PT-2026-99727

Name of the Vulnerable Software and Affected Versions Seetong T8108 version 4.6.1.4-build202604241011 Seetong T8108P version 4.6.1.4-build202604241011 Seetong T8116 version 4.6.1.4-build202604241011 Seetong T8232 version 4.6.1.4-build202604241011 Description An improper authentication issue exist...

drupalgeddon2-cve-lab

Drupalgeddon2 CVE-2018-7600 ラボ このリポジトリは、Drupalgeddon2 実行用の再利用可能なターゲットパッケージです。 Sentinel は 2026-08-27 に、SQLite と PHP 7.4 を搭載した Drupal core 7.57 に対して CVE-2018-7600 を再現しました。このエクスプロイトは、Drupal 7 の 2 リクエスト AJAX レンダー配列パスです: 1. namepostrender=passthru、namemarkup=id、nametype=markup...

CVE-2023-34468-POC

CVE-2023-34468 — Apache NiFi 1.21.0 RCE PoC Apache NiFi = 1.21.0 における H2 データベースの RUNSCRIPT を介したリモートコード実行 脆弱性 Apache NiFi には、デフォルトで H2 データベースの JAR が同梱されています。DBCPConnectionPool コントローラサービスは、この H2 ドライバを使用するように設定できます。H2 は、リモート URL から SQL ファイルを取得して実行する RUNSCRIPT ステートメントをサポートしています。この SQL ファイルは、 CREATE...

Exploit for CVE-2026-82901

CVE-2026-82901 — Ultra Addons for Contact Form 7 File Upload...

Exploit for CVE-2026-61500

CVE-2026-61500: Rejetto HFS session forgery to RCE !Real ter...

CVE-2026-100645

SiYuan versions 3.7.0 before 3.8.4 contain a stored cross-site scripting vulnerability in gallery and kanban database renderers where field descriptions are not escaped in aria-label attributes. In the Electron desktop app with nodeIntegration enabled, attackers can inject JavaScript that calls...

Arbitrary Argument Injection

Overview froxlor/froxlor is a server administration software. Affected versions of this package are vulnerable to Arbitrary Argument Injection through the letsencryptchallengepath setting, which is not properly restricted or escaped. An attacker can achieve arbitrary command execution as root by...

CVE-2022-22965

CVE-2022-22965 Spring4Shell es una vulnerabilidad RCE crítica en el Spring Framework de Java y es una de las tres vulnerabilidades relacionadas publicadas el 30 de marzo...

CVE-2026-100695

Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTIONID database result is interpolated into JavaScript without proper escaping, allowing a malicious database server to execute arbitrary JavaScript in the authenticated Adminer origin. In co-located deployments...

CVE-2026-100695 Adminer before 6.0.2 XSS via CONNECTION_ID escalating to RCE

Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTIONID database result is interpolated into JavaScript without proper escaping, allowing a malicious database server to execute arbitrary JavaScript in the authenticated Adminer origin. In co-located deployments...

CVE-2026-100695 Adminer before 6.0.2 XSS via CONNECTION_ID escalating to RCE

Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTIONID database result is interpolated into JavaScript without proper escaping, allowing a malicious database server to execute arbitrary JavaScript in the authenticated Adminer origin. In co-located deployments...

CVE-2026-100695 Adminer before 6.0.2 XSS via CONNECTION_ID escalating to RCE

Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTIONID database result is interpolated into JavaScript without proper escaping, allowing a malicious database server to execute arbitrary JavaScript in the authenticated Adminer origin. In co-located deployments...

CVE-2026-100645

SiYuan versions 3.7.0 before 3.8.4 are vulnerable to a stored cross-site scripting (XSS) flaw in the gallery and kanban database renderers. The root cause is the failure to escape field descriptions within aria-label attributes. In the Electron desktop application where nodeIntegration is enabled...

CVE-2026-100645 SiYuan 3.7.0 before 3.8.4 Stored XSS via Gallery Kanban

SiYuan versions 3.7.0 before 3.8.4 contain a stored cross-site scripting vulnerability in gallery and kanban database renderers where field descriptions are not escaped in aria-label attributes. In the Electron desktop app with nodeIntegration enabled, attackers can inject JavaScript that calls...

CVE-2026-100645 SiYuan 3.7.0 before 3.8.4 Stored XSS via Gallery Kanban

SiYuan versions 3.7.0 before 3.8.4 contain a stored cross-site scripting vulnerability in gallery and kanban database renderers where field descriptions are not escaped in aria-label attributes. In the Electron desktop app with nodeIntegration enabled, attackers can inject JavaScript that calls...

Exploit for CVE-2026-93485

Laboratorio pedagógico — CVE-2026-93485 "Comment2Shell" W...

Exploit for CVE-2026-13249

CVE-2026-13249 — Honeywell PD45 Unauthenticated File Upload R...

Hadoop-YARN-RCE

Unauthenticated RCE in Apache Hadoop YARN ResourceManager An unauthorized access vulnerability exists in Apache Hadoop YARN ResourceManager when its REST API default port 8088 or RPC ports are exposed without authentication enabled. By default, Hadoop leaves HTTP web consoles and RPC services...

Exploit for CVE-2026-90817

CVE-2026-90817 — REDCap Survey Passthru + Data Import RCE Pyt...

CVE-2026-96795 Horilla: Authenticated RCE in Horilla List-View Export

Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.exportdata in horillaviews/generic/cbv/views.py accepts an authenticated user's columns POST parameter, takes fieldtuple1, interpolates it into dynamicfnstr as Python source, and passes the generated function definition to exec. A...