CVE-2018-10517

CVE-2018-12613 Ejecución remota de comandos autenticada mediante la carga de un módulo falso, colocando archivos PHP en el servidor web remoto. Software afectado 1. CMS Made Simple 2.2.7; Cómo usar Este script de PowerShell necesita dos parámetros para construir una solicitud HTTP de exploit:...

CVE-2026-73533

Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file app/Library/updater/NinjaTableDataSync.php that established a backdoor REST API endpoint,...

GHSA-XV3R-VR59-95RG CI4MS Theme::upload is vulnerable to Zip Slip leading to RCE

Summary ci4ms Theme::upload extracts user uploaded ZIP archives without validating entry names, allowing an authenticated backend user with the theme create permission to write files to arbitrary filesystem locations Zip Slip and achieve remote code execution by dropping a PHP file under the publ...