CVE-2026-105985

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

CVE-2026-44011-poc

CVE-2026-44011 RCE autenticado en Craft CMS mediante inyección de comportamiento de Yii. Afectados: 4.0.0–4.17.11, 5.0.0–5.9.17 Corregido en: 4.17.12, 5.9.18 Aviso: GHSA-qrgm-p9w5-rrfw Vulnerabilidad El endpoint /admin/actions/element-search/search acepta un parámetro condition que se pasa...

CVE-2026-105985 Authenticated RCE via render-components Entry Type overrides

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

CVE-2026-105985 Authenticated RCE via render-components Entry Type overrides

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

CVE-2026-105985 Authenticated RCE via render-components Entry Type overrides

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

EUVD-2026-93362

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

CVE-2026-105985

Craft CMS 5.10.13.2 is vulnerable to authenticated remote code execution (RCE) within the Control Panel's app/render-components action. An authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides to manipulate an EntryType object's ...

CVE-2025-2304

CVE-2025-2304 - Camaleon CMS 2.9.0 - Exploit de Escalada de Privilegios Resumen Este script Python explota una vulnerabilidad crítica de asignación masiva mass assignment en Camaleon CMS versión 2.9.0, permitiendo a cualquier usuario registrado escalar sus privilegios a administrador. Detalles de...

CVE-2023-41892_PoC

CraftCMS 未授权远程代码执行漏洞（CVE-2023-41892） Craft CMS 是一个灵活、用户友好的内容管理系统，用于在 Web 上创建自定义的数字体验。它为用户提供了一个后端界面来实现网站并配置 CMS。 Craft CMS 4.4.0 至 4.4.14 版本中存在一个远程代码执行漏洞。未经身份验证的攻击者可以通过 ConditionsController 实现远程代码执行。该漏洞存在于控制器的 beforeAction 方法中，由于输入验证不足，攻击者可以利用该漏洞创建任意对象并实现代码执行。 参考链接：...

CVE-2019-9053

CVE-2019-9053 CMS Made Simple Solo con fines educativos y pruebas de seguridad autorizadas...

CVE_POC_test

CVEPOCtest CVE-2019-13086漏洞的复现以及poc实验代码 原CVE信息： https://vulners.com/cve/CVE-2019-13086 实验环境： CSZ CMS架构+php5.4+MySQL 5.5+Apache 2.4 漏洞类型： SQL注入漏洞 文件上传漏洞 简要说明： 在\cszcms\cszcms\core\MYSecurity.php的csrfshowerror函数中 HTTP包的User-Agent字段在被添加到数据库查询语句中之前没有任何内容检测 这成为了可被构造sql注入的地方...

CVE-2026-26980

CVE-2026-26980 ★ CVE-2026-26980 PoC de inyección SQL en Content API de TryGhost Ghost CMS ★ https://github.com/user-attachments/assets/e7fab29e-8382-4ecc-986c-68852c28a32c Descripción general CVE-2026-26980 es una vulnerabilidad de inyección SQL no autenticada en la Content API de TryGhost Ghost...

CVE-2025-2304

Camaleon CMS 2.9.0 – 认证后的权限提升（角色更改）+ 可选S3配置泄露 目标: Camaleon CMS v2.9.0 类型: 通过 updatedajax 中的批量赋值进行的认证后权限提升（角色字段） 额外功能: 从管理员设置页面可选提取S3配置（如果经过权限提升后认证用户可以访问） 概述 本仓库包含一个Python概念验证脚本，能够： 1. 使用有效凭据登录Camaleon CMS管理面板。 2. 从 /admin/profile/edit 获取CSRF令牌。 3. 调用 updatedajax 端点来更新 password... 字段，并 滥用 permit! ...

PT-2026-106804

An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints...

PT-2026-106708

Name of the Vulnerable Software and Affected Versions Craft CMS version 5.10.13.2 Description An authenticated remote code execution issue exists in the Control Panel action 'app/render-components'. Users with basic Control Panel access can submit request-controlled component classes and property...

EUVD-2026-93552

An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints...

PT-2026-106793

Name of the Vulnerable Software and Affected Versions @payloadcms/plugin-multi-tenant versions prior to 3.90.0 @payloadcms/plugin-multi-tenant canary versions prior to 4.0.0-canary.34 Description An authenticated user can assign their own account to other tenants due to the default tenant array...

CVE-2026-95153

An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints...

CVE-2026-95153

A vulnerability exists in Bludit CMS 3.22.0 that allows a remote attacker to obtain sensitive information . The issue is accessible via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints. No specific root cause, exploit details, or remediation steps are provided in the available docum...

cve-2023-41564-research

Resumen de la vulnerabilidad CVE-2023-41564 CVE-2023-415641 es una vulnerabilidad de XSS almacenado presente en el CMS Cockpit = v2.6.3. Al cargar un archivo HTML con extensión .shtml durante la subida de archivos, el JavaScript se ejecuta en el momento en que se abre el archivo subido. 1:...