CVE-2026-105694

The open-source design and prototyping platform Penpot is vulnerable to Stored XSS in versions prior to 2.18.0 . Authenticated users with file-edit permission can upload SVG media containing unsanitized scripts, event-handler attributes, and foreignObject elements. Because these files are served ...

auto_re

AutoRE Features 1. Auto-renaming dummy-named functions, which have one API call or jump to the imported API Before After 2. Assigning TAGS to functions accordingly to called API-indicators inside Sets tags as repeatable function comments and displays TAG tree in the separate view Some screenshots...

CVE-2025-22710

CVE-2025-22710 1️⃣ 组件类型 WordPress 插件 2️⃣ 组件详情 Component name WooCommerce Advanced Bulk Edit Products, Orders, Coupons, Any WordPress Post Type – Smart Manager Vulnerable version ⚠️ 必须至少存在一篇文章，才能观察到基于真假条件的响应值差异。 1. 准备一个安装了 Smart Manager 插件的 WordPress 站点，使用管理员账户登录，然后导航到 Smart Manager...

SharpGPOAbuse

SharpGPOAbuse SharpGPOAbuseは、Cで記述された.NETアプリケーションであり、グループポリシーオブジェクト（GPO）に対するユーザーの編集権限を悪用して、そのGPOによって制御されるオブジェクトを侵害するために使用できます。 詳細は以下のブログ記事を参照してください：https://labs.mwrinfosecurity.com/tools/sharpgpoabuse Compile Instructions 必要なNuGetパッケージが適切にインストールされていることを確認し、Visual Studioでプロジェクトをビルドするだけです。 Usage...

RiteCMS 3.0.0 - Cross-site Scripting

RiteCMS v3.0.0 contains a reflected XSS caused by unsanitized input in the mainmenu/editsection component, letting attackers execute arbitrary scripts in the context of the victim's browser. id: CVE-2024-28623 info: name: RiteCMS 3.0.0 - Cross-site Scripting author: 0xAkoko severity: medium...

WordPress Restrict User Access <= 2.5 - Cross-Site Scripting

WordPress Restrict User Access – Membership Plugin with Force versions before 2.6 is vulnerable to Reflected Cross-Site Scripting via the 'ruasection' parameter in the admin level edit page. id: CVE-2024-29138 info: name: WordPress Restrict User Access = 2.5 - Cross-Site Scripting author: Shivam...

CVE-2023-31703

CVE-2023-31703 — eScan Management Console 中的反射型 XSS 漏洞 概述 CVE ID： CVE-2023-31703 漏洞类型： 反射型跨站脚本（XSS） 受影响产品： Microworld Technologies eScan Management Console 受影响版本： 14.0.1400.2281 严重性： 中等 发现者： Sahil Ojha 披露日期： 2023 年 5 月 16 日 描述 Microworld Technologies eScan Management Console（版本 14.0.1400.2281）的...

CVE-2025-15602-PoC

CVE-2025-15602-PoC CVE-2025-15602-PoC 是针对 Snipe-IT 中 CVE-2025-15602 漏洞的概念验证。 其中一个脚本用于列出所有用户，另一个脚本用于接管超级管理员账户。 背景 用户只有编辑用户的权限，他可以利用该权限列出所有用户，并实现对超级管理员账户的接管。 listusers.py 别忘了修改脚本中的 BASEURL，以匹配你的 snipe-it 实例。 列出实例中的所有用户，以获取你想接管的超级管理员的 id。 python3 listusers.py --attacker-username youruser...

CVE-2021-38603

CVE-2021-38603 每个用户的个人资料编辑页面的信息：字段中存在存储型跨站脚本漏洞。 http:///core/admin/profil.php 漏洞字段： 信息： 一旦插入，XSS可以通过访问该特定用户创建的任何页面/文章触发。...

WordPress < 4.8.2 - Authenticated Open Redirect

WordPress versions before 4.8.2 contain an open redirect caused by improper validation in wp-admin/edit-tag-form.php and wp-admin/user-edit.php, letting attackers redirect users to malicious sites, exploit requires access to admin interface. id: CVE-2017-14725 info: name: WordPress 4.8.2 -...

ChurchCRM - SQL Injection

A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker to execute arbitrary SQL queries by exploiting a time-based blind SQL Injection vulnerability in the EditEventTypes functionality. The newCountName parameter is directly concatenated into an SQL query without proper...

CVE-2022-43980

CVE-2022-43980 PandoraFMS Exploit Title: Stored Cross Site Scripting 日付: 15/02/2023 エクスプロイト作者: Gaurish Kauthankar ベンダーホームページ: https://pandorafms.com/en/ ソフトウェアリンク: https://github.com/pandorafms/pandorafms バージョン: テスト環境: Ubuntu CVE ID: CVE-2022-43980 再現手順 1. 低権限ユーザーとして、名前にXSSペイロードを含むネットワークマップを作成する。...

CVE-2025-29602

CVE-2025-29602 - FlatPress CMS 1.3.1 中的存储型跨站脚本XSS漏洞 描述 Flatpress CMS 1.3.1 的管理面板中存在一个存储型跨站脚本XSS漏洞。具有管理员权限的攻击者可以向系统中注入恶意JavaScript载荷，该载荷会被持久存储。当普通用户访问被篡改的页面（如博客文章）时，注入的载荷会在受害者的浏览器中自动执行。 受影响的产品 Flatpress 版本: 1.3.1 组件: 编辑分类 ⚠️ 影响 窃取会话Cookie 钓鱼攻击 远程代码执行（通过JavaScript） 将用户重定向到恶意网站 POC :9 代码区域 Flatpress...

CVE-2024-13488

CVE-2024-13488 LTL Freight Quotes – Estes Edition = 5.6 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause GTIDSUBSET Payload: action=enwdeditwarehouse&editid=1 AND GTIDSUBSETCONCAT0x7170787171,SELECT ELT3874=3874,1,0x717a627171,3874&wpnonce=13db5f2e7d...

EUVD-2026-91963

The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is vulnerable to generic SQL Injection via the 'accessprivileges' parameter in all versions up to, and including, 8.97.0 due to insufficient escaping on the user supplied parameter and lack of sufficien...

CVE-2026-101928

The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author' parameter in all versions up to, and including, 1.0.34 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to injec...

EUVD-2026-91906

The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author' parameter in all versions up to, and including, 1.0.34 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to injec...

CVE-2026-101928 Magic Tooltips For Contact Form 7 <= 1.0.34 - Unauthenticated Stored Cross-Site Scripting via 'esc_html' Filter Override via Comment Author

The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author' parameter in all versions up to, and including, 1.0.34 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to injec...

CVE-2026-101928

The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.0.34 . The root cause is insufficient input sanitization and output escaping in the 'author' parameter. Specifically, the plugin's esc_html filter ca...

WordPress Smart Manager – WooCommerce Bulk Edit: Products, Orders, Users & More (Spreadsheet) plugin <= 8.97.0 - Authenticated (Subscriber+) SQL Injection to Privilege Escalation vulnerability

Authenticated Subscriber+ SQL Injection to Privilege Escalation vulnerability discovered by lhking in WordPress Plugin Smart Manager versions = 8.97.0...