CVE-2018-16763

Fuel CMS 1.4.1 - 원격 코드 실행 FUEL CMS 1.4.1은 pages/select/ filter 매개변수 또는 preview/ data 매개변수를 통해 PHP 코드 평가를 허용합니다. 이로 인해 사전 인증Pre-Auth 원격 코드 실행이 발생할 수 있습니다. 설치 git clone https://github.com/Trushal2004/CVE-2018-16763.git cd CVE-2018-16763/ python3 -m pip install -r requirements.txt chmod +x exploit.p...

CVE-2026-88394

WookTeam v1.6.6 and before is vulnerable to a Directory Traversal. The project task export endpoint /api/project/task/export downloads an arbitrary file from the server when the data parameter is supplied with a crafted JSON payload. The file value inside the JSON is concatenated directly into...

CVE-2020-24148

CVE-2020-24148 WordPress용 Import XML and RSS Feeds import-xml-feed 플러그인 2.0.1 에서 moovereadxml 액션의 data 매개변수를 통해 발생하는 서버사이드 요청 위조SSRF 취약점입니다. 취약한 코드: /moove-actions.php: ... public function moovereadxml $args = array 'data' = escsql wpunslash $POST'data' , 'xmlaction' = sanitizetextfield wpunslash...

EUVD-2026-92470

WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export. The data parameter is base64-decoded and passed directly into the string2array function in app/Module/Base.php, which executes eval"$array = $data;" whenever the decoded string starts...

CVE-2026-88394

WookTeam v1.6.6 and before is vulnerable to a Directory Traversal. The project task export endpoint /api/project/task/export downloads an arbitrary file from the server when the data parameter is supplied with a crafted JSON payload. The file value inside the JSON is concatenated directly into...

EUVD-2026-92442

WookTeam v1.6.6 and before is vulnerable to a Directory Traversal. The project task export endpoint /api/project/task/export downloads an arbitrary file from the server when the data parameter is supplied with a crafted JSON payload. The file value inside the JSON is concatenated directly into...

CVE-2026-88394

WookTeam version 1.6.6 and before is vulnerable to a Directory Traversal flaw in the project task export endpoint (/api/project/task/export). An attacker can supply a crafted JSON payload to the data parameter where the file value is concatenated directly into storage_path($file) without proper p...

CVE-2018-16763

CVE-2018-16763 분석기 CVE-2018-16763 분석기는 FUEL CMS 대상에 대한 CVE-2018-16763 을 분석하는 소규모 Python 프로젝트입니다. 이 도구는 대상이 취약해 보이는지 확인하고, 애플리케이션 응답이 복잡할 때 명령 출력을 더 깔끔하고 읽기 쉽게 표시하는 데 중점을 둡니다. 이 프로젝트는 의도적으로 가볍고 대화형으로 설계되었습니다. 저장소를 거대한 프레임워크로 만들지 않으면서 테스트와 응답 구문 분석을 더 쉽게 만드는 것을 목표로 합니다. 국가 취약점 데이터베이스NVD에 따르면, FUEL...

THM-Vulnerability_Capstone-CVE-2018-16763

THM-VulnerabilityCapstone-CVE-2018-16763 THM 룸 Vulnerability Capstone에 대한 분석 및 CVE-2018-16763용 익스플로잇 스크립트 작성입니다. 크레딧 이 취약점의 발견에 대한 공로를 제가 차지하지 않습니다. 다음 분들께 감사드립니다. 취약점 발견: 0xd0ff9 TryHackMe 룸 및 작성자: https://tryhackme.com/room/vulnerabilitycapstone https://tryhackme.com/p/cmnatic 참고 자료:...

CVE-2026-61548

A flaw was found in Rsyslog, a system for log processing. A remote unauthenticated attacker could exploit a stack buffer overflow vulnerability within the optional mmpstrucdata plugin. By sending a specially crafted RFC5424 message containing an oversized structured-data parameter, the attacker c...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fixed a kernel panic that occurs when the host sends an invalid H2C PDU length. If the host sends an H2CData command with an invalid DATAL value, the kernel may crash in the nvmettcpbuildpduiovec function. The...

Attackers Actively Exploiting Critical Vulnerability in Super Forms Plugin

On July 9th, 2026, we publicly disclosed a critical Unauthenticated Arbitrary File Upload vulnerability in Super Forms, a WordPress plugin with an estimated 13,000 active installations. This vulnerability can be leveraged by unauthenticated attackers to upload arbitrary files, including PHP...

EUVD-2026-69000

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2026-15101 WPBakery Page Builder <= 8.7.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' Parameter

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

WordPress WPBakery Page Builder plugin <= 8.7.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'data' Parameter vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting via 'data' Parameter vulnerability discovered by d.v4ns3c in WordPress Plugin WPBakery Page Builder versions = 8.7.4...

CVE-2026-15101: Improper Neutralization of Input During Web Page Generation

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

WordPress Pinpoint Booking System plugin <= 2.9.9.6.8 - Unauthenticated Improper Input Validation to Price Manipulation via 'cart_data' Parameter vulnerability

Unauthenticated Improper Input Validation to Price Manipulation via 'cartdata' Parameter vulnerability discovered by WordFence in WordPress Plugin Pinpoint Booking System versions = 2.9.9.6.8...

CVE-2026-17604: Improper Limitation of a Pathname to a Restricted Directory

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.1.1 via the 'data' parameter parameter. This makes it possible for authenticated attackers, with editor-level access and above, to read...

CVE-2026-48554

CVE-2026-48554 affects Nagios Core (before 4.5.14) and Nagios XI (before 2026R1.7). An authenticated remote code execution flaw exists via unfiltered NOTIFICATION-family macro substitution in the com_data parameter. If a notification command uses $NOTIFICATIONCOMMENT$ or $NOTIFICATIONAUTHOR$ in a...

CVE-2026-17555

The WPvivid Backup & Migration plugin for WordPress is vulnerable to SQL Injection via the exportdata parameter in versions up to, and including, 0.9.131. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. The values a...