CVE-2026-17566

CVE-2026-17566 — pgAdmin 4 Import/Export Data RCE PoC PoC de ejecución remota de código en la herramienta Import/Export Data de pgAdmin 4. Aprovecha la divergencia semántica del escape de barra invertida entre el verificador de paréntesis isqueryparensbalanced y psql para inyectar \copy ... TO...

CVE-2024-7514

CVE-2024-7514 WordPress Comments Import & Export = 2.3.7 - Lectura de archivos arbitraria autenticada Autor+ mediante Directory Traversal Descripción El plugin WordPress Comments Import & Export para WordPress es vulnerable a la lectura de archivos arbitraria debido a una validación insuficiente ...

CVE-2024-54262

CVE-2024-54262 Explotación de CVE-2024-54262: Carga arbitraria de archivos en Import Export para WooCommerce Resumen Este script explota una vulnerabilidad en el plugin "Import Export for WooCommerce" de WordPress. La vulnerabilidad permite a usuarios no autorizados subir archivos arbitrarios, lo...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

pecli

PEcli 用于分析 PE 文件的 Python 3 工具。当前功能： 显示文件信息（导入、导出、资源） 搜索文件中的有趣信息（异常资源、peid...） 转储节或资源 检查大小 在文件中搜索字符串 安装 你可以从 pypi 安装它：pip install pecli 或者直接从源代码安装： git clone https://github.com/Te-k/pecli.git cd pecli pip install . 使用方法 PEcli 通过插件工作，例如 pecli PLUGIN FILE usage: pecli -h...

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

CVE-2025-9215

StoreEngine Plugin de comercio electrónico potente para WordPress para pagos, membresías, afiliados, ventas y más = 1.4.0 - Descarga arbitraria de archivos autenticada Suscriptor+ El plugin StoreEngine contiene una vulnerabilidad en su función de Importación/Exportación CSV que permite a cualquie...

Exploit for CVE-2026-105844

CVE-2026-105844 — Payload CMS import-export prototype pollutio...

CVE-2026-105844

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...

Payload: Prototype pollution in Payload Import Export plugin

Impact An unauthenticated user could cause unintended application behavior when the Import Export plugin is enabled, allowing an attacker to submit and execute remote code RCE. Applications that do not use @payloadcms/plugin-import-export are not affected. Patches Users should upgrade Payload...

GHSA-QF28-8HC6-VWRP Payload: Prototype pollution in Payload Import Export plugin

Impact An unauthenticated user could cause unintended application behavior when the Import Export plugin is enabled, allowing an attacker to submit and execute remote code RCE. Applications that do not use @payloadcms/plugin-import-export are not affected. Patches Users should upgrade Payload...

CVE-2026-105844 Payload: Prototype pollution in Payload Import Export plugin

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...

CVE-2026-105844 Payload: Prototype pollution in Payload Import Export plugin

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...

CVE-2026-105844

Payload , a headless content management system, contains a prototype pollution vulnerability in the @payloadcms/plugin-import-export plugin. An unauthenticated user can submit prototype-sensitive field paths, leading to unintended application behavior and potential remote code execution (RCE) . T...

EUVD-2026-93470

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...

PT-2026-106776

Name of the Vulnerable Software and Affected Versions Payload versions 3.0.0 through 3.87.9 Payload versions 4.0.0-canary.0 through 4.0.0-canary.26 Description An unauthenticated user can cause unintended application behavior when the @payloadcms/plugin-import-export plugin is enabled. By...

activemq-cve-lab

ActiveMQ Message Broker Resumen Aplicación de broker de mensajes ActiveMQ con funcionalidad de importación/exportación de mensajes. Versión: 5.11.1 Características Gestión de colas de mensajes Estadísticas y monitoreo de colas Importación/exportación de archivos de mensajes Estado del broker en...

CVE-2026-32584

Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & Export smart-one-click-setup allows Retrieve Embedded Sensitive Data.This issue affects Smart One Click Setup – Complete Demo Import & Export: from n/a through 1.4....

CVE-2026-32584 WordPress Smart One Click Setup – Complete Demo Import &amp; Export plugin <= 1.4.3 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & Export smart-one-click-setup allows Retrieve Embedded Sensitive Data.This issue affects Smart One Click Setup – Complete Demo Import & Export: from n/a through 1.4....

CVE-2026-32584 WordPress Smart One Click Setup – Complete Demo Import &amp; Export plugin <= 1.4.3 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & Export smart-one-click-setup allows Retrieve Embedded Sensitive Data.This issue affects Smart One Click Setup – Complete Demo Import & Export: from n/a through 1.4....