PT-2026-106199

Name of the Vulnerable Software and Affected Versions Ghost versions 5.81.0 through 6.59.0 Description Staff members assigned the Author role can delete posts and pages that they did not create. Recommendations Update to version 6.60.0...

PT-2026-106216

Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.18.0 Description An issue exists where the assemble-chunks endpoint retrieves an upload session using only its session ID, failing to scope the lookup to the authenticated profile as the upload-chunk endpoint does. A...

CVE-2026-95264

Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An authenticated backend user with article edit permission can delete arbitrary files writable by the PHP process. Article image metadata is used to construct a filesystem path and is passed to unlink without path traversal or directory...

CVE-2026-95264

Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An authenticated backend user with article edit permission can delete arbitrary files writable by the PHP process. Article image metadata is used to construct a filesystem path and is passed to unlink without path traversal or directory...

PT-2026-106225

Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An authenticated backend user with article edit permission can delete arbitrary files writable by the PHP process. Article image metadata is used to construct a filesystem path and is passed to unlink without path traversal or directory...

PT-2026-106076

Plane is an open-source project management tool. Prior to 1.4.0, BulkEstimatePointEndpoint.destroy resolves an estimate point through a bare primary-key lookup without workspace, project, or estimate scoping. An administrator or member of one workspace can permanently delete an estimate point...

CVE-2026-105692: Improper Access Control

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-share-link RPC retrieves a caller-selected share-link ID and verifies only that the caller can edit the parent file. It does not verify that the caller created the share link or has owner or administrator...

Cisco ASA Path Traversal (CVE-2020-3187)

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and obtain read and delete access to sensitive files on a targeted...

PT-2026-106213

Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.18.0 Description An issue exists in the delete-share-link RPC where the system verifies only if the caller has permission to edit the parent file, failing to confirm if the caller created the share link or possesses...

CVE-2023-40868

CVE-2023-40868 mooSocial MooSocial Software v.Demo 中存在跨站请求伪造漏洞，远程攻击者可利用该漏洞通过“删除账户”和“停用账户”功能执行任意代码。 该漏洞是 mooSocial MooSocial Software v.Demo 应用程序中的一个跨站请求伪造（CSRF）漏洞。CSRF 漏洞是指恶意攻击者可以诱骗受害者执行其本无意执行的操作。在这种情况下，攻击者可以诱骗受害者点击包含恶意代码的链接或打开包含恶意代码的文件。该代码随后可用于删除或停用受害者的账户。 POC 1 - 创建一个包含以下代码的文件，并保存为 HTML 文件...

CVE-2019-14529

CVE-2019-14529 OpenEMR 项目中的多个 SQL 注入漏洞 漏洞文件中的漏洞函数： /openemr/interface/forms/eyemag/save.php 条件 ：任意授权用户 受影响版本： 5.0.2，已在 5.0.2 版本中修复。 描述 存在两个函数： 1. "storePDF"，使用了未经过滤的变量 "encounter"， 2. "canvas"，使用了两个未经过滤的变量 "encounter" 和 "zone"。 这两个函数都在 DELETE SQL 查询中使用这些变量，且没有任何过滤。这两个变量均可由攻击者控制。 错误消息包含 SQL 查询代码和...

CVE-2026-105146 Comsenz Discuz! Admin Medal Moderation mod.php modmedalsubmit sql injection

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...

EUVD-2026-92043

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-105123

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-0603

CVE-2026-0603 Inyección en Hibernate ORM / Inyección SQL de Segundo Orden ★ CVE-2026-0603 PoC de Inyección SQL en Hibernate ★ https://github.com/user-attachments/assets/2e7c3a89-e26f-48cd-af0b-8b82d32ce71f Descripción general CVE-2026-0603 es una vulnerabilidad de Inyección SQL de Segundo Orden e...

CVE-2026-105123: Unrestricted Upload of File with Dangerous Type

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

PT-2026-104621

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...

CVE-2025-34157

Stored XSS in Coolify delete flow CVE-2025-34157 Affects: Coolify ≤ v4.0.0-beta.420.6 Fixed in: v4.0.0-beta.420.7 Severity: Critical 9.4 CVSS 4.0 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE: CWE-79 Cross-Site Scripting, CWE-20 Improper Input Validation Summary A...

CVE-2026-105123 W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-105123

The W (vincent-peugnet/wcms) content management system, version through 3.18.0 , is vulnerable to Remote Code Execution (RCE) and Arbitrary File Write via the Media Upload API. The root cause is an unvalidated path in the POST /api/v0/media/upload/[*:path] endpoint. Authenticated editors can expl...