mapXplore

mapXplore Español mapXplore 是一个模块化应用程序，可将 sqlmap 导出的数据导入 PostgreSQL 或 SQLite 数据库。 主要功能包括： 将 sqlmap 提取的信息导入 PostgreSQL 或 SQLite，以便后续查询。 信息净化，即在导入时将不可读信息解码或转换为可读信息。 在所有表中搜索信息，例如密码、用户以及其他所需信息。 自动导出以 base64 格式存储的信息，例如： Word、Excel、PowerPoint 文件 .zip 文件 文本文件或纯文本信息 图片 PDF 按条件筛选表和列。 按不同类型的哈希函数进行筛选，无需预先转换...

Kaswara Modern VC Addons <= 3.0.1 - Missing Authorization

The Kaswara Modern VC Addons plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 3.0.1 due to insufficient capability checking on various AJAX actions. This makes it possible for unauthenticated attackers to perform a wide variety of unauthorized actions...

CVE-2026-90817

CVE-2026-90817 — REDCap Survey Passthru + Data Import RCE Comprobador en Python 3 y hook de exploit configurable para CVE-2026-90817 Securifera / Ryan Wincey. | ---|--- Producto| REDCap Vanderbilt Afectados| ≥ 13.3.0 hasta el parche de la rama Corregido| 16.0.49 LTS, 17.3.10 LTS, 17.4.4 Standard+...

CVE-2026-90817

CVE-2026-90817 — REDCap Survey Passthru + Data Import RCE Comprobador en Python 3 y hook de exploit configurable para CVE-2026-90817 Securifera / Ryan Wincey. | ---|--- Producto| REDCap Vanderbilt Afectados| ≥ 13.3.0 hasta el parche de la rama Corregido| 16.0.49 LTS, 17.3.10 LTS, 17.4.4 Standard+...

CVE-2026-90817

CVE-2026-90817 — REDCap Survey Passthru + Data Import RCE Comprobador en Python 3 y hook de exploit configurable para CVE-2026-90817 Securifera / Ryan Wincey. | ---|--- Producto| REDCap Vanderbilt Afectado| ≥ 13.3.0 hasta el parche de la rama Corregido| 16.0.49 LTS, 17.3.10 LTS, 17.4.4 Standard+...

CVE-2026-61747 InvenTree: Authenticated IDOR in the data-import API exposes other users' imported rows (`row_data`/`data`) and column mappings

InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, the /api/importer/row/ and /api/importer/mapping/ endpoints do not scope DataImportRow and DataImportColumnMap querysets to the owner of the associated DataImportSession. Any authenticated user, including an account with no...

CVE-2026-61747

InvenTree , an open-source inventory management system, is affected by an authenticated IDOR vulnerability in its data-import API prior to version 1.4.0 . The /api/importer/row/ and /api/importer/mapping/ endpoints fail to scope DataImportRow and DataImportColumnMap querysets to the owner of the ...

CVE-2026-61747 InvenTree: Authenticated IDOR in the data-import API exposes other users' imported rows (`row_data`/`data`) and column mappings

InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, the /api/importer/row/ and /api/importer/mapping/ endpoints do not scope DataImportRow and DataImportColumnMap querysets to the owner of the associated DataImportSession. Any authenticated user, including an account with no...

CVE-2026-61747 InvenTree: Authenticated IDOR in the data-import API exposes other users' imported rows (`row_data`/`data`) and column mappings

InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, the /api/importer/row/ and /api/importer/mapping/ endpoints do not scope DataImportRow and DataImportColumnMap querysets to the owner of the associated DataImportSession. Any authenticated user, including an account with no...

Exploit for CVE-2026-90817

CVE-2026-90817 — REDCap Unauthenticated RCE PoC Authorized Us...

Exploit for CVE-2026-90817

CVE-2026-90817 — REDCap Survey Passthru + Data Import RCE Pyt...

CVE-2026-90817

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exploit it by manipulating HTTP requests to access an unintended controller route from a public survey context and by...

CVE-2026-90817

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exploit it by manipulating HTTP requests to access an unintended controller route from a public survey context and by...

CVE-2026-90817

CVE-2026-90817 is an unauthenticated Remote Code Execution vulnerability in REDCap 13.3.0 and higher , rated CVSS 9.8 (Critical) . The flaw resides in the survey passthrough routing and Data Import processing logic , where an attacker can manipulate HTTP requests to reach an unintended controller...

EUVD-2026-83738

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exploit it by manipulating HTTP requests to access an unintended controller route from a public survey context and by...

CVE-2026-90817

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exploit it by manipulating HTTP requests to access an unintended controller route from a public survey context and by...

PT-2026-95962

Name of the Vulnerable Software and Affected Versions REDCap versions 13.3.0 through 16.0.48 REDCap versions 17.0.0 through 17.3.9 REDCap versions 17.4.0 through 17.4.3 Description An unauthenticated remote code execution flaw exists in the survey passthrough routing and Data Import processing...

CVE-2026-90817: Improper Control of Generation of Code

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exploit it by manipulating HTTP requests to access an unintended controller route from a public survey context and by...

CVE-2026-91979

Vikunja before 2.6.0 fails to limit archive expansion during data import, allowing authenticated users to cause denial of service. Attackers can upload highly compressed files that expand to tens of gigabytes in memory and disk, exhausting server resources and crashing the instance...

CVE-2026-91979 Vikunja before 2.6.0 Denial of Service via Decompression Bomb

Vikunja before 2.6.0 fails to limit archive expansion during data import, allowing authenticated users to cause denial of service. Attackers can upload highly compressed files that expand to tens of gigabytes in memory and disk, exhausting server resources and crashing the instance...