16489 matches found
EUVD-2026-77376
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate the type of fields.properties on block creation which allows an authenticated user with editor access to a board to crash the Boards plugin worker and trigger a denial of service via a child...
CVE-2026-85188
Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager Free, Pro 12.1.0, Conditional Content Free, Pro 8.0.0, Content Templater Pro 14.2.0, ReReplacer Pro 16.2.0 for Joomla - The Conditions editor creates a default Condition Set name from the item to which the se...
Joomla_CVE_2026_48907
MASTA CVE-2026-48907 扫描器 单文件、自包含的扫描器，用于 Joomla! JCE Editor 作者：Alma !CAUTION 🚨 免责声明 — 使用前请阅读 这是一个侵入式安全测试工具。 root@kitploit: 本工具仅限授权安全评估使用。 扫描您不拥有或未经书面许可进行测试的系统，在大多数司法管辖区属于违法行为。 作者（Hussein Mohamed masta ghimau）对因使用本工具而产生的任何误用、损坏、法律诉讼或数据丢失绝对不承担任何责任。 运行此扫描器即表示您同意： 仅扫描您拥有或获得明确书面同意的资产。...
CVE-2026-85188 Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager (Free, Pro) < 12.1.0, Conditional Content (Free, Pro) < 8.0.0, Content Templater (Pro) < 14.2.0, ReReplacer (Pro) < 16.2.0 for Joomla
Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager Free, Pro 12.1.0, Conditional Content Free, Pro 8.0.0, Content Templater Pro 14.2.0, ReReplacer Pro 16.2.0 for Joomla - The Conditions editor creates a default Condition Set name from the item to which the se...
EUVD-2026-77307
Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager Free, Pro 12.1.0, Conditional Content Free, Pro 8.0.0, Content Templater Pro 14.2.0, ReReplacer Pro 16.2.0 for Joomla - The Conditions editor creates a default Condition Set name from the item to which the se...
CVE-2026-85188
CVE-2026-85188 affects several Regular Labs Joomla extensions : Advanced Module Manager (< 12.1.0), Conditional Content (< 8.0.0), Content Templater (< 14.2.0), and ReReplacer (
CVE-2021-3030
CVE-2021-3030 — Cute Editor 6.4 反射型跨站脚本（XSS） CVE ID： CVE-2021-3030 状态： 由 CVE 计划（MITRE）于 2021-01-06 保留。该 ID 从未发布过任何公开记录——本文档即为完成该发布所需的公开参考。 漏洞类型： 跨站脚本（XSS），反射型 — CWE-79 发现者： Athos Nogueira Gonzaga 厂商： CuteSoft（Cute Editor for ASP.NET）— https://cutesoft.net/ 受影响版本： Cute Editor...
CVE-2020-13654
CVE-2020-13654 - XWiki Platform 発見・報告者: Astaruf 詳細記事: https://nstsec.com/en/posts/xwiki-xss-cve-2020-13654/ NVDエントリ: https://nvd.nist.gov/vuln/detail/CVE-2020-13654 脆弱性 XWiki Platform のバージョン 12.8 より前では、プロファイルエディタにおいてユーザー制御のフィールドにHTMLエンコードが適用されません。調査で確認された影響を受けるフィールドは "Company" 編集 → 個人情報 内...
CVE-2025-66849
CVE-2025-66849 Ghost CMS 权限提升 PoC 摘要 在 Ghost Foundation Ghost CMS 6.4.0 及更早版本中，文章草稿编辑器内的 HTML 块未能正确清理或编码用户提供的内容，导致存储型跨站脚本（XSS）漏洞。具有 Contributor（贡献者）权限的用户可以在草稿中注入任意 JavaScript，当 Owner（所有者）账户查看该草稿时，脚本即会执行。这允许攻击者以 Owner 的身份执行特权操作。 漏洞概述 严重性：高 受影响版本：Ghost 6.4.0（截至 2025 年 10 月 20 日的最新版本）- Ghost CMS 6.4...
CVE-2025-64059
Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor. NOTE: the relevance of this for stored XSS is disputed because admins are allowed to modify templates, install plugins, and upload other executable content...
CVE-2018-7422
CVE-2018-12613 Local file inclusion bug due to no sanitization of user input. Software Affected 1. Wordpress Plugin: Site-Editor v.1.1.1; How to use This PowerShell scripts need two parameters to craft a exploit HTTP request: root@kitploit: 1. Wordpress URL endpoint 2. A full path file to be...
CVE-2018-7422
CVE-2018-7422 针对 CVE-2018-7422 的利用代码：WordPress 插件 Site Editor 1.1.1 中的本地文件包含漏洞 T1574.008 语法 root@kitploit: ruby 实验环境 OffSec Proving Grounds - Readys 用法...
XPEViewer
适用于 Windows、Linux 和 MacOS 的 PE 文件查看器/编辑器。 下载：https://github.com/horsicq/XPEViewer/releases 如何运行：https://github.com/horsicq/XPEViewer/blob/master/docs/RUN.md 如何构建：https://github.com/horsicq/XPEViewer/blob/master/docs/BUILD.md 更新日志：https://github.com/horsicq/XPEViewer/blob/master/changelog.txt...
Risk-Analysis-Editor
Risk Analysis Editor RAE English · Français Standalone tool for building and visualizing risk matrices — inherent gross risk and residual net risk — with an open, documented file format, .rae.json. ▶️ Open the app · 📖 User guide · 🎬 Video tutorials · ⬇️ Download No installation: the tool runs...
EUVD-2025-210894
Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor. NOTE: the relevance of this for stored XSS is disputed because admins are allowed to modify templates, install plugins, and upload other executable content...
CVE-2025-64059
Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor. NOTE: the relevance of this for stored XSS is disputed because admins are allowed to modify templates, install plugins, and upload other executable content...
CVE-2025-64059
Grav 1.7.50.2 allows administrators to inject JavaScript through the Home Page editor , a potential stored XSS vector. However, the practical relevance is disputed : since admins already possess the ability to modify templates, install plugins, and upload other executable content, the additional ...
Vvveb-CMS-CVE-2025-8518
Vvveb-CMS-CVE-2025-8518 该仓库包含一个概念验证（PoC），演示了 givanz Vvveb 1.0.5 中的一个严重漏洞。该漏洞允许具有模板编辑权限的认证用户向服务器文件写入任意 PHP 代码，从而导致远程代码执行（RCE）。...
Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation
🧨 CVE-2020-11107 – Escalada de Privilegios Local en XAMPP Windows 📌 Resumen CVE-2020-11107 es una vulnerabilidad de Escalada de Privilegios Local LPE que afecta a Apache Friends XAMPP en Windows. Un usuario sin privilegios puede modificar el archivo de configuración del Panel de Control de XAMPP...
CVE-2026-82847
The Masteriyo LMS WordPress plugin before 3.4.1 does not sanitise and escape one of its course fields before outputting it back in the course editor, allowing users with the instructor role to perform Stored Cross-Site Scripting attacks against higher privileged users such as administrators...