CVE-2026-38470

A Broken access control vulnerability in the API user endpoint in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows unprivileged, authenticated users to enable or disable arbitrary user accounts via the req=disable or req=enable action using a normal user-created...

CVE-2026-38465

A Stored XSS vulnerability in the donor avatar mouse-over text feature in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users to inject arbitrary JavaScript via the avatarmouseovertext parameter, which is stored and later rendered in avata...

RCE-Simplephpblog-biggiedroid

CVE-2025-15495 - Caricamento Arbitrario di File Che Porta all'Esecuzione Remota di Codice RCE Prodotto BiggiDroid – Simple PHP Blog CMS Pagina del prodotto: https://biggidroid.com/product/simple-php-blog/ Tipo di Vulnerabilità Caricamento Arbitrario di File Caricamento di File senza Restrizioni...

CVE-2026-73180

Apache Tomcat is affected by an insufficient session expiration flaw. If the session ID of an authenticated HTTP session is changed after a WebSocket connection has been established under that session, the WebSocket session is not closed when the HTTP session ends, as required by the Jakarta WebS...

CVE-2025-10307

Exploit: Cancellazione di file arbitraria tramite Backuply tarfile path traversal PoC da console del browser admin autenticato root@kitploit: async = const page = $location.origin/wordpress/wp-admin/admin.php?page=backuply; // 1 Extract a valid nonce from the Backuply page const html = await...

CVE-2025-12973

S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Generatore di Contenuti e Immagini = 1.7.7 - Autenticato Editor+ Caricamento Arbitrario di File Il plugin WordPress S2B AI Assistant versioni 2.47 e precedenti contiene una vulnerabilità di caricamento arbitrario di file che consente agli utenti...

CVE-2025-13380

AI Engine for WordPress: ChatGPT, GPT Content Generator = 1.0.1 - Lettura Arbitraria di File per utenti autenticati Contributor+ Il plugin AI Engine for WordPress contiene una vulnerabilità nella funzionalità di inserimento immagini che consente a qualsiasi utente autenticato con capacità di...

CVE-2026-80050

ContiNew Admin fails to apply file-upload permission checks or file-type allowlist validation to multipart upload endpoints, allowing authenticated users to store files with arbitrary extensions. Attackers can initialize chunked uploads, send file parts, and complete uploads to leave arbitrary...

WordPress Betheme plugin <= 28.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon_box_2' Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'iconbox2' Shortcode vulnerability discovered by João Pedro Soares de Alcântara - Kinorth in WordPress Theme Betheme versions = 28.4...

sudowp-crowdsignal-forms

SudoWP Crowdsignal Forms Questo è un fork di sicurezza SudoWP del plugin originale Crowdsignal Forms. !WARNING Avviso di sicurezza : il plugin originale "Crowdsignal Forms" versioni = 1.7.2 contiene una vulnerabilità critica di autorizzazione mancante CVE-2025-69015 che consente a utenti...

CVE-2026-80050 ContiNew Admin through 4.1.0 Missing Authorization and File-Type Allowlist on Multipart Upload Endpoints

ContiNew Admin fails to apply file-upload permission checks or file-type allowlist validation to multipart upload endpoints, allowing authenticated users to store files with arbitrary extensions. Attackers can initialize chunked uploads, send file parts, and complete uploads to leave arbitrary...

CVE-2020-15399

Exploit Titel: Joomla! J2 JOBS 1.3.0 - 'sortby' Authentifizierte SQL-Injection Datum: 2020-06-17 Exploit-Autor: Mehmet Kelepçe / Gais Cyber Security Anbieter-Homepage: https://joomsky.com/ Software-Link: https://joomsky.com/products/js-jobs-pro.html Änderungsprotokoll Update:...

CVE-2020-13424

Titolo exploit: Joomla! Plugin XCloner Backup 3.5.3 - Local File Inclusion Autenticato Data: 2020-05-10 Autore exploit: Mehmet Kelepçe / Gais Cyber Security ID autore Exploit-DB: 8763 Riferimento: https://www.xcloner.com/xcloner-news/security-release-available-for-archived-joomla-version/ Homepag...

CVE-2026-75498

Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with administrative privileges could send a crafted SQL query to the 'boquery' parameter in the 'Address.php' file. Fixed in 123c97c...

CVE-2026-75497

Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with administrative privileges could send a crafted SQL query to the 'boquery' parameter in the 'CustomerMessage.php' file. Fixed in 123c97c...

CVE-2026-24169

NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject code by sending a specially crafted API request. A successful exploit of this vulnerability might lead to code execution, escalation of privileges and...

CVE-2026-24168

NVIDIA UFM Enterprise contains a vulnerability in the IBDiagnet API where an authenticated attacker with administrative privileges may cause command injection by sending crafted API requests. A successful exploit of this vulnerability may lead to code execution, escalation of privileges and...

CVE-2026-24167

NVIDIA UFM Enterprise contains a vulnerability in the user management component, where an authenticated administrator could inject commands by sending a crafted API request. A successful exploit of this vulnerability might lead to code execution, escalation of privileges and information disclosur...

CVE-2016-5734-docker

CVE-2016-5734-docker PhpMyAdmin 4.0.x—4.6.2 Vulnerabilidade de Execução Remota de Código CVE-2016-5734 Configuração root@kitploit: git clone https://github.com/miko550/CVE-2016-5734-docker.git cd CVE-2016-5734-docker docker compose up hhtp://localhost:8083 Exploração root@kitploit: python3...

EUVD-2026-65588

Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with administrative privileges could send a crafted SQL query to the 'boquery' parameter in the 'Address.php' file. Fixed in 123c97c...