1301 matches found
Netbox-CVE-2023-37625
Netbox-CVE-2023-37625 説明 Netbox alert1' 3. 新しいモデルを追加します。この例では'manufacturer'モデルを追加します。 4. 認証された任意のユーザーとして新しく作成したモデルを開き、アラートボックスが実行されたことを確認します。...
CVE-2026-76557
The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some import configuration values before using them in SQL statements, allowing users whose role an administrator has granted the WP Import Export Lite WordPress plugin before 3.9.33's import permission ...
EUVD-2026-80181
The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some import configuration values before using them in SQL statements, allowing users whose role an administrator has granted the WP Import Export Lite WordPress plugin before 3.9.33's import permission ...
rcno-reviews
Recencio Book Reviews WordPressプラグインで、書籍レビューの管理・表示を行います。カスタム投稿タイプ、7つのタクソノミー、13のショートコード、7つのウィジェット、6つのテンプレート、5つの拡張機能を備えています。すべてのデータは標準のWordPress投稿メタに保存され、カスタムテーブルは使用しません。 背景 Recencio Book Reviews は Kemory Grubb w33zy によって作成され、WordPressプラグインディレクトリに公開されました。Kemory は2024年に亡くなりました。このプラグインは、既知の保存型XSS脆弱性...
CVE-2021-41511
CVE-2021-41511 エクスプロイトタイトル: Lodging Reservation Management System 1.0 - SQLインジェクション / 認証バイパス エクスプロイト作者: Nitin Sharmavidvansh ベンダーホームページ: https://www.sourcecodester.com/php/14883/lodging-reservation-management-system-php-free-source-code.html ソフトウェアリンク:...
CVE-2026-80491
The SAMO Forms WordPress plugin through 1.0.0 does not properly sanitise and escape user input before using it in SQL queries in several unauthenticated actions, allowing unauthenticated attackers to perform SQL injection attacks...
CVE-2026-80491 SAMO Forms <= 1.0.0 - Unauthenticated SQLi
The SAMO Forms WordPress plugin through 1.0.0 does not properly sanitise and escape user input before using it in SQL queries in several unauthenticated actions, allowing unauthenticated attackers to perform SQL injection attacks...
CVE-2026-85677
The Gutenverse News WordPress plugin (versions before 3.3.3 ) introduces a stored XSS vulnerability via inadequate context scoping of allowed HTML elements . The plugin adds extra HTML to WordPress's permitted-element list but fails to restrict this relaxed list to its intended context, causing i...
EUVD-2026-75969
The Featured Image with URL WordPress plugin before 1.0.6 does not sanitise and escape a stored image attribute value before outputting it, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the...
CVE-2026-85677 Gutenverse News < 3.3.3 - Unauthenticated Stored XSS via Comment Content
The Gutenverse News WordPress plugin before 3.3.3 does not restrict the extra HTML it adds to WordPress's allowed elements to the context it is meant for, applying the same relaxed list to every sanitisation context including untrusted comments, allowing unauthenticated users to store JavaScript...
EUVD-2026-75966
The Gutenverse News WordPress plugin before 3.3.3 does not restrict the extra HTML it adds to WordPress's allowed elements to the context it is meant for, applying the same relaxed list to every sanitisation context including untrusted comments, allowing unauthenticated users to store JavaScript...
CVE-2026-88883
Renovate is an automated dependency update tool. In versions before 44.14.4 and Mend Renovate CE/EE images before 15.4.0 and the mend-renovate-enterprise-edition Helm chart before 10.4.0, log sanitisation for TLS private keys used for Mutual TLS was incomplete. While the value of...
CVE-2026-88883
Renovate versions before 44.14.4 (Mend Renovate CE/EE images before 15.4.0, mend-renovate-enterprise-edition Helm chart before 10.4.0) contain an incomplete log sanitisation flaw for TLS private keys used in Mutual TLS. The value of hostRules[].httpsPrivateKey was redacted in its own field but no...
EUVD-2026-75433
Renovate is an automated dependency update tool. In versions before 44.14.4 and Mend Renovate CE/EE images before 15.4.0 and the mend-renovate-enterprise-edition Helm chart before 10.4.0, log sanitisation for TLS private keys used for Mutual TLS was incomplete. While the value of...
CVE-2026-88883 Renovate before 44.14.4 TLS Private Key Log Sanitisation
Renovate is an automated dependency update tool. In versions before 44.14.4 and Mend Renovate CE/EE images before 15.4.0 and the mend-renovate-enterprise-edition Helm chart before 10.4.0, log sanitisation for TLS private keys used for Mutual TLS was incomplete. While the value of...
CVE-2026-88883 Renovate before 44.14.4 TLS Private Key Log Sanitisation
Renovate is an automated dependency update tool. In versions before 44.14.4 and Mend Renovate CE/EE images before 15.4.0 and the mend-renovate-enterprise-edition Helm chart before 10.4.0, log sanitisation for TLS private keys used for Mutual TLS was incomplete. While the value of...
PT-2026-89394
Renovate is an automated dependency update tool. In versions before 44.14.4 and Mend Renovate CE/EE images before 15.4.0 and the mend-renovate-enterprise-edition Helm chart before 10.4.0, log sanitisation for TLS private keys used for Mutual TLS was incomplete. While the value of...
CVE-2025-15690
The Content Mask WordPress plugin before 1.8.5.6 does not properly sanitise and escape content submitted with a post before outputting it in the pages it generates, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks against any user viewing or previewi...
EUVD-2025-210873
The Content Mask WordPress plugin before 1.8.5.6 does not properly sanitise and escape content submitted with a post before outputting it in the pages it generates, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks against any user viewing or previewi...
EUVD-2026-71853
The IPGP Visitors Origin WordPress plugin before 1.6 does not sanitise or escape user input before reflecting it back in the HTTP response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who are tricked into submitting a crafted request...