CVE-2019-3396

CVE-2019-3396 Confluence Unauthorized RCE CVE-2019-3396 Vulnerability Pitfall: Some versions require adding Referer to succeed File Read root@kitploit: POST /rest/tinymce/1/macro/preview HTTP/1.1 Host: 10.10.20.181 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:55.0 Gecko/20100101...

PoC-CVE-2026-38526

CVE-2026-38526 - Krayin CRM PHPアップロードRCE Krayin CRM ≤ 2.2.x 向けの自動エクスプロイトです。このスクリプトは、TinyMCEエンドポイント（/admin/tinymce/upload）における無制限ファイルアップロードの脆弱性を悪用し、image/jpeg を偽装してMIMEタイプ検証をバイパスし、PHPウェブシェルをアップロードして、ウェブサーバー権限で任意のコマンドを実行します。 脆弱性の詳細 プロパティ| 値 ---|--- CVE ID| CVE-2026-38526 影響を受けるソフトウェア| Krayin CRM ≤...

CVE-2026-38526-PoC-htb-nexus

CVE-2026-38526-PoC-htb-nexus A PoC script for CVE-2026-38526, RCE via a file upload vulnerability in the /admin/tinymce/upload endpoint of webkul krayin 2.2.x built for htb-nexus 🛠 Quick start and Usage 1. Clone the repository: root@kitploit: git clone...

Moodle - Cross-Site Scripting/Remote Code Execution

The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system. Moodle versions 4.1.x before 4.1.3 and 4.2.x before...

CVE-2026-38526-KrayinCRM

CVE-2026-38526 KrayinCRM 经认证的任意文件上传导致远程代码执行 对 Webkul Krayin CRM 2.2.x 中 CVE-2026-38526 的技术分析与受控复现。 概述 CVE-2026-38526 是一个影响 Webkul Krayin CRM 2.2.x 的经认证任意文件上传漏洞。 该易受攻击的功能通过应用程序的 TinyMCE 上传端点暴露： root@kitploit: POST /admin/tinymce/upload 应用程序未充分限制可上传的文件类型。经认证的用户可以提交带有服务器端可执行扩展名（例如...

KrayinCRM-RCE-Exploit-CVE-2026-38526

🔓 Krayin CRM v2.2.x - Authenticated Remote Code Execution Exploit ⚠️ FOR AUTHORIZED SECURITY TESTING ONLY - Unauthorized use is illegal and unethical. 📋 Overview This exploit tool demonstrates a critical authenticated remote code execution RCE vulnerability discovered in Krayin CRM version 2.2.x...

CVE-2026-38526-PoC

CVE-2026-38526 | Krayin CRM v2.2.x Authenticated RCE - Unrestricted PHP File Upload via TinyMCE Description CVE-2026-38526 is a critical authenticated remote code execution vulnerability affecting Webkul Krayin CRM v2.2.x. The vulnerability exists in the TinyMCE media upload endpoint...

CVE-2026-47761

👋 Hello ! Security Research 🛡️ CVE-2026-47761 – Security Researcher Type : Stored Cross-Site Scripting XSS Product : TinyMCE References : CVE : https://nvd.nist.gov/vuln/detail/CVE-2026-47761 GHSA : https://github.com/tinymce/tinymce/security/advisories/GHSA-vg35-5wq7-3x7w Hall of Fame...

CVE-2026-38526-POC

CVE-2026-38526 - Krayin CRM RCE Exploit Krayin CRM ≤ 2.2.x - Unrestricted File Upload leading to Remote Code Execution. This PoC exploits the vulnerable TinyMCE upload endpoint /admin/tinymce/upload to upload a PHP webshell and achieve command execution on the server. Features Full automatic logi...

CVE-2021-37787

CVE-2021-37787: SQL Injection in ABOCMS via TinyMCE Module Vulnerability Details CVE ID : CVE-2021-37787 Product : ABOCMS Affected Versions : 5.8.x, ≤5.9.3 Vulnerability Type : SQL Injection CVSS Score : 9.8 Description A critical SQL injection vulnerability exists in ABOCMS within the TinyMCE...

CVE-2026-82524

UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload endpoint due to missing file extension and MIME type validation. Attackers can upload a PHP web shell to the public stora...

CVE-2026-82524

UnoPim before 2.1.5 contains an authenticated file upload vulnerability in its TinyMCE image upload endpoint . Due to missing file extension and MIME type validation, authenticated administrators can upload arbitrary PHP files to the public storage disk, achieving remote code execution by accessi...

CVE-2026-82524 UnoPim File Upload RCE via TinyMCE Image Upload Endpoint

UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload endpoint due to missing file extension and MIME type validation. Attackers can upload a PHP web shell to the public stora...

EUVD-2026-70265

UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload endpoint due to missing file extension and MIME type validation. Attackers can upload a PHP web shell to the public stora...

CVE-2026-82524 UnoPim File Upload RCE via TinyMCE Image Upload Endpoint

UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload endpoint due to missing file extension and MIME type validation. Attackers can upload a PHP web shell to the public stora...

CVE-2026-82524 UnoPim File Upload RCE via TinyMCE Image Upload Endpoint

UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload endpoint due to missing file extension and MIME type validation. Attackers can upload a PHP web shell to the public stora...

PT-2026-84863

Name of the Vulnerable Software and Affected Versions UnoPim versions prior to 2.1.5 Description Authenticated administrators can upload arbitrary PHP files through the TinyMCE image upload endpoint because the system fails to validate file extensions and MIME types. This allows an attacker to...

CVE-2026-38526

CVE-2026-38526 - Krayin CRM PHP Upload RCE Automatisierter Exploit für Krayin CRM ≤ 2.2.x. Dieses Skript nutzt eine Schwachstelle für uneingeschränkten Dateiupload im TinyMCE-Endpunkt /admin/tinymce/upload aus, umgeht die MIME-Typ-Validierung durch Vortäuschung von image/jpeg, lädt eine...

CVE-2026-72743

SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via v-html without sanitization. Attackers who can modify dashboard text widget content can inject arbitrary HTML and JavaScript that...

CVE-2026-72743 SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html

SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via v-html without sanitization. Attackers who can modify dashboard text widget content can inject arbitrary HTML and JavaScript that...