CVE-2026-123870

The otterdog webapp evaluates a format-string built from the incoming GitHub webhook JSON body using Python's eval. When the GITHUBWEBHOOKSECRET configuration value is unset or empty the code default is None, the HMAC signature check is skipped entirely, allowing an unauthenticated network client...

CVE-2020-0796-RCE-POC

CVE-2020-0796 Remote Code Execution POC c 2020 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes Remote Code Execution POC for CVE-2020-0796 / "SMBGhost" Expected outcome: Reverse shell with system access. Intended only for educational and testing in corporate environments. ZecOps...

CVE-2026-123751

The WP Duplicate WordPress plugin, through version 1.1.11 , is vulnerable to an unauthenticated arbitrary file upload via an authentication bypass . The flaw stems from the plugin's failure to properly verify request authentication values and its lack of validation for uploaded file types or path...

CVE-2026-115212

The mView 豆瓣电影 WordPress plugin (version 1.0.3 and below) contains an Arbitrary File Upload vulnerability. The root cause is a lack of validation on the type, name, or source of remotely fetched files, combined with missing capability and authorization checks. This flaw allows any authenticated u...

CVE-2026-115204

The AZEXO Store Locator WordPress plugin (versions through 1.4 ) is vulnerable to an arbitrary file write due to a lack of capability or nonce checks on AJAX actions. The plugin fails to sanitize a request header used to construct a file path, which allows an authenticated user, such as a subscri...

CVE-2026-113364

A Heap-based Buffer Overflow exists in the data receiving process of NEC Corporation WebSAM WinShare on Windows, affecting versions 7.5.0 and earlier , 7.6.0 , and 7.7.0 through 7.7.2 . A remote unauthenticated attacker can exploit this by sending a crafted packet containing a malformed data size...

HostCMS Path Traversal

The vulnerability in the HostCMS website management system is related to improper restriction of the path name for the directory. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

DIAFAN.CMS SQL Injection

The vulnerability in the DIAFAN.CMS content management system is related to improper handling of SQL query structures. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

InstantCMS Unrestricted Upload Arbitrary Code

The InstantCMS content management system vulnerability is related to unrestricted upload of malicious files. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

1C-Bitrix Before and After Photos Code Execution

Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system CMS like 1C-Bitrix. Website management involves unlimited uploading of dangerous files. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...

CodeScoring Template Code Execution

The vulnerability of the CodeScoring software development platform lies in the lack of measures to neutralize special elements within the template creation mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Ascon.Pilot.WinService Auth Bypass Code Execution

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

FOQUZ Platform SQL Injection

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

pg_dump Code Execution

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CrocoTime employee working time management system Code Execution

The vulnerability in the CrocoTime employee working hours tracking system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Contact Form 7 Drag and Drop Multiple File Upload - Arbitrary File Upload

The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 1.3.8.9. This makes it possible for unauthenticated attackers to bypass the plugin's blacklist and...

BMC FootPrints 'feedUrl' - Server-Side Request Forgery

BMC FootPrints versions 20.20.02 through 20.24.01.001 contain a Server-Side Request Forgery SSRF vulnerability in the /footprints/servicedesk/externalfeed/RSS endpoint. The 'feedUrl' parameter allows unauthenticated attackers to force the server to make HTTP requests to arbitrary URLs, enabling...

Thinkphp Lang - Local File Inclusion

ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled langswitchon=true. An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including pearcmd.php. id:...

Nagios XI 5.5.6-5.7.5 - Authenticated Remote Command Injection

Nagios XI 5.5.6 through 5.7.5 is susceptible to authenticated remote command injection. There is improper sanitization of authenticated user-controlled input by a single HTTP request via the file /usr/local/nagiosxi/html/includes/configwizards/cloud-vm/cloud-vm.inc.php. This in turn can lead to...