CVE-2023-43149

CVE-2023-43149 作者 : Aitor Herrero Fuentes ベンダー: SPA-Cart ベンダーホームページ: https://spa-cart.com/ ソフトウェアリンク: https://demo.spa-cart.com/admin バージョン: 1.9.0.3 テスト環境: Windows 10 Pro CSRF ルートアカウント追加 demo.spa-cart.com...

CVE-2026-17532-lab

CVE-2026-17532 Lab - Seraphinite Accelerator: XSS no autenticado → RCE en 1 clic Un laboratorio Docker para CVE-2026-17532 , un XSS reflejado no autenticado en el plugin de WordPress Seraphinite Accelerator que encadena hasta ejecución remota de código en el momento en que un administrador con...

openclaw-vuln-report

OpenClaw 漏洞分析报告 CVE-2026-25253 安全漏洞中文解读 在线阅读 GitHub Pages: https://joseph19820124.github.io/openclaw-vuln-report/ 漏洞摘要 CVE : CVE-2026-25253 评分 : CVSS 8.8 高危 类型 : 跨站 WebSocket 劫持 影响 : 一键点击实现远程代码执行 来源 原文: The Hacker News...

CVE-2026-25253

CVE-2026-25253：OpenClaw 中通过认证令牌窃取实现一键 RCE 受影响软件： OpenClaw clawbot 法律免责声明： 本代码及分析文章仅供授权的安全研究和教育目的使用。在未经明确书面许可的情况下，针对系统使用此漏洞利用工具属于非法且不道德的行为。作者对任何滥用行为不承担任何责任。 技术背景 OpenClaw（前身为 Clawdbot ，早期版本中称为 Moltbot ）是一个在 macOS、Windows 或 Linux 上本地运行的 AI 助手框架。它支持 Anthropic 和 OpenAI 等云端模型，也支持本地模型。 Control UI...

CVE-2023-43148

CVE-2023-43148 著者 : Aitor Herrero Fuentes ベンダー: SPA-Cart ベンダーホームページ: https://spa-cart.com/ ソフトウェアリンク: https://demo.spa-cart.com/admin バージョン: 1.9.0.3 テスト環境: Windows 10 Pro CSRFによる全アカウント削除 demo.spa-cart.com アプリケーションにおける Cross Site Request Forgery の脆弱性により、リモート攻撃者が任意のコードを実行し、ワンクリックで "すべてのアカウント"...

CVE-2026-25253-research

CVE-2026-25253 概念验证 通过跨站 WebSocket 劫持在 OpenClaw 上实现一键远程代码执行（RCE）。 免责声明： 此代码仅供授权的安全研究和教育目的使用。在未经明确书面许可的情况下，将此代码用于针对任何系统属于违法行为且不道德。作者对滥用行为不承担任何责任。 博客 阅读详细分析，了解该漏洞的源码级剖析以及此 PoC 的构建过程。 前提条件 Node.js（v18 或更高版本） 在受害者机器上运行着启用了 Gateway 的 OpenClaw 实例（默认：localhost:18789） 受害者的浏览器中必须存储有有效的认证令牌（即他们之前使用过 Contro...

RootMyVivo

RootMyVivo 给锁定 Bootloader 的 vivo / iQOO 手机获取 root。不用解锁、不用刷 boot——装个 APK，点个按钮，等结果。 原理是 GhostLock（CVE-2026-43499，futex PI 的 use-after-free）加上在临时 root 之上装 KernelSU。 Русский · English 使用流程 1. 从 Releases 下载 APK 并安装 2. 启动 Shizuku（只需要一次，用来拿 shell 权限），或者开 ADB over TCP 3. 点「获取 ROOT」——应用自动匹配内核对应的...

CVE-2025-63848

CVE-2025-63848 swish-prolog cve SWISH Prolog 2.2.0 以前に存在する保存型クロスサイトスクリプティング（XSS）の脆弱性。細工された Web IDE ノートブックを介して、攻撃者が任意のコードを実行できる可能性があります。 影響 ワンクリックでのアカウント乗っ取り（Account Takeover）。 対策 最新バージョンにアップグレードして、ATO を緩和してください。 https://github.com/SWI-Prolog/swish/commit/4fb6acb97bedf993ec406a2ef324eeb2a16c49e3...

CVE-2026-54165 Stored DOM-XSS in public shared-folder image gallery (one-click, unauthenticated victim)

Dobase is an open-source, self-hosted workspace with installable tools. Versions prior to 2026.06.03 have a one-click stored DOM-based cross-site scripting XSS vulnerability in the public, unauthenticated shared-folder image gallery. A file's name is fully attacker-controlled and is never...

CVE-2026-26212

Rara One Click Demo Import plugin for WordPress before 1.3.5 contains an arbitrary file upload vulnerability that allows authenticated attackers with Administrator privileges to upload arbitrary PHP files by passing a false value to wphandleupload that disables WordPress core's file type validati...

Root-My-Device v0.0.7

Root My Device A fork of BuSung-dev/Root-My-Galaxy, under the Apache License 2.0 — see LICENSE and Credits. Root My Device is a one-click installer for explicitly supported firmware builds. The application itself is kept separate from device offsets, native exploit payloads, and KernelSU build...

EUVD-2026-53358

OpenBK7231T's /cfgwifiset endpoint src/httpserver/httpfns.c accepts configuration changes via a plain GET request with no CSRF token. If the webadminpasswordenabled parameter is absent from the request, an else-branch silently clears the device's web admin password to an empty string. A one-click...

Root-My-Device v0.0.6

Root My Device A fork of BuSung-dev/Root-My-Galaxy, under the Apache License 2.0 — see LICENSE and Credits. Root My Device is a one-click installer for explicitly supported firmware builds. The application itself is kept separate from device offsets, native exploit payloads, and KernelSU build...

EUVD-2026-51548

Deployment of the VPS.org one-click Zulip template deploys a hardcoded application signing key, a default database password "zulip", and DISABLEHTTPS=True...

VPS.org one-click deployment templates contain multiple vulnerabilities

Overview VPS.org's one-click deployment templates provision services with default passwords and predefined network bindings instead of generating randomized secrets or applying per-deployment hardening measures. Description VPS.org is a cloud and virtual private server hosting provider that offer...

PT-2026-66762

Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces 0.0.0.0:5432 with a default database password set to "postgres". Because Docker installs its own iptables rules, this exposure bypasses a standard host UFW configuration...

TencentOS Server 3: evince (TSSA-2026:0620)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0620 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

PT-2026-58870

Name of the Vulnerable Software and Affected Versions Grav Login Plugin versions prior to 3.8.11 Description The Grav Login plugin allows a top-level GET request to be sent to the task URI parameter via the TaskServiceProvider without requiring a login-form nonce, an Origin check, or a Referer...

CVE-2026-44454 Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7 and 2.30.2, the dotfiles registry module passed unsanitized user input to shell commands, allowing arbitrary code execution inside a provisioned workspace. Any user who supplied a craft...

CVE-2026-53662 immich: One-click account takeover via XSS in login page continue redirect

immich is a high performance self-hosted photo and video management solution. From commit 4ffa26c9 until 4eb1003, a reflected cross-site scripting XSS vulnerability on the /auth/login page allows an attacker to fully compromise any authenticated user's account with a single link click. The contin...