joomla_CVE-2023-23752

joomlaCVE-2023-23752 Joomla - 요청 매개변수가 Rest API를 우회합니다. 영향을 받는 버전 Joomla에는 대략 세 가지 라우팅 항목이 있으며, 다음과 같습니다. 루트 디렉터리의 index.php 사용자가 문서에 접근 루트 디렉터리의 administrator/index.php 관리자 관리 루트 디렉터리의 api/index.php 개발자용 Rest API 인증되지 않은 인터페이스는 정확히 세 번째 진입점입니다. 따라서 Joomla4.0.0——Joomla4.2.7 만 영향을 받습니다 Rest API 4....

EUVD-2026-91401

Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python, Ruby, Erlang, Lua, Dart, JavaME, Perl, PHP and D...

Poc_CVE-2025-68645

CVE-2025-68645 - Zimbra 경로 순회 취약점 📋 개요 CVE-2025-68645 는 Zimbra Collaboration Suite 의 경로 순회 취약점으로, 인증되지 않은 공격자가 서버 파일 시스템에서 임의 파일을 읽을 수 있습니다. 취약한 엔드포인트 /h/printconversations?javax.servlet.include.servletpath= 🎯 영향 영향| 심각도 ---|--- 인증되지 않은 파일 읽기| 🔴 높음 구성 정보 노출| 🔴 높음 자격 증명 유출| 🔴 높음 내부 네트워크 매핑| 🟠 중간 📁...

IPFire_2.19_RCE_Authenticated

IPFire 2.19 OINKCODE RCE PoC IPFire 2.19의 ids.cgi 페이지에서 OINKCODE 매개변수를 통해 발생하는 인증된 명령 주입 취약점에 대한 Python 개념 증명PoC입니다. 공인된 보안 테스트 및 교육용 실습 환경에서만 사용하세요. 이 PoC는 소유하고 있거나 명시적 테스트 허가를 받은 시스템에 대해서만 실행하십시오. 작성자는 이 코드로 인한 오용이나 손해에 대해 책임지지 않습니다. 취약점 개요 IPFire 2.19는 /cgi-bin/ids.cgi에서 처리되는 OINKCODE 매개변수에 OS...

CVE-2026-18953

CVE-2026-18953 — PoC awslabs.aws-transform-mcp-serverAWS Transform MCP 서버의 getresource 도구에서 savePath 매개변수를 통한 임의 파일 쓰기arbitrary file write 취약점 | ---|--- CVE| CVE-2026-18953 CWE| CWE-22 — 제한된 디렉터리에 대한 경로명의 부적절한 제한 영향받는 버전| awslabs.aws-transform-mcp-server 0.1.0 – 0.1.4 수정된 버전| 0.1.5 CVSS v3.1| 8.6...

CVE-2026-97652

The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUESTURI Query-Parameter Key in all versions up to, and including, 14.16.14 due to insufficient input sanitization and output escaping. This makes i...

CVE-2026-94635

Allocation of resources without limits or throttling, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94633

A vulnerability exists in the Apache Thrift Dart bindings (versions before 0.25.0 ) where an unauthenticated remote attacker can trigger a Denial of Service (DoS) condition. The flaw occurs when sending input with inconsistent length parameters , specifically causing the TBinaryProtocol.readMessa...

EUVD-2026-91366

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94633 Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-97652

The WP Statistics WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 14.16.14 . The root cause is insufficient input sanitization and output escaping of the REQUEST_URI Query-Parameter Key. This allows unauthenticated attackers to inject arb...

CVE-2026-97652 WP Statistics <= 14.16.14 - Reflected Cross-Site Scripting via REQUEST_URI Query-Parameter Key

The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUESTURI Query-Parameter Key in all versions up to, and including, 14.16.14 due to insufficient input sanitization and output escaping. This makes i...

EUVD-2026-91337

The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUESTURI Query-Parameter Key in all versions up to, and including, 14.16.14 due to insufficient input sanitization and output escaping. This makes i...

CVE-2026-59669

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “name” parameter is affected – endpoint “/es/attachmenttypes/update/203336”...

EUVD-2026-91330

Allocation of resources without limits or throttling, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-94635

A vulnerability exists in the Apache Thrift Lua bindings (versions before 0.25.0 ) caused by the improper handling of length parameter inconsistencies . Specifically, the TBinaryProtocol:readMessageBegin function may bypass checkStringSize on the pre-versioned name, allowing a remote attacker to ...

CVE-2026-59669

The Repasat application is vulnerable to a Cross-Site Scripting (XSS) flaw (CWE-79). The issue exists in the "name" parameter of the endpoint “/es/attachmenttypes/update/203336” . Successful exploitation could allow an attacker to trick a user into executing arbitrary code within their browser. N...

CVE-2026-59669 Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “name” parameter is affected – endpoint “/es/attachmenttypes/update/203336”...

EUVD-2026-91319

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “name” parameter is affected – endpoint “/es/attachmenttypes/update/203336”...

CVE-2026-100107

The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 2.9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...