CVE-2026-93880 Greenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'GET:' Dynamic Placeholder in all versions up to, and including, 13.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

EUVD-2026-91240

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'GET:' Dynamic Placeholder in all versions up to, and including, 13.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

CVE-2026-93880 Greenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'GET:' Dynamic Placeholder in all versions up to, and including, 13.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

Invoke-DCSync

Invoke-DCSync Invoke-DCSync 参照: https://adsecurity.org/?p=1729 参照: https://silentbreaksecurity.com/invoke-dcsync-because-we-all-wanted-it/ 目的: mimikatz の DCSync 機能を使用して、ドメインコントローラー上のすべてのユーザーアカウントからパスワードハッシュを取得します。 警告：これはラボ環境でのみ行ってください。 mimikatz は DCSync と呼ばれるツールを実装しました。これにより、mimikatz...

Http-Asynchronous-Reverse-Shell

HTTP/S 비동기 리버스 쉘 ✨ 소개 IDS, IPS, EDR, AV, 방화벽과 같은 고급 탐지 시스템이 기업 네트워크를 지배하는 시대에, 모의 침투 테스트 중 이를 회피하는 것은 도전 과제입니다. 대부분의 리버스 쉘은 TCP 터널L4을 활용하는데, 이제는 정기적으로 분석되고 플래그가 지정됩니다. 이 프로젝트는 혁신적인 솔루션을 제시합니다 : HTTP/S를 통한 완전히 비동기적인 리버스 쉘로, 합법적인 사용자 행동을 모방하여 정상적인 웹 트래픽에 섞여듭니다. 기존 리버스 쉘과 달리 GET 요청 만 사용하고, 정상적인 웹 쿼리...

CVE-2026-58415

A flaw was found in the moddavfs module of the Apache HTTP Server. A remote attacker can exploit this vulnerability by sending an HTTP GET request directly to the internal WebDAV Web Distributed Authoring and Versioning state directory. This allows unauthorized access to internal state files,...

EUVD-2026-91118

infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via /v1/document/get/...

Drupal-cve-2019-6340

연구 CVE 2019-6340 사이트에서 Drupal 8 코어 RESTful API Services 모듈이 활성화되어 사용자가 GET, PATCH 또는 POST 요청을 서버로 보낼 수 있습니다. PATCH 메서드가 비활성화되어 있어도 GET 요청만으로 코드 실행 취약점을 트리거할 수 있습니다. 사이트에는 Drupal 8의 JSON-API 또는 Drupal 7의 REST 서비스와 같은 다른 웹 서비스 모듈이 활성화되어 있습니다. POC 요구사항 DOCKER.IO DRUPAL 8.6.9 SQL 5.7 docker run -d...

CVE-2026-82044: Server-Side Request Forgery (SSRF)

UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make the server request arbitrary internal resources by supplying an unvalidated url parameter to the PdfService.downloadPdf method exposed via GET /api/generate-pdf-report. Attacke...

PT-2026-104139

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'GET:' Dynamic Placeholder in all versions up to, and including, 13.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

PT-2026-104080

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'lang' parameter in all versions up to, and including, 7.16.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

Linux Distros Unpatched Vulnerability : CVE-2026-58415

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote...

CVE-2020-27368

CVE-2020-27368 TOTOLINK-A702R-V1.0.0-B20161227.1023 디렉토리 인덱싱 취약점 설명 TOTOLINK-A702R-V1.0.0-B20161227.1023의 로그인 포털의 디렉토리 인덱싱으로 인해 공격자가 GET 파라미터를 통해 /icons/ 디렉토리에 접근할 수 있습니다. 추가 정보 웹 서버의 디렉토리 목록을 비활성화하여 완화합니다. 취약점 유형 디렉토리 인덱싱 제품 공급업체 TOTOLINK 영향을 받는 제품 코드 베이스 TOTOLINK-A702R-V1.0.0-B20161227.1023 -...

CVE-2023-35793-CSRF-On-Web-SSH

CVE-2023-35793 - Web SSH における CSRF このリポジトリには、Dodge Industrial Team が Dodge OPTIFY プラットフォーム向けに発見した CVE-2023-35793 の説明が含まれています。 CVE ID: CVE-2023-35793 ベンダー: Cassia Networks 製品: Access Controller バージョン: Cassia-AC-2.1.1.2303271039 脆弱性: クロスサイトリクエストフォージェリ CSRF 影響を受けるもの: Web SSH, ゲートウェイ 説明: WebSSH 機能は...

tomcat: Apache Tomcat: Unauthorized resource access via FORM authentication bypass

A flaw was found in Apache Tomcat. This incorrect authorization vulnerability occurs within the FORM authentication process, allowing a user to bypass security constraints. This bypass enables unauthorized access to resources via a GET request, even when those resources are intended to be...

CVE-2026-51892

infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via /v1/document/get/...

CVE-2026-19975

cve-id 捐赠 帮助维护此项目 如果您觉得此项目有用，请考虑通过 PayPal 或 ABA Mobile 支持其持续维护。 ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ 每笔捐赠的百分之十将捐献给 Kantha Bopha 儿童医院。 | 选择支付方式 使用 ABA Mobile 扫描 · 点击放大 ---|--- ⚡ 简单用法 直接从 GitHub 运行最新版本的外部下载脚本： bash 此命令需要 Bash 和 curl。如果您不信任来源，请在运行前查看远程脚本。...

CVE-2025-25296

CVE-2025-25296 概念実証（POC） 説明 このプロジェクトは、オープンソースのデータラベリングツールであるLabel Studioに影響を与えるCVE-2025-25296の脆弱性に対する概念実証（POC）を示しています。この脆弱性は/projects/upload-exampleエンドポイントに存在し、GETリクエスト内のユーザー提供のHTMLコンテンツをサニタイズしないことが原因です。これにより、攻撃者は被害者のブラウザで任意のJavaScriptを実行でき、クロスサイトスクリプティング（XSS）攻撃につながる可能性があります。 脆弱性の詳細 影響を受けるコンポーネント...

CVE-2026-102628

The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled APPDEBUG=true, APPENV=local in a publicly accessible environment. An unauthenticated attacker could send a GET request and trigger an unhandled exception, causing Laravel to expose the entire server environment,...

CVE-2026-102628

The Cadmos LTI application (hosted at cadmos.eummena.io) was vulnerable because Laravel debug mode was enabled (APP_DEBUG=true, APP_ENV=local) in a publicly accessible environment. An unauthenticated attacker could trigger an unhandled exception via a GET request , causing the application to expo...