CVE-2018-10517

CVE-2018-12613 प्रमाणित रिमोट कमांड निष्पादन एक फर्जी मॉड्यूल अपलोड करके, रिमोट वेब सर्वर पर PHP फ़ाइलें डालकर। प्रभावित सॉफ्टवेयर 1. CMS Made Simple 2.2.7; उपयोग कैसे करें यह PowerShell स्क्रिप्ट एक एक्सप्लॉइट HTTP अनुरोध तैयार करने के लिए दो पैरामीटर की आवश्यकता होती है: 1. CMS Made Simple URL ...

CVE-2026-73533

Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file app/Library/updater/NinjaTableDataSync.php that established a backdoor REST API endpoint,...

GHSA-XV3R-VR59-95RG CI4MS Theme::upload is vulnerable to Zip Slip leading to RCE

Summary ci4ms Theme::upload extracts user uploaded ZIP archives without validating entry names, allowing an authenticated backend user with the theme create permission to write files to arbitrary filesystem locations Zip Slip and achieve remote code execution by dropping a PHP file under the publ...