EUVD-2026-85370

Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x264's option string on every transcode. At startup, all .so files are run without signature, execute bit, or symbol check...

CVE-2026-96656

Plex Media Server versions before 1.43.3.10861 are vulnerable to an arbitrary file write flaw. The issue arises because the TranscoderH264Options preference is appended verbatim to the x264 option string during every transcode. An admin user can exploit this to write arbitrary files that may be e...

CVE-2024-48652

CVE-2024-48652 在 camaleon-cms v.2.7.5 中存在跨站脚本漏洞，允许远程攻击者通过内容组名称字段执行任意代码。 复现步骤： 1. 打开 URL：http://127.0.0.1/admin/dashboard 2. 使用管理员凭据登录。 3. 导航到“设置”部分。 4. 点击“内容组”。 5. 选择一个内容组的“编辑”选项。 6. 在“名称”字段中输入以下 XSS 载荷： " 7. 保存更改。 8. 刷新页面或导航到其他部分。 9. XSS 载荷将触发，弹出一个包含“1”的警告框。 漏洞类型：跨站脚本 XSS 产品供应商：Camaleon-Cms...

-Limesurvey-RCE-CVE-2021-44967

🚀 LimeSurvey RCE（CVE-2021-44967）- 经过身份验证的远程代码执行 本仓库包含针对 CVE-2021-44967 的功能性漏洞利用程序，该漏洞是 LimeSurvey 中一个经过身份验证的远程代码执行漏洞。 🎯 兼容性 已在以下版本上测试并确认可用： LimeSurvey 5.2.x LimeSurvey 6.x 🐛 漏洞概述 该漏洞允许拥有管理员权限的已认证用户上传恶意插件。由于 LimeSurvey 未严格验证插件 ZIP 文件的内容，也未阻止插件目录中 PHP 文件的执行，攻击者可通过直接访问上传的 shell 实现 RCE。 ✨ 功能特性 🤖 自动化利...

CVE-2026-20896

概念验证代码 CVE-2026-20896 该脚本自动化利用了 Gitea API 路径验证中的逻辑缺陷，通过授权头中的目录遍历攻击，强制服务器授予有效的管理员令牌。 !/usr/bin/env python3 PoC: Gitea 身份验证绕过 CVE-2026-20896 仅用于受控环境和授权审计（CTF） import requests import sys import argparse def exponebypasstargetip, username: printf" 开始攻击 Gitea 服务器：targetip" 易受攻击的 API 端点 URL url =...

cve-2025-1323

cve-2025-1323 WP-Recall Plugin SQL Injection ⚠️ Legal Disclaimer This tool is intended for authorized security testing and educational use only. Do not use against systems without explicit permission. Misuse may be illegal. ✅ Requirements Python 3.x requests module Install dependencies: pip instal...

CVE-2020-6287

CVE-2020-6287 SAP NetWeaver AS JAVA LM Configuration Wizard Authentication Bypass Create Simple & Administrator Java User SAP NetWeaver is SAP’s integrated technology platform and the technical foundation of all SAP applications since SAP Business Suite. SAP NetWeaver is a service-oriented...

CVE-2026-5696

Reflected Cross-Site Scripting XSS in Microweber. The vulnerability lies in the ‘group’ parameter of the ‘/admin/settings’ endpoint in the administration panel. A successful exploit allows an attacker to trick an authenticated user into executing malicious JavaScript code in their browser. This...

EUVD-2026-85220

Reflected Cross-Site Scripting XSS in Microweber. The vulnerability lies in the ‘group’ parameter of the ‘/admin/settings’ endpoint in the administration panel. A successful exploit allows an attacker to trick an authenticated user into executing malicious JavaScript code in their browser. This...

CVE-2026-5696

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the Microweber administration panel. The flaw is located within the 'group' parameter of the '/admin/settings' endpoint. A successful exploit allows an attacker to trick an authenticated user into executing malicious JavaScript code i...

CVE-2022-31269

CVE : CVE-2022-31269 Título del Exploit: Nortek Linear eMerge E3-Series - La divulgación de información permite acceder al panel de administración...

CVE-2026-87981

The Paymob for WooCommerce WordPress plugin before 4.1.14 does not perform a capability check on several admin AJAX actions that manage its payment-gateway configuration, allowing users with contributor-level access to delete, wipe, or modify that configuration, including the stored payment...

CVE-2026-88997

The JSM Show Post Metadata WordPress plugin before 4.9.1 does not properly escape a post meta key before outputting it into an inline event-handler attribute in an admin-facing meta box, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes in the...

CVE-2025-15696

The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rendering them back in the admin editor, allowing users with the Author role and above to inject arbitrary web scripts that execute in the browser of any user who later opens the...

CVE-2026-88997 JSM Show Post Metadata < 4.9.1 - Contributor+ Stored XSS via Custom Field Meta Key

The JSM Show Post Metadata WordPress plugin before 4.9.1 does not properly escape a post meta key before outputting it into an inline event-handler attribute in an admin-facing meta box, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes in the...

CVE-2026-88997

The JSM Show Post Metadata WordPress plugin versions before 4.9.1 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the improper escaping of a post meta key before it is outputted into an inline event-handler attribute within an admin-facing meta box. This allows users ...

CVE-2025-15696 Real3D Flipbook Lite < 5.4 - Author+ Stored XSS

The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rendering them back in the admin editor, allowing users with the Author role and above to inject arbitrary web scripts that execute in the browser of any user who later opens the...

CVE-2021-22911

Exploit actualizado para CVE-2021-22911 Rocket.Chat 3.12.1 - Inyección NoSQL a RCE sin autenticación créditos originales para : https://www.exploit-db.com/exploits/50108 Configuración Crear un entorno virtual de Python e instalar dependencias $ python -m venv venv $ source venv/bin/activate $ pip...

CVE-2025-65427

CVE-2025-65427: Problema de Limitación de Tasa de Autenticación en Dbit N300 T1 Pro ID de CVE: CVE-2025-65427 Fecha: 2025-12-16 Descubridor: Kirubel Producto: Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router Versión de Firmware: V1.0.0 Descripción Se descubrió un problema en el Dbit N300 T1 Pro...

CVE-2025-63420

CVE-2025-63420 CrushFTP11 11.3.757 之前版本存在存储型 HTML 注入漏洞，位于 CrushFTP 管理面板（报表 / "Who Created Folder"），可在管理员会话中实现持久化 HTML 执行。 CWE CWE-79 — 输入在网页生成过程中未正确中和（跨站脚本） CVSS v3.1 基础分：4.1（中危） AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N 已修复版本 根据厂商变更日志（ https://crushftp.com/version11build.html ），11.3.757 及更高版本不受影响。 57:...