129 matches found
CVE-2026-36358
CVE-2026-36358 PoC - Juzaweb CMS v.5.0.0 （XSS） Per prima cosa, configura la piattaforma normalmente e registra un account. Qui, l'account amministratore che ho registrato è [email protected] / 123456. Dopo aver configurato la piattaforma, puoi vedere la homepage del sito web. Accedi a /admin...
CVE-2026-36358
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
EUVD-2026-27826
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
CVE-2026-36358
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
Juzaweb CMS 跨站脚本漏洞
Juzaweb CMS is a content management system developed by Juzaweb’s individual developers, based on the Laravel framework and web platform. Version 5.0.0 of Juzaweb CMS has a cross-site scripting vulnerability. This vulnerability stems from the Add Banner Ads feature, which contains cross-site...
CVE-2026-36358
CVE-2026-36358 is a Cross Site Scripting vulnerability in Juzaweb CMS v5.0.0. The issue allows a remote attacker to execute arbitrary code via a crafted script submitted to the Add Banner Ads function. Connected documents confirm the same description across NVD, CVE List, and related feeds; no ex...
PT-2026-37629
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
CVE-2026-36358
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
📄 JuzaWeb CMS 3.4.2 Remote Code Execution
JuzaWeb CMS version 3.4.2 suffers from an authenticated remote code execution vulnerability. Exploit Title: JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution Date: 2026-01-10 Exploit Author: Sardor Shoakbarov Author GitHub: https://github.com/TheDeepOpc Vendor Homepage: https://juzaweb.com/...
JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution
Exploit Title: JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution Date: 2026-01-10 Exploit Author: Sardor Shoakbarov Author GitHub: https://github.com/TheDeepOpc Vendor Homepage: https://juzaweb.com/ Software Link: https://github.com/juzaweb/ CVE: N/A Pending import requests import argparse...
EUVD-2025-16586
Malicious code in bioql PyPI...
EUVD-2025-16590
Malicious code in bioql PyPI...
EUVD-2025-16604
Malicious code in bioql PyPI...
EUVD-2025-16602
Malicious code in bioql PyPI...
EUVD-2024-48457
Malicious code in bioql PyPI...
EUVD-2025-16589
Malicious code in bioql PyPI...
EUVD-2025-16612
Malicious code in bioql PyPI...
EUVD-2025-19248
Malicious code in bioql PyPI...
EUVD-2025-19247
Malicious code in bioql PyPI...
CVE-2025-6736
A vulnerability classified as critical was found in juzaweb CMS 3.4.2. Affected by this vulnerability is an unknown functionality of the file /admin-cp/theme/install of the component Add New Themes Page. The manipulation leads to improper authorization. The attack can be launched remotely. The...