CVE-2018-8062

CVE-2018-8062 XSS persistente en el router Comtrend AR-5387un Explicación de la explotación: Para explotar esta vulnerabilidad, una vez iniciada sesión en el router, se debe crear un servicio WAN Haga clic en "Configuración avanzada", "Servicio WAN". "Botón Agregar", "Siguiente" Luego inserte el...

CVE-2024-51567

Script de Explotación CVE-2024-51567 CVE-2024-51567 es un script de explotación de prueba de concepto PoC en Python para CVE-2024-51567 , una vulnerabilidad crítica de inyección de comandos que afecta a CyberPanel v2.3.6. Esta vulnerabilidad, encontrada en el endpoint upgrademysqlstatus, permite ...

SolarWinds Web Help Desk < 2026.1 - Unauthenticated JNDI Injection RCE

SolarWinds Web Help Desk before version 2026.1 contains an insecure deserialization vulnerability in the jabsorb JSON-RPC library. When chained with a CSRF whitelist bypass CVE-2025-40536, remote unauthenticated attackers can exploit JNDI injection via the Apache Xalan JNDIConnectionPool class to...

CVE-2023-32315-POC

CVE-2023-32315-POC CVE-2023-32315-Openfire-Bypass-Py Resumen Este código es el POC en Python de CVE-2023-32315, utilizado para ejecutar una serie de operaciones con el fin de verificar si el sitio web objetivo está afectado por la vulnerabilidad CVE-2023-32315 e intentar realizar algunas acciones...

CVE-2018-15365

Reflected XSS en Deep Discovery Inspector 3.8 He encontrado una vulnerabilidad XSS reflejada en la interfaz web de administración de Deep Discovery Inspector 3.8 Service Pack 5 Build: 3.85.1165. La ruta del script vulnerable es /php/detectiondetailfilter.php. Este script solo es accesible por un...

CVE-2021-43617

CVE-2021-43617 Esta es una reproducción de la vulnerabilidad PHP Laravel 8.70.1 - Cross Site Scripting XSS a Cross Site Request Forgery CSRF Descripción La vulnerabilidad explota el hecho de que podemos evadir la funcionalidad de carga de archivos de imagen de Laravel para subir archivos...

CVE-2026-96567

The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postid' parameter in all versions up to, and including, 5.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts ...

EUVD-2026-91239

The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postid' parameter in all versions up to, and including, 5.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts ...

halo-cors-csrf-CVE-2026-67921

CVE-2026-67921: Configuración incorrecta de CORS en Halo CMS + Bypass de Protección CSRF — Ataque Combinado Resumen Existe una vulnerabilidad crítica de ataque combinado en las versiones de Halo CMS hasta la 2.25.4 debido a dos configuraciones de seguridad incorrectas: 1. Configuración incorrecta...

cve-2024-51567-poc

cve-2024-51567-poc Descripción simplificada Resumen de la vulnerabilidad Identificador : CVE-2024-51567 Tipo : Inyección de comandos / Bypass de CSRF Alcance : CyberPanel versiones 2.3.6 y 2.3.7 sin parche Descripción : En el endpoint upgrademysqlstatus de CyberPanel, al eludir la protección de...

CVE-2026-64947

A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload and execute arbitrary PHP code, resulting in Remote Code Execution. This issue affects Pandora FMS: from 777 onwards...

CVE-2026-64947

The Pandora FMS software, version 777 onwards , is vulnerable to a chained CSRF bypass and unrestricted file upload vulnerability within the Plugin File Manager . This flaw allows an attacker to upload and execute arbitrary PHP code , leading to Remote Code Execution (RCE) . No specific remediati...

CVE-2026-64947 CSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File Manager

A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload and execute arbitrary PHP code, resulting in Remote Code Execution. This issue affects Pandora FMS: from 777 onwards...

EUVD-2026-90596

A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload and execute arbitrary PHP code, resulting in Remote Code Execution. This issue affects Pandora FMS: from 777 onwards...

CVE-2026-64946

The Pandora FMS monitoring platform is affected by a chained vulnerability involving CSRF and unrestricted SVG file upload within the File Manager module . This flaw allows for stored Cross-Site Scripting (XSS) , which can be leveraged to exfiltrate session cookies and perform administrator accou...

aapanel-ws-bypass

aaPanel: Vendors Don't Always Fix Things Properly An incomplete fix for CVE-2021-37840 still exposes 3.6M servers to root RCE, 5 years later Discovered by: EON Security CVE: Pending assignment CVSS: 8.8 High — AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected: aaPanel versions 6.8.12 through 7.65.0...

CVE-2026-86066

The HR and CRM software Horilla is vulnerable to a Cross-Site Request Forgery (CSRF) flaw in versions prior to 2.0.0 . The approve_validate_attendance_request function at /attendance/approve-validate-attendance-request/ performs state-changing actions (such as updating attendance_validated and ap...

PT-2026-96694

Name of the Vulnerable Software and Affected Versions open-vsx.org affected versions not specified Description The deployment of the service returned an Access-Control-Allow-Origin header that reflected the requesting origin combined with Access-Control-Allow-Credentials: true on authenticated...

CVE-2026-82412 ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API

ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, the vulnerability-scan endpoints scripts/lua/rest/v2/add/host/toscan.lua and scripts/lua/rest/v2/exec/host/schedulevulnerabilityscan.lua accept the scanports parameter without an administrator gate and pass it...

CVE-2026-54510

Speakr is a personal, self-hosted web application designed for transcribing audio recordings. Prior to 0.8.21-alpha, the csrfexemptforapitokens beforerequest hook in src/app.py calls csrf.exemptviewfunc, permanently adding the selected view to Flask-WTF's process-global exemption set. The...