CVE-2026-48908

CVE-2026-48908 — SP Page Builder Joomla 인증되지 않은 원격 코드 실행 RCE CVE-2026-48908 에 대한 개념 증명 익스플로잇, 이는 JoomShaper의 Joomla용 SP Page Builder 컴포넌트 comsppagebuilder에서 발생하는 심각한 CVSS 4.0 = 10.0 인증되지 않은 원격 코드 실행 취약점입니다. | ---|--- CVE| CVE-2026-48908 취약점 유형| CWE-284 Improper Access Control → Unauthenticated...

CVE-2026-48908

🌐 Language / Dil 📌 概要 SP Page Builder Joomla — 認証不要のZIPアップロード → RCE | ---|--- 製品| SP Page Builder — comsppagebuilder JoomShaper バージョン| ≤ 6.6.1 修正済み| 6.6.2+ — アップロードに管理者権限が必要に 認証| 認証不要 ベクター| POST …&task=asset.uploadCustomIcon フィールド| customicon アイコンフォントZIP 書き込み先|...

CVE-2026-87930

🌐 Language / Dil 📌 概要 Joomla Multi-CVE Suite — 7つの脆弱性モジュール + x7-panel.php デプロイ CVE| 拡張機能 ---|--- CVE-2026-56291| Balbooa Forms combaforms CVE-2026-56290| Page Builder CK compagebuilderck CVE-2026-48908| SP Page Builder comsppagebuilder CVE-2026-48907| JCE comjce CVE-2026-48939| iCagenda comicagen...

CLEANSTART-2024-DI95704 Xecurify's miniOrange Premium, Standard, and Enterprise Drupal SAML SP modules possess an authentication and authorization bypass vulnerability

Security vulnerability affects the drupal7 package. Xecurify's miniOrange Premium, Standard, and Enterprise Drupal SAML SP modules possess an authentication and authorization bypass vulnerability...

CVE-2026-101040

A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. T...

EUVD-2026-88216

A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. T...

CVE-2026-101040

A security flaw exists in the HTTP Multipart Form-Data Parser of Ricoh SP 330DN , SP 221 , SP C252SF , and Aficio SP 3500SF (up to 20260813). A remote attacker can perform a manipulation resulting in a denial of service . While the exact component part is unknown, the exploit has been released to...

CVE-2026-101040 Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service

A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. T...

CVE-2026-101040 Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service

A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. T...

CVE-2026-101016

A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcpolicyparsedmarc in the library libopendmarc/opendmarcpolicy.c. The manipulation of the argument fo/rf/ri/pct/sp/adkim/aspf/rua/ruf leads to handling of exceptional conditions. Remot...

PT-2026-99846

Name of the Vulnerable Software and Affected Versions Ricoh SP 330DN versions prior to 20260813 Ricoh SP 221 versions prior to 20260813 Ricoh SP C252SF versions prior to 20260813 Ricoh Aficio SP 3500SF versions prior to 20260813 Description A flaw in the HTTP Multipart Form-Data Parser component...

CVE-2026-101040: Improper Resource Shutdown or Release

A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. T...

WordPress SAML Single Sign On plugin < 6.0.0 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin SAML SP Single Sign On versions 6.0.0...

Exploit for Unrestricted Upload of File with Dangerous Type in Ollyo Sp_Page_Builder

🌐 Language / Dil --- 📌 Özet SP...

CVE-2026-78425 SAML Audience Confusion Allows Cross-SP Authentication

Authorised users of outside applications behind the same corporate identity provider IdP, for example, a wiki, a ticketing system, an expenses tool, or anything they legitimately hold an account on can log into their system via SAML SSO. The IdP issues an assertion to them. If that assertion is...

CVE-2026-78425 SAML Audience Confusion Allows Cross-SP Authentication

Authorised users of outside applications behind the same corporate identity provider IdP, for example, a wiki, a ticketing system, an expenses tool, or anything they legitimately hold an account on can log into their system via SAML SSO. The IdP issues an assertion to them. If that assertion is...

CVE-2026-78425 SAML Audience Confusion Allows Cross-SP Authentication

Authorised users of outside applications behind the same corporate identity provider IdP, for example, a wiki, a ticketing system, an expenses tool, or anything they legitimately hold an account on can log into their system via SAML SSO. The IdP issues an assertion to them. If that assertion is...

CVE-2026-78425

NeuVector is vulnerable to a SAML Audience Confusion flaw that allows cross-Service Provider (SP) authentication . When an authorized user of any other application behind the same corporate IdP (e.g., a wiki or ticketing system) obtains a SAML assertion, they can present that assertion to NeuVect...

PT-2026-94635

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sp uphy init function within the sunplus phy driver. Improper error handling in the function's error paths can lead to resource leaks of the clock and reset when c...

USN-8768-1 shibboleth-sp vulnerability

Florian Stuhlmann discovered that Shibboleth incorrectly escaped input when using the ODBC storage plugin. A remote attacker could possibly use this issue to perform SQL injection attacks and obtain sensitive information...