CVE_2020_35848

🧨 CVE‑2020‑35848 – Laboratório de Injeção NoSQL RCE no Cockpit CMS 0.11.2 O CVE‑2020‑35848 afeta as versões do Agentejo Cockpit CMS anteriores a 0.11.2, introduzindo uma vulnerabilidade crítica de injeção NoSQL no endpoint /auth/newpassword. Essa falha permite que atacantes não autenticados injet...

CVE-2026-82449

Cockpit CMS before 2.14.1 is affected by an account enumeration vulnerability in the auth check endpoint (modules/App/Controller/Auth.php). The root cause is a timing discrepancy in password verification: requests for existing accounts trigger a bcrypt hash comparison (slower), while requests for...

EUVD-2026-68098

Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check endpoint due to timing discrepancies in password verification. Attackers can measure response times across multiple requests to determine which accounts exist by observing that existing accounts trigger bcry...

Cockpit CMS 0.6.1 - Remote Code Execution

Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/MongoLite/Database.php, as demonstrated by values in JSON data to the /auth/check or /auth/requestreset URI. id: CVE-2020-35131 info: name: Cockpit CMS 0.6.1 ...

CVE-2020-35847_CVE-2020-35848

Cockpit CMS NoSQL Injection CVE-2020-35847, CVE-2020-35848 Cockpit CMS prima della versione 0.11.2 è vulnerabile a una vulnerabilità di iniezione NoSQL in /auth/resetpassword e /auth/newpassword che consente l'estrazione dei token di reset della password, permettendo l'enumerazione dei dettagli...

CockpitCMS-Arbitrary-File-Upload--XSS---Assets

Cockpit CMS 2.7.0 Caricamento File - XSS Autore: Sergio Descrizione: La vulnerabilità di caricamento file in Cockpit CMS 2.7.0 consente a un attaccante locale di caricare un file PDF con XSS nascosto. Vettori di attacco: AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L POC: Questa è la versione del software...

cve-2023-41564-research

Sintesi della vulnerabilità CVE-2023-41564 CVE-2023-415641 è una vulnerabilità di tipo XSS persistente presente nel CMS Cockpit = v2.6.3. Caricando un file HTML con estensione .shtml durante l'upload, JavaScript viene eseguito nel momento in cui si apre il file caricato. 1:...

CVE-2026-31891

SQL Injection nell'Ottimizzatore di Aggregazione MongoLite tramite toJsonExtractRaw Classe di vulnerabilità : SQL Injection CWE-89 Prodotto : Cockpit CMS Core Edition Versione interessata : 2.13.4 e probabilmente tutte le versioni successive all'introduzione dell'Ottimizzatore di Aggregazione...

CVE-2026-39275

CVE-2026-39275 - XSS stocké menant à la prise de contrôle de compte dans Cockpit CMS Note: Divulgué de manière responsable et corrigé par les mainteneurs de Cockpit CMS avant publication...

CVE-2026-39275

Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, field-select.js and tags.js components...

CVE-2026-39275

Cockpit CMS versions ≤ 2.13.5 are affected by a stored XSS (CWE-79) in the item.php, field-select.js, and tags.js components. Field render() outputs are passed to Vue's v-html directive without output encoding , allowing a low-privilege editor to inject a persistent payload that fires for every a...

EUVD-2026-66750

Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, field-select.js and tags.js components...

CVE-2020-35846

Cockpit CMS NoSQL Injection to Esecuzione Remota di Codice : CVE-2020-35846 Descrizione Cockpit CMS presenta alcune vulnerabilità NoSQL che possono essere utilizzate per scaricare le informazioni degli utenti. Queste fughe di informazioni possono essere concatenate per modificare le password degl...

CVE-2026-73680

Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...

CVE-2026-73680 Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename

Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...

EUVD-2026-58799

Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...

CVE-2026-73680 Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename

Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...

CVE-2026-73680

Cockpit CMS 2.14.0 and earlier exposes a command-injection vulnerability in the FFmpeg integration. An authenticated user with assets/upload can upload a video file whose filename contains shell metacharacters; the unsanitized filename is interpolated into a shell command executed via Process::fr...

CVE-2026-72557

An unrestricted file upload vulnerability in Cockpit CMS 2.6.0 allows authenticated users to upload files of any extension including PHP scripts via the asset upload endpoint. The alloweduploads configuration defaults to wildcard and uploaded files are stored in a web-accessible directory. An...

CVE-2026-72557 Cockpit CMS Cockpit CMS - Unrestricted File Upload

An unrestricted file upload vulnerability in Cockpit CMS 2.6.0 allows authenticated users to upload files of any extension including PHP scripts via the asset upload endpoint. The alloweduploads configuration defaults to wildcard and uploaded files are stored in a web-accessible directory. An...