CVE-2023-46818

CVE-2023-46818 ISPConfig 3.2.11p1 से पहले के संस्करण में एक समस्या पाई गई। यदि adminallowlangedit सक्षम है, तो एक व्यवस्थापक द्वारा भाषा फ़ाइल संपादक में PHP कोड इंजेक्शन किया जा सकता है। उपयोग ❯ python3 CVE-2023-46818.py Usage: python3 CVE-2023-46818.py Poc of CVE-2023-46818 ISPConfig = 3.2.11 -...

CVE-2024-9932

CVE-2024-9932 Wux Blog Editor = 3.0.0 - अप्रमाणित मनमानी फ़ाइल अपलोड विवरण: WordPress के लिए Wux Blog Editor प्लगइन, संस्करण 3.0.0 तक और इसमें शामिल, 'wuxbtinsertImageNew' फ़ंक्शन में अपर्याप्त फ़ाइल प्रकार सत्यापन के कारण मनमानी फ़ाइल अपलोड के लिए असुरक्षित है। इससे अप्रमाणित हमलावरों के लिए...

CVE-2018-0802

CVE-2018-0802 CVE-2018-08022: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 MITRE CVE-2018-0802: https://vulners.com/cve/CVE-2018-0802 فيديو استغلال 0patch والتصحيح: https://www.youtube.com/watch?v=XU-U4K270Z4 مقال مدونة Qihoo 360...

CVE-2018-0802

CVE-2018-0802 CVE-2018-08022: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 MITRE CVE-2018-0802: https://vulners.com/cve/CVE-2018-0802 فيديو استغلال وتصحيح 0patch: https://www.youtube.com/watch?v=XU-U4K270Z4 منشور مدونة Qihoo 360...

poc_CVE-2025-68613

PoC: تجاوز بيئة العزل في n8n CVE-2025-68613 لأغراض تعليمية فقط يوضح إثبات المفهوم هذا ثغرة حرجة CVE-2025-68613 في n8n. لا تستخدم هذا على أنظمة لا تملكها أو ليس لديك إذن صريح باختبارها. نظرة عامة على الثغرة تحتوي إصدارات n8n السابقة للإصدار 1.122.0 على ثغرة تنفيذ تعليمات برمجية عن بُعد RCE. يمكن...

CVE-2025-51458-exp

CVE-2025-51458-exp DB-GPT --sql "SELECT VERSION" Dump tables python3 exp.py http://target:5670 --dump-tables Dump schema python3 exp.py http://target:5670 --dump-db DuckDB bypass python3 exp.py http://target:5670 --duckdb-bypass --sql "SELECT CURRENTSETTING'accessmode'" Interactive mode python3...

CVE-2026-105195

The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site...

CVE-2026-105195 Booking Calendar 10.15 - 11.8.2 - Editor+ Arbitrary Option Disclosure

The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site...

EUVD-2026-94767

The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site...

CVE-2026-105195

The Booking Calendar WordPress plugin (versions 10.15 - 11.8.2 ) contains a vulnerability where it fails to adequately restrict which options a lower-privileged user can load through one of its settings handlers . This flaw allows users with the Editor role and above to disclose the values of arb...

WordPress Site Editor <=1.1.1 - Local File Inclusion

WordPress Site Editor through 1.1.1 allows remote attackers to retrieve arbitrary files via the ajaxpath parameter to editor/extensions/pagebuilder/includes/ajaxshortcodepattern.php. id: CVE-2018-7422 info: name: WordPress Site Editor =1.1.1 - Local File Inclusion author: LuskaBol,0x240x23elu...

PT-2026-108199

Name of the Vulnerable Software and Affected Versions Indico versions prior to 3.3.13 Description Users with content creation privileges, such as speakers capable of creating minutes, can store crafted HTML within event minutes. When concurrent edits occur on the same minutes, the minute editor...

PT-2026-107834

The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site...

GHSA-4PVX-FWJJ-8GPC Ghost: Editors Could Promote Staff Users to Their Own Role

Impact Staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign that role. Vulnerable versions This vulnerability is present in Ghost from v0.5.0 up to v6.64.0. Patches v6.64.0 contains a fix for...

EUVD-2026-92769

Ghost: Editors Could Promote Staff Users to Their Own Role...

CVE-2025-64095

=== विवरण === DNN पूर्व में DotNetNuke माइक्रोसॉफ्ट पारिस्थितिकी तंत्र में एक ओपन-सोर्स वेब सामग्री प्रबंधन मंच CMS है। 10.1.1 से पहले, डिफ़ॉल्ट HTML संपादक प्रदाता बिना प्रमाणीकरण के फ़ाइल अपलोड की अनुमति देता है और चित्र मौजूदा फ़ाइलों को अधिलेखित कर सकते हैं। एक अप्रमाणित उपयोगकर्ता मौजूदा...

DRUPAL-CONTRIB-2026-202

This module provides a new UI experience for node editing using the Gutenberg Editor library. The module does not sufficiently check entity access in several editor endpoints. This vulnerability is mitigated by the fact that an attacker must have a role with the “use gutenberg” permission...

WordPress WP Coder plugin 4.0-4.5.1 - Editor+ RCE vulnerability

Editor+ RCE vulnerability discovered by Ayush Srivastava in WordPress Plugin WP Coder versions 4.0-4.5.1...

CVE-2026-104677

The WP Coder WordPress plugin before 4.5.2 does not restrict access to its PHP code-execution feature to administrators, gating it on a content capability that the Editor role holds by default, which allows Editor-level users to save and execute arbitrary PHP code on the server and fully compromi...

CVE-2026-97188 String Locator < 2.6.8 - Unauthenticated PHP Object Injection via Database Editor

The String locator WordPress plugin before 2.6.8 does not restrict the classes allowed when deserializing the content of a database row saved through its database editor, allowing unauthenticated attackers to store a serialized PHP object that is instantiated when an administrator later opens and...