CVE-2026-80350 OneUptime before 12.0.7 Server-Side Request Forgery via IPv4-Mapped IPv6 Webhook URL

OneUptime's webhook target check rejects private and loopback addresses given in IPv4 form and a small set of IPv6 forms, but has no case for the IPv4-mapped IPv6 range. The webhook delivery path calls SSRFProtection.validateWebhookTargetIsSafe, and the host-literal screening inside...

CVE-2026-80346 StarRocks through 4.0.13 Missing Authorization on DROP MATERIALIZED VIEW for Legacy Synchronous Materialized Views

StarRocks performs no privilege check when a legacy synchronous materialized view is dropped. Every other statement type routed through AuthorizerStmtVisitor calls into Authorizer before execution, but visitDropMaterializedViewStatement returns immediately with a comment stating the check happens...

WordPress InfusedWoo Pro plugin <= 5.1.17 - Authenticated (Subscriber+) Privilege Escalation vulnerability

Authenticated Subscriber+ Privilege Escalation vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os in WordPress Plugin InfusedWoo Pro versions = 5.1.17...

CVE-2026-80237

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

WordPress CM Map Locations plugin <= 2.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Action vulnerability

Authenticated Subscriber+ Arbitrary File Upload via cmlocrouteimageupload AJAX Action vulnerability discovered by Spy0x7 in WordPress Plugin CM Map Locations versions = 2.1.8...

CVE-2026-16444

TeamViewer Desktop Clients prior to version 15.81.5 are affected by improper neutralization of path traversal sequences, allowing an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An ...

CVE-2026-80237 Thinking Software Technology｜Efence - Arbitrary File Upload

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

EUVD-2026-66346

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-80237

EFence , developed by Thinking Software Technology , suffers from an Arbitrary File Upload vulnerability. An authenticated remote attacker (low privileges) can upload and execute a web shell on the server, leading to arbitrary code execution with high impact on confidentiality, integrity, and ava...

CVE-2026-9668 SQL injection vulnerability in ZTE SCP product

With legitimate user credentials in hand, attackers can construct malicious SQL statements to bypass authentication logic and execute arbitrary database queries directly. This will consequently lead to slow database queries and expanded query coverage. This vulnerability features a low exploitati...

CVE-2026-9668

CVE-2026-9668 is a SQL injection vulnerability in the ZTE SCP product. An attacker holding legitimate user credentials can construct malicious SQL statements to bypass authentication logic and execute arbitrary database queries, resulting in slow queries and expanded query coverage. The vulnerabi...

SecAssignment

CVE-2020-7246 qdPM 9.1 Solo per scopi educativi. Vedi i riferimenti per i dettagli. Esecuzione root@kitploit: $ git clone https://github.com/arafatansari/SecAssignment.git $ cd SecAssignment $ docker build -t cve-assignment:ine . $ docker run -it -p 80:80 cve-assignment:ine $ service apache2 star...

CVE-2024-51482

CVE-2024-51482 - Blind-SQL-Injection in ZoneMinder Inhaltsverzeichnis Überblick Schwachstellendetails Technische Analyse Exploit-Anleitung Installation Anwendungsbeispiele Gegenmaßnahmen Referenzen Überblick CVE-2024-51482 ist eine kritische boolesche SQL-Injection-Schwachstelle, die in ZoneMinde...

PoC-Fix-jenkins-rce_CVE-2024-23897

PoC-jenkins-rceCVE-2024-23897. In questa git puoi trovare tutte le informazioni sulla CVE-2024-23897. Introduzione Il problema, assegnato all'identificativo CVE CVE-2024-23897, è stato descritto come una vulnerabilità di lettura arbitraria di file attraverso l'interfaccia a riga di comando...

CVE-2020-8958

CVE-2020-8958 CVE-2020-8958 : Authentifizierter Remote-Code-Ausführungs-Exploit für NetLink-Router mittels boa-Server. CVSS-Bewertung: 7.2 Verwundbarkeitstypen: OS Command Injection Authentifizierung: Erforderlich Betroffenes Modell: HG323 Beschreibung Die Ressource /boaform/admin/formPing in...

CVE-2023-50564

CVE-2023-50564 📌 Descrizione Questo exploit permette a un amministratore autenticato in Pluck CMS v4.7.18 di caricare un modulo ZIP dannoso contenente una shell PHP, con conseguente esecuzione di codice in remoto RCE. ⚙️ Funzionalità Autentica al target utilizzando un nome utente e password validi...

CVE-2022-37202

CVE-2022-37202 CVE-2022-37202 POC Descrizione suggerita JFinal CMS 5.1.0 è vulnerabile a SQL Injection. Tipo di vulnerabilità SQL Injection Fornitore del prodotto il gruppo di sviluppo Codice base del prodotto affetto https://github.com/jflyfox/jfinalcms - JFinal CMS 5.1.0 Componente affetto...

CVE-2023-0669

CVE-2023-0669 GoAnywhere MFT Deserializzazione - Blog di Je Yiuwai CVE-2023-0669 CVE-2023-0669 è una vulnerabilità di deserializzazione in GoAnywhere MFT. Esiste una vulnerabilità di injection di comandi pre-autenticata nel License Response Servlet a causa della deserializzazione di un oggetto...

CVE-2018-10517

CVE-2018-12613 Esecuzione remota di comandi autenticata caricando un modulo falso, rilasciando file PHP sul server web remoto. Software interessato 1. CMS Made Simple 2.2.7; Come usare Questo script PowerShell necessita di due parametri per creare una richiesta HTTP di exploit: root@kitploit: 1...

CVE-2026-34038

CVE-2026-34038: Authentifizierte Remote-Befehlseinschleusung in Coolify Dieses Repository enthält Dokumentation und Analyse für CVE-2026-34038 , eine kritische Befehlseinschleusungsschwachstelle in Coolify. Zusammenfassung Eine authentifizierte Remote-Befehlseinschleusungsschwachstelle CWE-78 in...