CVE-2026-85191 Joomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias option in Tabs & Accordions extension for Joomla < 3.1.0

Joomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias option in Tabs & Accordions extension for Joomla 3.1.0 - Tabs & Accordions rewrites links matching an item alias into calls to its browser API. The affected renderer places the alias inside a quoted JavaScript argument in a...

CVE-2026-85191 Joomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias option in Tabs & Accordions extension for Joomla < 3.1.0

Joomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias option in Tabs & Accordions extension for Joomla 3.1.0 - Tabs & Accordions rewrites links matching an item alias into calls to its browser API. The affected renderer places the alias inside a quoted JavaScript argument in a...

CVE-2026-85191

Tabs & Accordions is a Joomla extension by regularlabs.com affected by a privileged stored XSS in versions prior to 3.1.0 . The vulnerability resides in the rtla-alias option: the renderer places the alias value inside a quoted JavaScript argument within an HTML onclick attribute without properly...

PT-2026-91212

Froxlor before 2.3.7 fails to properly scope sender alias lookups to the current customer in customer email.php. Authenticated attackers can enumerate global sender alias IDs and read other customers' allowed sender values by supplying arbitrary senderid parameters in delete confirmation requests...

CVE-2026-29811

CyberPanel before 2.4.4 attempts to detect an "alais" domain i.e., a second domain that serves the same content as a primary domain; normally spelled "alias" via an ORM query filter rather than a Python "if" statement...

Django-faille-CVE-2025-57833_test

Django의 별칭을 통한 SQL 인젝션 취약점 테스트 정의: 별칭이란? 별칭 은 SQL 쿼리에서 열이나 집계 결과에 부여된 이름입니다. Django에서 별칭은 annotate 또는 alias 메서드와 함께 사용되어 계산된 필드에 이름을 지정합니다. 예시: root@kitploit: from django.db.models import Count books = Book.objects.annotatebookcount=Count'id' 여기서 bookcount는 Count'id' 결과의 별칭 입니다. 계산된 열에 대해 읽기 쉬운 이...

CVE-2021-41773m

CVE-2021-41773 🐛 Apache HTTP Server 2.4.49 中的路径遍历与文件泄露漏洞 在 Apache HTTP Server 2.4.49 中对路径规范化进行的修改中发现了一个缺陷。攻击者可以利用路径遍历攻击，将 URL 映射到由类似 Alias 指令配置的目录之外的文件。 如果这些目录之外的文件未受到常规默认配置“require all denied”的保护，则这些请求可能成功。如果这些别名路径上还启用了 CGI 脚本，则可能导致远程代码执行。 此问题已知在野外被利用。 此问题仅影响 Apache 2.4.49，不影响更早版本。 来源 路径遍历 概述...

EUVD-2026-77075

CyberPanel before 2.4.4 attempts to detect an "alais" domain i.e., a second domain that serves the same content as a primary domain; normally spelled "alias" via an ORM query filter rather than a Python "if" statement...

CVE-2026-29811

CyberPanel versions prior to 2.4.4 are affected by a vulnerability in how the application detects an "alias" domain (a secondary domain serving the same content as a primary domain). The root cause is that this detection is performed via an ORM query filter rather than a Python if statement, whic...

CVE-2026-29811

CyberPanel before 2.4.4 attempts to detect an "alais" domain i.e., a second domain that serves the same content as a primary domain; normally spelled "alias" via an ORM query filter rather than a Python "if" statement...

CVE-2021-41773

CVE-2021-41773 PoC — Apache HTTP Server 路径遍历 概述 CVE-2021-41773 是一个影响 Apache HTTP Server 2.4.49 的路径遍历漏洞。 该漏洞允许攻击者在特定配置下访问预期目录之外的文件，尤其是当目录通过 Alias、ScriptAlias 或其他类似 Alias 的指令暴露时。 该漏洞是由于 URL 路径规范化和标准化 处理不当所致。Apache 对可能仍包含编码字符的路径表示形式执行安全检查，使攻击者能够利用编码的点序列绕过遍历检测。 影响 攻击者可以构造包含编码遍历序列的恶意 URL，例如：...

CVE-2021-28664-PoC

CVE-2021-28664-PoC Mali kbase GPU ドライバの UAFCVE-2021-28664→ カーネル任意物理メモリ 読み書きプリミティブ の PoC スケルトン。汎用 ARM64 Android プラットフォーム向けであり、特定のベンダーや機種に依存しない。 研究範囲は 「カーネル任意物理メモリ読み書きプリミティブ」までに限定 :GPU ドライバの use-after-free を、安定・制御可能・安全に失敗できるカーネルメモリ読み書き能力へと 変換する方法。 本リポジトリはいかなる攻撃も提供しない。 完成した exploit...

CVE-2021-42392-exploit-lab

⚠️ H2 Database RCE Exploit PoC CVE-2021-42392 This repository provides a minimal and controlled environment to test the H2 Database Remote Code Execution vulnerability CVE-2021-42392 using the CREATE ALIAS feature. Unlike many demonstrations, this exploit targets the H2 TCP service directly...

CVE-2021-41773

CVE-2021-41773 Apache httpd 2.4.49 のみ 教育目的のみ。 詳細は参照セクションを参照してください。 実行 root@kitploit: $ git clone https://github.com/masahiro331/CVE-2021-41773.git $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run -d -p 8080:80 cve-2021-41773 エクスプロイト root@kitploit: This vulnerability affects the...

aggressor_snippets

aggressorsnippets 独立したリポジトリにするまでもない、ランダムな小さなAggressorスニペット集 locate このAggressorエイリアスは、基盤となるLinux OSコマンドの locate...

CVE-2026-81909

Concrete CMS 9 through 9.5.2 is vulnerable to Missing Authorization in the block alias route Process::alias in concrete/controllers/backend/block/process.php.It does not verify that the referenced block is genuinely orphaned on the target page, nor that the caller holds any permission over the...

CVE-2026-81909

Concrete CMS versions 9 through 9.5.2 contain a Missing Authorization flaw in the block alias route (Process::alias() in concrete/controllers/backend/block/process.php). The function fails to verify that a referenced block is genuinely orphaned on the target page and that the caller holds permiss...

CVE-2026-81909 Concrete CMS 9 through 9.5.2 is vulnerable to Missing Authorization in the orphaned-block alias route, allowing an authenticated editor to disclose and force-delete arbitrary blocks

Concrete CMS 9 through 9.5.2 is vulnerable to Missing Authorization in the block alias route Process::alias in concrete/controllers/backend/block/process.php.It does not verify that the referenced block is genuinely orphaned on the target page, nor that the caller holds any permission over the...

EUVD-2026-76168

Concrete CMS 9 through 9.5.2 is vulnerable to Missing Authorization in the block alias route Process::alias in concrete/controllers/backend/block/process.php.It does not verify that the referenced block is genuinely orphaned on the target page, nor that the caller holds any permission over the...

CVE-2026-27654-PoC

CVE-2026-27654 – nginx ngxhttpdavmodule DAV Alias パス処理 PoC このリポジトリは、nginx の ngxhttpdavmodule におけるヒープオーバーフローの脆弱性 CVE‑2026‑27654 の概念実証（PoC）エクスプロイトを提供します。このバグは、特別に細工された Destination ヘッダーと alias ベースのロケーションを伴う MOVE/COPY リクエストを処理する際に発生する size‑t アンダーフローに起因します。 ⚠️ 免責事項: このツールは認可されたセキュリティ研究およびテスト専用...