CVE-2026-39070

CVE-2026-39070 affects the Bit Assist WordPress plugin prior to version 1.7.2 . The vulnerability is a Stored Cross-Site Scripting (XSS) in the Call-To-Action feature. Exploitation requires an authenticated admin role, which limits the attack surface but still poses a significant risk if admin cr...

EUVD-2026-67902

WordPress plugin Bit Assist before 1.7.2 is affected by Stored Cross-Site Scripting in Call-To-Action feature. An authenticated attacker with the privileged role admin can exploit this to redirect user to malicious site or control the account...

CVE-2026-78616

A Stored XSS vulnerability in WatchGuard Dimension 's Trusted CA certificate configuration allows an authenticated administrator to execute arbitrary JavaScript in another authenticated administrator's web browser by saving a carefully crafted certificate. The CVSS 4.0 score is 4.8 (MEDIUM) , ref...

CVE-2023-3460

CVE-2023-3460 CVE-2023-3460 के लिए एक्सप्लॉइट - Ultimate Member प्लगइन के लिए अनधिकृत एडमिन एक्सेस। PoC अब प्रकाशित है। यह केवल शैक्षिक/अनुसंधान उद्देश्यों के लिए बनाया गया था! इसे अपने जोखिम पर उपयोग करें! ©gbrsh को धन्यवाद, मैंने टूल को थोड़ा बेहतर बनाया है।...

CVE-2021-21809

CVE-2021-21809 POC CVE 详情：Moodle 3.10 的默认旧版拼写检查器插件中存在命令执行漏洞。通过精心构造的一系列 HTTP 请求可导致命令执行。攻击者必须拥有管理员权限才能利用此漏洞。 在下面的视频中，我将通过利用此漏洞（未使用 Metasploit）来获取 Golden Eye 1 OSCP 实验环境的访问权限。查看 GoldenEye 1：https://www.vulnhub.com/entry/goldeneye-1,240/。 使用 telnet 命令获取反向 shell，将其编码为 url 格式，并保存到 Path to...

360WFP_Exploit

360WFPExploit Una proof-of-concept PoC che dimostra il potenziale abuso dell'interfaccia del driver WFP di 360 Security 360netmonx64wfp.sys, volta a verificare il rischio che le interfacce IOCTL senza autenticazione del chiamante possano essere utilizzate in modo improprio da programmi di terze...

EDR-GhostLocker

GhostLocker: Neutralizzazione EDR basata su AppLocker Introduzione Dopo il mio articolo su Fairy-Law , in cui ho utilizzato mitigazioni del kernel per disabilitare le soluzioni Endpoint Detection & Response EDR, diversenok ha osservato che le esclusioni IFEO Image File Execution Options erano...

CVE-2026-81031

CVE-2026-81031 affects IDURAR ERP CRM through version 4.1.1 . The vulnerability resides in the password update handler (updatePassword.js), which applies a password change to the identifier in the URL path rather than verifying it matches the authenticated user. Because the route requires only a ...

CVE-2026-81031 IDURAR ERP CRM through 4.1.1 Account Takeover via Unverified Identifier on Password Update

IDURAR ERP CRM changes the password of whichever account a request names rather than the account making the request. The update handler in backend/src/controllers/middlewaresControllers/createUserController/updatePassword.js resolves the authenticated user from the request that the token middlewa...

CVE-2026-80198

Kimai versions before 2.56.0 fail to restrict the config Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets including LDAP bind...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: obs-server (UTSA-2026-093681)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093681 advisory. A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain...

EUVD-2026-65585

Webkul QloApps does not perform proper validation on uploaded file extensions or MIME types before moving the file to a publicly accessible directory. A remote, authenticated attacker with administrative privileges could upload executable files and achieve remote code execution. Fixed in 153ec1c...

CVE-2026-79671 Ech0 before 4.4.3 SSRF via DNS Resolution Bypass

Ech0 before 4.4.3 contains a server-side request forgery vulnerability in the validateWebhookURL function webhooksettingservice.go, which only validates literal IP addresses via net.ParseIP and fails to reject hostnames that DNS-resolve to private or internal IPs e.g., 169.254.169.254.nip.io. An...

CVE-2026-79671 Ech0 before 4.4.3 SSRF via DNS Resolution Bypass

Ech0 before 4.4.3 contains a server-side request forgery vulnerability in the validateWebhookURL function webhooksettingservice.go, which only validates literal IP addresses via net.ParseIP and fails to reject hostnames that DNS-resolve to private or internal IPs e.g., 169.254.169.254.nip.io. An...

CVE-2026-79663 Ech0 before 4.7.3 Stored XSS via RSS feed tag names

Ech0 before 4.7.3 contains a stored cross-site scripting vulnerability in the public RSS feed where tag names and markdown content are rendered without HTML escaping. Attackers with admin privileges can inject malicious tag names or raw HTML in echo content that executes as JavaScript in RSS...

EUVD-2026-65451

Ech0 before 4.7.3 contains a stored cross-site scripting vulnerability in the public RSS feed where tag names and markdown content are rendered without HTML escaping. Attackers with admin privileges can inject malicious tag names or raw HTML in echo content that executes as JavaScript in RSS...

CVE-2026-79663 Ech0 before 4.7.3 Stored XSS via RSS feed tag names

Ech0 before 4.7.3 contains a stored cross-site scripting vulnerability in the public RSS feed where tag names and markdown content are rendered without HTML escaping. Attackers with admin privileges can inject malicious tag names or raw HTML in echo content that executes as JavaScript in RSS...

PT-2026-81911

Kimai versions before 2.56.0 fail to restrict the config Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets including LDAP bind...

CVE-2026-77915

rConfig versions 8.0.0 through before 8.2.13 contain a critical authentication bypass (CVSS 3.1: 9.8 ) caused by a duplicate bare Auth::routes() call in routes/web.php that re-enables the POST /register route after it was explicitly disabled. Because the registration controller does not assign a ...

CVE-2026-2334 ) Missing Server-Side File Extension Validation in vsDesk

An issue was discovered in vsDesk v14.0101. An authenticated attacker with administrative privileges can bypass client-side file validation in the "Import via CSV" component due to a lack of server-side validation. This allows the upload of an arbitrary file, which can lead to Remote Code Executi...