CVE-2025-68937

CVE-2025-68937 - Gitea/Forgejo Template Symlink RCE Automated proof-of-concept for CVE-2025-68937 : directory traversal via symlink dereferencing in Gitea and Forgejo template repository processing, leading to remote code execution. Any authenticated user no admin required can obtain a shell as t...

CVE-2023-30854

WWBN Avideo RCE Autenticado - Inyección de Comandos del SO CVE-2023-30854 WWBN Avideo sqlFile $objClone-cloneSiteURLvideos/cache/clones/$json-sqlFile"; $log-add"Clone 2 of $totalSteps: Geting MySQL Dump file"; exec$cmd . " 2&1", $output, $returnval; Podemos controlar $objClone-cloneSiteURL a trav...

CVE-2023-27842

CVE-2023-27842 eXtplorer 2.1.15 – Permisos inseguros tras ejecución remota de código Autenticado Vendor Homepage: http://extplorer.net/ Software Link: http://extplorer.net/attachments/download/99/eXtplorer2.1.15.zip Versión: 2.1.15 Instalación git clone https://github.com/0xFTW/CVE-2023-27842 cd...

CVE-2026-107806

Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an active secure session can submit attacker-controlled portable backup key material and a matching manifest to POST /api/restore. The restore flow trusts the supplied key,...

CVE-2026-108111 ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via /workflow/search

ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users' private workflows. Authenticated non-admin users can query this endpoint, which lacks owner or ispublic filtering, to list enabled private workflows in the sa...

CVE-2024-6536

설명 이 스크립트는 WordPress용 Zephyr Project Manager 플러그인에서 XSS 취약점이 존재하는 CVE-2024-6536에 대한 PoC입니다. 인증 및 프로젝트 매니저 관리자project manager administrator 권한이 필요합니다. 사용법 python3 CVE-2024-6536.py -u -p -w 예시: python3 CVE-2024-6536.py -u user -p user -w http://localhost/wordpress 링크...

CVE-2020-9460

CVE-2020-9460 ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ Cross Site Scripting - Oempro Octech Oempro 4.7 a 4.11 permiten XSS por parte de un usuario autenticado. El parámetro CampaignName en...

OpenEMR_Vulnerabilities

OpenEMR Remote Code Execution Vulnerability OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious php codes. PoC git clone https://github.com/EmreOvunc/OpenEMRVulnerabilities.git cd OpenEMRVulnerabilities python3 openemrrcepoc.py -t http://127.0.0.1/openemr -u admin -p...

EUVD-2026-95822

Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an active secure session can submit attacker-controlled portable backup key material and a matching manifest to POST /api/restore. The restore flow trusts the supplied key,...

Security Bulletin: IBM® Db2® could allow a DBADM authenticated user to send a specially crafted request to write arbitrary files on the system (CVE-2026-86087)

Summary IBM® Db2® could allow a database administration authority DBADM authenticated user to send a specially crafted request to write arbitrary files on the system CVE-2026-86087 Vulnerability Details CVEID:CVE-2026-86087 DESCRIPTION: IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 cou...

CVE-2026-108125 WordPress Post Author Authenticated SQLi

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author version 4.0.0 prior to 4.1.0...

CVE-2026-108125

The wp-post-author plugin is vulnerable to an SQL injection flaw due to the improper neutralization of special elements used in an SQL command. This security issue specifically affects wp-post-author version 4.0.0 prior to 4.1.0 . Exploitation of this vulnerability may result in high confidential...

CVE-2026-108124 WordPress Post Author Authenticated SQLi

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author before 4.1.0...

CVE-2019-9193

CVE-2019–9193 - PostgreSQL 9.3-12.3 Autenticado Ejecución Remota de Código Prueba de Concepto Las bases de datos PostgreSQL desde la versión 9.3 hasta la 12.3 la última probada son vulnerables a Ejecución Remota de Código Autenticado. Incluso si el equipo de desarrollo no lo considera una...

CVE-2022-38813

CVE-2022-38813 Escalada de privilegios vertical a través del parámetro user en Blood Donor Management System Using Codeigniter v 1.0 Descripción técnica: Blood Donor Management System 1.0 no restringe adecuadamente el acceso a admin/dashboard.php, lo que permite a los atacantes acceder a todos lo...

WordPress Advanced Classifieds & Directory Pro plugin <= 3.4.4 - Authenticated (Custom+) Stored Cross-Site Scripting vulnerability

Authenticated Custom+ Stored Cross-Site Scripting vulnerability discovered by Ivaylo in WordPress Plugin Advanced Classifieds & Directory Pro versions = 3.4.4...

CVE-2023-50094_POC

reNgine 2.2.0 - Inyección de Comandos - CVE-2023-50094 Descripción Este script de Python explota una vulnerabilidad de inyección de comandos autenticada en reNgine 2.2.0. El exploit ataca el parámetro nmapcmd en la configuración del motor de escaneo, permitiendo a los atacantes ejecutar comandos...

CVE-2023-51800

CVE-2023-51800 School Fees Management System v1.0 - Múltiples vulnerabilidades de cross-site scripting XSS Descripción : Múltiples vulnerabilidades de cross-site scripting XSS en School Fees Management System v1.0. Versión del Producto Vulnerable : School Fees Management System v1.0 Autor del CVE...

CVE-2026-107803

ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the orderby parameter because ProcessMaker\Traits\TaskControllerIndexMethods::applyColumnOrdering concatenates a...

CVE-2026-104629

A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An attacker with an authenticated user account and the ability to place a file on the host filesystem can use this to run arbitrary constructor code, an...