33 matches found
joomla_CVE-2023-23752
joomlaCVE-2023-23752 Joomla - un parámetro de solicitud atraviesa la API REST Versión afectada Joomla tiene aproximadamente tres puntos de entrada de enrutamiento, que son index.php en el directorio raíz los usuarios acceden a los artículos administrator/index.php en el directorio raíz gestión...
CVE-2026-57128
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the SSE server in src/praisonai-agents/praisonaiagents/server/server.py does not consult ServerConfig.authtoken before handling /publish, /events, or /info requests. A network client that can reach the server can broadcast...
CVE-2026-57128
PraisonAI (praisonaiagents
CVE-2023-23752
Joomla 未授权信息泄露漏洞利用 CVE-2023-23752 利用脚本 描述 此仓库包含一个针对名为“Joomla 未授权信息泄露”（CVE-2023-23752）漏洞的利用脚本。请注意，这仅是一个为教育目的创建的概念验证脚本，应负责任地使用。 该利用脚本旨在演示未授权信息泄露漏洞可能被利用的方式。 免责声明 此仓库仅供教育目的使用。请勿将此代码或其中任何信息用于恶意目的。始终遵守道德准则并尊重法律。 用法： python3 juid.py 选项 URL 示例： python3 juid.py -a http://vulnerable-website.com 选项： -u 转储用户...
EUVD-2026-75402
Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device Wi-Fi configuration information through these interfaces...
CVE-2025-2539---File-Away-WordPress-Plugin-Arbitrary-File-Read
CVE-2025-2539 - Lectura Arbitraria de Archivos en el Plugin File Away de WordPress 📋 Resumen Ejecutivo CVE ID: CVE-2025-2539 Plugin: File Away Versiones = 3.9.9.0.1 Tipo de Vulnerabilidad: Lectura Arbitraria de Archivos Autenticada Puntuación CVSS: 8.5 Alta Disponibilidad de Exploit: PoC Público...
CVE-2026-77136 Server-Side Template Injection in extension "powermail" (powermail)
The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, without any sanitization, and renders it. An anonymous, unauthenticated user can submit Fluid template syntax in that field to execute...
389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check
A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...
CVE-2025-32781 Apollo: Apollo Portal release endpoint allows cross-application configuration disclosure via releaseId
Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.0, Apollo Portal does not verify application and namespace permissions when an authenticated user requests a release by ID through GET /envs/env/releases/releaseId while...
CVE-2026-61450 Grav before 2.0.2 Config Exfiltration via offsetGet Filter
Grav before 2.0.2 contains a Twig sandbox bypass that allows a page author any admin.pages user, or anyone able to write to user/pages to exfiltrate configuration secrets. Although the sandbox replaces the 'config' variable with a redacted facade and strips Config::get/toArray from the method...
CVE-2026-54514
A flaw was found in jackson-databind, a library used for processing JSON data. This vulnerability allows a remote attacker to force the application to perform an attacker-chosen DNS Domain Name System query. This occurs when untrusted JSON input containing specific network address information is...
📄 WBCE CMS 1.6.5 LFI / Config Disclosure / Cross Site Scripting
The WBCE CMS frontend loader includes template files without sanitization. This allows local file inclusion, reading configuration files, and persistent cross site scripting via crafted templates. Version 1.6.5 is affected...
VOC++ Business Special Edition Creatiff Original 1.3 Information Disclosure
==================================================================================================================================== | Title : VOC++ Business Special Edition Creatiff Original v1.3 Config Disclosure Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro /...
Kubernetes: Development Application Credentials + Information Exposed
Issue Description When I browsed through all the JS files on prow.k8s.io I came across a link called /config which contains a configuration disclosure for the development files URL Vulnerabilities https://prow.k8s.io/config Proof On Concept javascript - continuous-integration/travis-ci kubespray:...
File Inclusion Vulnerability in Ocean CMS V6.57 cache.inc.php file
Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. A file inclusion vulnerability exists in the ocean CMS V6.57 cache.inc.php file. The vulnerability is due to the background modification of the configuration file at the user input is not filtered, the...
Design/Logic Flaw
The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent HTTP downgrade attacks and Man In The Middle attacks in which the server response could be modified to allow the attacker to respond with modified command payload and have the...
LifeSize Room 5.0.9 - Multiple Vulnerabilities
Exploit for hardware platform in category web applications Source: https://github.com/XiphosResearch/exploits/tree/master/deathsize LifeSize Room 5.0.9, remote config disclosure, code execution & local privilege escalation Ultimately the Lifesize Room products have fundamentally flawed firmware,...
LifeSize Room 5.0.9 - Multiple Vulnerabilities
Source: https://github.com/XiphosResearch/exploits/tree/master/deathsize LifeSize Room 5.0.9, remote config disclosure, code execution & local privilege escalation Ultimately the Lifesize Room products have fundamentally flawed firmware, many similar very bugs in the WebUI exist and thier support...
LifeSize Room 5.0.9 - Multiple Vulnerabilities
LifeSize Room 5.0.9 - Multiple Vulnerabilities Source: https://github.com/XiphosResearch/exploits/tree/master/deathsize LifeSize Room 5.0.9, remote config disclosure, code execution & local privilege escalation Ultimately the Lifesize Room products have fundamentally flawed firmware, many similar...
