CVE-2026-57279

Cybozu Garoon contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of a user logged in to the product...

EUVD-2026-55082

Cybozu Garoon contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of a user logged in to the product...

ASUSTOR ADM - aggrecate_js.cgi RCE (CVE-2018-11510)

Exploits command injection in ASUSTOR ADM aggrecatejs.cgi script=launcher parameter. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """ASUSTOR ADM aggrecatejs.cgi RCE CVE-2018-11510 — opens execute session.""" import re from urllib.parse import quote from...

ASUSTOR ADM - aggrecate_js.cgi RCE Detection (CVE-2018-11510)

Detects CVE-2018-11510 by injecting ls into /portal/apis/aggrecatejs.cgi?script=launcher"&CMD&" and matching directory listing. !/usr/bin/env python3 -- coding: utf-8 -- """ASUSTOR ADM aggrecatejs.cgi unauthenticated RCE CVE-2018-11510.""" import re from kittysploit import from...

EUVD-2026-54995

The s2Member WordPress plugin before 260805 does not escape several shortcode attributes before outputting them inside an inline script context, allowing users with contributor-level access to inject arbitrary JavaScript that executes when a viewer opens the post stored XSS...

CVE-2026-15047

The s2Member WordPress plugin before 260805 does not escape several shortcode attributes before outputting them inside an inline script context, allowing users with contributor-level access to inject arbitrary JavaScript that executes when a viewer opens the post stored XSS...

CVE-2026-19379

CVE-2026-19379 affects EFM ipTIME AX8004M (firmware 15.09.0) where the popen function in /cgi/d.cgi under CGI Endpoint can be abused to inject commands via fname. The issue enables remote code execution and is supported by public disclosure; exploitation maturity is PROOF-OF-CONCEPT per the CVSS ...

PT-2026-69885

Name of the Vulnerable Software and Affected Versions use-reducer-async affected versions not specified Description Malicious commits were introduced into the default branch of the repository, which executed remote attacker-controlled code on developer workstations during the npm install process...

PT-2026-69996

Name of the Vulnerable Software and Affected Versions react18-use affected versions not specified Description react18-use, a React 19 use hook shim, contained malicious commits in its default branch between 2026-05-19 01:07:01 and 2026-05-19 15:20:43. The issue involves the addition of...

PT-2026-69347

Name of the Vulnerable Software and Affected Versions s2Member WordPress plugin versions prior to 260805 Description The plugin fails to escape several shortcode attributes before they are output within an inline script context. This allows users with contributor-level access to perform a stored...

PT-2026-69970

Name of the Vulnerable Software and Affected Versions react-tracked affected versions not specified Description Malicious commits were introduced into the default branch of the repository, which execute remote attacker-controlled code on developer workstations during the npm install process. The...

CVE-2026-48158: Embedded Malicious Code

use-context-selector is a React useContextSelector hook in userland Between 2026-05-18 15:57:18 and 2026-05-19 15:24:34, the default branch contained malicious commits 9d8481a513b7b0d1c0941b220c69b25de748641b through 6f2dae054ca014068bdbbb4db96006424d674124 that executed remote attacker-controlle...

PT-2026-76474

Summary Any authenticated user with access to a terminal server could get script of their choosing to run in the Open WebUI origin itself. The HTML file preview rendered terminal-served files in an iframe whose sandbox always granted allow-same-origin alongside allow-scripts, and the file is serv...

PT-2026-69940

Name of the Vulnerable Software and Affected Versions Dokploy versions 0.29.2 through 0.29.12 Description In the apps/dokploy/server/api/routers/schedule.ts file, the schedule.create and schedule.update endpoints derive the serviceId from the applicationId or composeId. Due to an error where the...

PT-2026-69933

Name of the Vulnerable Software and Affected Versions FlyEnv versions prior to 4.18.0 Description FlyEnv fails to sanitize HTML content originating from markdown rendering and AI chat messages when passed to Vue v-html directives. This allows attackers to inject malicious scripts that execute...

TrueConf Server Authentication Bypass Privilege Escalation

The vulnerability of the TrueConf Server software is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary scripts and increase their privileges...

PT-2026-69857

Name of the Vulnerable Software and Affected Versions use-context-selector affected versions not specified Description Between 2026-05-18 15:57:18 and 2026-05-19 15:24:34, the default branch contained malicious commits that executed remote attacker-controlled code on developer machines during npm...

CVE-2026-48161: Embedded Malicious Code

react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contained malicious commits 7b79148d1495a2505f9277da295a98cf176f4496 through 7b79148d1495a2505f9277da295a98cf176f4496 that executed remote attacker-controlled code on developer machine...

PT-2026-69389

Name of the Vulnerable Software and Affected Versions Cybozu Garoon affected versions not specified Description Cross-site scripting allows an arbitrary script to be executed in the web browser of a user logged in to the product. Recommendations At the moment, there is no information about a newe...

CVE-2026-57279: Improper Neutralization of Input During Web Page Generation

Cybozu Garoon contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of a user logged in to the product...