Sonatype Nexus Repository Manager 3 - Remote Code Execution

Sonatype Nexus Repository Manager 3 up to and including 3.21.1 is vulnerable to Expression Language injection. An attacker authenticated with an administrative account can inject an EL expression into the user "roles" field of the coreuiUser update endpoint, leading to remote code execution. This...

DevDojo Voyager <=1.8.0 - Cross-Site Scripting

DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed. id: CVE-2024-55416 info: name: DevDojo Voyager =1.8.0 - Cross-Site Scripting author:...

Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting

Zimbra Collaboration ZCS 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client. id: CVE-2023-37580 info: name: Zimbra Collaboration Suite ZCS v.8.8.15 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Zimbra Collaboration ZCS 8 before 8.8.15 Patch 41 allow...

Moodle - Remote Code Execution

Attackers with the permission to create or modify questions in Moodle courses are able to craft malicious inputs for calculated questions, which can be abused to execute arbitrary commands on the underlying system. id: CVE-2024-43425 info: name: Moodle - Remote Code Execution author:...

rConfig <= 3.9.4 - Authenticated OS Command Injection

lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.9.4 does not properly sanitize the fileName POST parameter before using it in a shell command, allowing an authenticated attacker to inject arbitrary OS commands. This template uses default admin credentials to log in before triggering the...

Strapi Versions <=4.5.5 - SSTI to Remote Code Execution

Strapi through 4.5.5 allows authenticated Server-Side Template Injection SSTI that can be exploited to execute arbitrary code on the server. A remote attacker with access to the Strapi admin panel can inject a crafted payload that executes code on the server into an email template that bypasses t...

CVE-2026-4813

CVE-2026-4813（CVSS-B 9.4 重大） Lutece Core 详细说明及更多内容请访问我的网站 5. 保存新的 XSL 表。 6. 导航至导出用户页面： /jsp/admin/user/ExportUsers.jsp 7. 选择我们刚刚创建的转换表并确认。 8. id 命令的结果应出现在导出的文件中。...

CVE-2025-2304-exploit

CVE-2025-2304 - Camaleon CMS マスアサインメント特権昇格 📌 プロジェクト概要 CVE-2025-2304 は、Camaleon CMS（バージョン 2.9.1 未満）におけるマスアサインメント（Mass Assignment）の脆弱性です。認証済みユーザーがパスワード変更リクエストの role パラメータを操作することで、管理者（administrator）へ特権を昇格させることが可能になります。 🚨 技術的な脆弱性の説明 脆弱性の背景 Camaleon CMS は Ruby on Rails を使用しており、バージョン 2.9.0 では...

CVE-2026-32127_SqlInjectionVulnerabilityOpenEMR8.0.0

CVE-2026-32127 - OpenEMR 8.0.0 における SQL インジェクションの脆弱性 弱点 CWE-89 SQL コマンドで使用される特殊要素の不適切な無害化（'SQL インジェクション'） この製品は、上流コンポーネントからの外部の影響を受ける入力を使用して SQL コマンドの全部または一部を構築しますが、下流コンポーネントに送信される際に、意図された SQL コマンドを変更し得る特殊要素を無害化しない、または誤って無害化します。ユーザーが制御可能な入力において SQL 構文を十分に除去または引用符で囲まない場合、生成された SQL...

EUVD-2026-95325

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

CVE-2026-36239

CVE-2026-36239 CVE-2026-36239: PbootCMS v3.2.12 백엔드 sitecopyright의 인증된 RCE 취약점 개요: PbootCMS 백엔드 관리 인터페이스의 sitecopyright 기능에서 중요한 원격 코드 실행RCE 취약점이 확인되었습니다. 구체적으로, "바닥글 정보Footer Information" 필드를 통해 제출된 신뢰할 수 없는 입력이 프론트엔드 페이지에서 처리되고 렌더링되기 전에 충분히 정화되지 않습니다. 인증된 관리자세션이 손상되었거나 사회공학 공격을 당한 경우는 실수로 악성 PH...

CVE-2025-15545

CVE-2025-15545 정보 공급업체: TP-Link 공급업체 웹사이트: TP-Link 모델: Archer RE605X 하드웨어 버전: RE605X v3.0 펌웨어 버전: RE605XEUV31.1.5 Build 20240905 펌웨어 다운로드 주소: TP-Link 하드코딩된 암호화 키 사용 및 XML 구성 파서 구성 요소의 명령 주입을 포함한 일련의 취약점으로 인해 로컬 인증 공격자가 장치에서 루트 권한으로 원격 코드 실행RCE을 달성할 수 있습니다. PoC 요구사항 참고: exploit.py 개념 증명은 연결된 공격...

CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-

CVE-2025-2945 – pgAdmin4 認証済みRCE（PoC） このリポジトリには、pgAdmin4 の特定バージョンに影響する脆弱性 CVE-2025-2945 に関する概念実証（PoC）スクリプト が含まれています。本スクリプトは、セキュリティ研究および許可を得たペネトレーションテストを目的として作成されました。 この問題により、SQLエディタにアクセスできる認証済みpgAdminユーザーが、Query Toolパネルの初期化フローを悪用してリモートコード実行を引き起こすことができます。このPoCは、教育・監査・防御目的のみ で本脆弱性を実証するものです。...

PT-2026-108894

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

PT-2026-108893

Improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing...

PT-2026-108905

A Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on which internal hosts may be targeted. An authenticated user can attempt connections to arbitrary internal network destinations, revealing which destinations are reachable. With...

EUVD-2026-95789

Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting XSS vulnerability in the Branding Footer feature. An authenticated administrator can store crafted HTML containing JavaScript event handlers in the Footer setting. The stored value is rendered without sufficient sanitization on the publ...

CVE-2026-79363

Cloudron versions 9.1.7 and 9.2 are susceptible to a stored cross-site scripting (XSS) vulnerability within the Branding Footer feature. An authenticated administrator can exploit this by storing crafted HTML containing JavaScript event handlers in the Footer setting. Because the application fail...

frevvomapexec

frevvomapexec frevvomapexec는 Square 9 GlobalForms 6.2에서 원하는 시간초의 지연을 주입하여 블라인드 SQL 인젝션 취약점의 존재를 확인하는 스크립트입니다. 취약점이 실제인지 확인하기 위해 최종 사용자는 수학 계산예: 큰 수에서 작은 수를 뺀 초 단위을 해야 합니다. 그 계산 값이 -s 매개변수로 지정한 값과 대략 일치하면 SQL 인젝션에 성공한 것입니다. 또한 SQLmap을 사용하세요. 여러분의 친구입니다. 그리고 이것은 인증된 SQL 인젝션이라는 점을 기억하세요! 하지만 낙심하지...

CVE-2025-41373

CVE-2025-41373 – Gandia Integra Total におけるSQLインジェクション 作成者: Byte Reaper CVE: CVE-2025-41373 脆弱性: 認証済みSQLインジェクション 影響を受けるパス: /encuestas/integrawebv4/integra/html/view/hislistadoacciones.php?idestudio= 説明:...