CVE-2026-107305

Adobe Experience Manager is impacted by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privileged attacker can inject malicious scripts into vulnerable form fields . If a victim navigates to a page containing these fields, the malicious JavaScript may execute within their brows...

CVE-2026-106634

Adobe Experience Manager is affected by a Path Traversal vulnerability (CWE-22) caused by an improper limitation of a pathname to a restricted directory. A low-privileged attacker could exploit this issue to perform arbitrary file system writes to unauthorized locations without requiring user int...

EUVD-2026-100537

Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in arbitrary file system write. A low-privileged attacker could leverage this vulnerability to write files to unauthorized locations on the file...

CVE-2026-106633 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...

EUVD-2026-100536

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...

CVE-2026-106631

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79 ). A low-privileged attacker can exploit this by injecting malicious scripts into vulnerable form fields . When a victim browses a page containing these fields, the malicious JavaScript may execute i...

EUVD-2026-100534

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...

CVE-2026-103848 Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute...

CVE-2026-103848

Adobe Experience Manager is vulnerable to an OS Command Injection (CWE-78) caused by the improper neutralization of special elements used in an OS command. A low-privileged attacker can exploit this vulnerability to achieve arbitrary code execution in the context of the current user. This exploit...

printix-CVE-2022-25089

CVE-2022-25089 A system admin's complete nightmare, users changing the registry from anywhere and everywhere without authentication. Explore the docs » View Demo . Report Bug . Request Feature Table Of Contents About the Project Built With Getting Started Prerequisites Installation Usage Roadmap...

CVE-2026-23706

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud...

CVE-2026-23705

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through...

CVE-2019-10008

CVE-2019-10008 ManageEngine Service Desk Plus 9.3 Privilaged account Hijacking Date: 30-03-2019 Exploit Author: Ata Hakçıl, Melih Kaan Yıldız Vendor: ManageEngine Vendor Homepage:www.manageengine.com Product: Service Desk Plus Version: 10.0 Tested On: Windows 10 64 bit CVE : 2019-10008 Complete P...

CVE-2026-23705

A SQL Injection vulnerability (CWE-89 ) exists in Fortinet FortiAnalyzer (versions 7.6.0–7.6.4, 7.4.0–7.4.7, and all 7.2 versions) and FortiManager (versions 7.6.0–7.6.4, 7.4.0–7.4.6, and all 7.2 versions). This flaw arises from improper neutralization of special elements in SQL commands, which m...

CVE-2026-23706

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud...

CVE-2026-23707

A SQL Injection vulnerability (CWE-89 ) exists in several versions of Fortinet FortiAnalyzer and FortiManager products, including FortiAnalyzer (7.6.0-7.6.4, 7.4.0-7.4.7, 7.2 all versions), FortiAnalyzer Cloud, and FortiManager (7.6.0-7.6.4, 7.4.0-7.4.6, 7.2 all versions), as well as FortiManager...

CVE-2025-46773

A SQL Injection vulnerability [CWE-89] exists in Fortinet FortiAnalyzer (versions 7.6.0-7.6.4, 7.4.0-7.4.7, and all 7.2 versions) and FortiAnalyzer Cloud (versions 7.6.2-7.6.4, 7.4.1-7.4.7, and 7.2.1-7.2.11). This flaw allows a low privileged user to execute arbitrary commands through specially c...

CVE-2026-23705

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through...

CVE-2026-1731

CVE-2026-1731 BeyondTrust Remote Support Pre-Auth RCE PoC !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this...

CVE-2026-74037

Wazuh versions 4.0.0 before 4.14.8 are vulnerable to a Session Invalidation Bypass in the check_token function. The root cause is that the system fails to consult the blacklist when validating issued tokens for run_as users with zero static roles. This allows an attacker with revoked administrato...