

Manage Engine OpManager CVE-2020-28653 概念実証 この概念実証は、Manage Engine OpManagerインスタンスがCVE-2020-28653に対して脆弱かどうかを検出します。検出は、シリアル化されたペイロードを含むリクエストをインスタンスに送信することで行われます。ペイロードがデシリアライズされると、インスタンスはDNSルックアップを実行します。 インストール 1. 以下のコマンドでリポジトリをクローンします: git clone https://github.com/intrigueio/cve-2020-2853-poc 2...

CVE-2023-43357-CMSmadesimple-Stored-XSS---Shortcut

CMSmadesimple 格納型XSS v2.2.18 作成者: Sergio 説明: CMSmadesimple v.2.2.18 のクロスサイトスクリプティング脆弱性により、ローカルの攻撃者が My Preferences - Manage Shortcuts の Title に細工したスクリプトを介して任意のコードを実行できます。 攻撃ベクトル: スクリプティング: "My Preferences - Manage Shortcuts" の Title への入力のサニタイズ処理に脆弱性があり、ユーザーが Web ページにアクセスしたときに実行される JavaScript...

CVE-2023-43873-e107-CMS-Stored-XSS---Manage

e107 CMS 存储型 XSS v2.3.2 作者：Sergio 描述： e017 CMS v.2.3.2 中的跨站脚本（XSS）漏洞允许本地攻击者通过管理菜单中“名称”字段的恶意脚本执行任意代码。 攻击向量： 对管理菜单“名称”字段输入内容消毒的漏洞，允许注入 JavaScript 代码，当用户访问网页时该代码将被执行。 POC： 登录面板后，我们将进入常规菜单的“管理”部分。 我们编辑已创建的站点设置，并看到可以在“名称”字段中注入任意 JavaScript 代码。 XSS 负载： root@kitploit: 附加信息： https://e107.org/...

CVE-2023-30212-POC-DOCKER-FILE

CVE-2023-30212 POC : クロスサイトスクリプティング /client/manage/ourphpout.php 経由 CVE-2023-30212 の影響を受ける製品 : ベンダー| 製品| バージョン ---|---|--- ourphp| ourphp| 7.2.0...

CVE-2023-30212

CVE-2023-30212 ラボのセットアップ 前提条件 docker.io をダウンロードする sudo apt install -y docker.io 手順 1. 以下のコマンドを使用して、私のリポジトリからすべてのファイルをダウンロードします。 git clone https://github.com/AAsh035/CVE-2023-30212.git 2. 次に、Docker イメージを作成するために以下のコマンドを実行します。 sudo docker build -t vuln . 3. 次に、Docker イメージをコンテナに変更します。コンテナはポート 80...

CVE-2025-67315

CSRF 停用任意员工 摘要 员工管理 功能存在跨站请求伪造（CSRF）漏洞。 攻击者可诱骗已登录的管理员发送伪造请求，在管理员不知情或未同意的情况下停用员工（例如 inid=1）。 CVSS 基础评分：5.4（中危） 向量字符串： CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L 受影响功能 模块： 管理面板 → 员工 → 管理员工 操作： 停用员工（通过 inid 参数） 复现步骤 1. 以管理员身份登录 导航至 /admin 端点，并使用有效的管理员凭据登录。 2. 打开“管理员工” 从仪表盘点击 员工 → 管理员工 。 3. 捕获停用请求...

Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite

Summary There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite Vulnerability Details CVEID:CVE-2026-59645 DESCRIPTION: In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects...

wildfly-messaging-activemq-subsystem: artemis-server: jgroups: artemis cluster password leak via jgroups spoof

Artemis and JGroups lack of access controls in certain situations can allow an attacker to spoof a password request in JGroups and subsequently gain access to the cluster. This allows the attacker manage-level authority for provided messaging and queue operations...

CVE-2026-90850

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

EUVD-2026-78252

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-90850

CVE-2026-90850 affects PHPGurukul Hostel Management System 3.0 , specifically an unspecified function in the file /admin/manage-students.php . The vulnerability enables cross-site scripting (XSS) via remote manipulation. Exploitation requires high privileges (authenticated admin-level access) and...

CVE-2026-90850 PHPGurukul Hostel Management System manage-students.php cross site scripting

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

PT-2026-91845

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

Security Bulletin: There is a vulnerability in IBM WebSphere Application Server Liberty used by IBM Maximo Manage application in IBM Maximo Application Suite

Summary Security Bulletin: There is a vulnerability in IBM WebSphere Application Server Liberty used by IBM Maximo Manage application in IBM Maximo Application Suite CVE-2026-3621,CVE-2026-8633,CVE-2026-8620,CVE-2026-10852,CVE-2026-8858,CVE-2026-9072,CVE-2026-11536, CVE-2026-9071 Vulnerability...

Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite

Summary There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite Vulnerability Details CVEID:CVE-2026-59949 DESCRIPTION: yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object a...

CVE-2024-12145

The BuddyPress WordPress plugin (versions ≤ 14.3.3 ) is vulnerable to an Insecure Direct Object Reference in the bp_notifications_action_bulk_manage function, caused by missing validation on a user-controlled key. Authenticated attackers with Subscriber-level access or higher can delete or change...