WordPress Select All Categories and Taxonomies <1.3.2 - Cross-Site Scripting

WordPress Select All Categories and Taxonomies plugin before 1.3.2 contains a cross-site scripting vulnerability. The settings page of the plugin does not properly sanitize the tab parameter before outputting it back. An attacker can inject arbitrary script in the browser of an unsuspecting user ...

CVE-2022-28346

CVE-2022-28346 Django QuerySet.annotate, aggregate, extra SQL インジェクション 環境初期化 root@kitploit: 1.python manage.py makemigrations 2.python manage.py migrate 3.访问http://x.x.x.x:8000/ 插入初始化数据 脆弱性の再現 root@kitploit: 访问http://x.x.x.x:8000/demo POC: http://x.x.x.x:8000/demo?field=demo.name" FROM "demouser"...

Astra Linux – Vulnerability in xorg-server

A vulnerability was discovered in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges escalation on systems where X is used...

Astra Linux – Vulnerability in Firefox and Thunderbird

An attacker could cause a select dropdown menu to be displayed over another tab; this could lead to user confusion and potential spoofing attacks. This vulnerability affects Firefox 133, Firefox ESR 128.5, Thunderbird 133, and Thunderbird 128.5...

Astra Linux – Vulnerability in SQLite3

The flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN where the right-hand side is a view. This can lead to a NULL pointer dereference or incorrect results...

CVE_2018_16763_Proof_of_Concept

CVE-2018-16763 概念実証 CVE-2018-16763（Fuel CMS - 事前認証リモートコード実行）用の概念実証（PoC）エクスプロイト。 説明 このPython 3プログラムは、Fuel CMSコンテンツ管理システムにおけるCVE-2018-16763の脆弱性のPoCとして機能します。具体的には、この脆弱性により、pages/select/filterパラメータを介したPHPコード評価（本PoCで実装済み）が可能になり、重大なシステム脆弱性である事前認証リモートコード実行につながります。 はじめに 依存関係 Python 3およびPython標準ライブラリ...

CVE-2026-89438

A flaw was found in the Linux kernel, specifically within the Intel Speed Select Technology ISST component. This vulnerability arises from insufficient validation of input values, such as logical CPU ID and CLOS ID, used in the core power feature. A local attacker could exploit this by providing...

CVE-2026-29187_SqlInjectionVulnerabilityOpenEMR7.0.4

CVE-2026-29187 - 新しい検索ポップアップにおけるSQLインジェクションの脆弱性 弱点 CWE-89 SQLコマンドで使用される特殊要素の不適切な無害化（'SQLインジェクション'）...

CVE-2026-87459

Observable discrepancy in Select in Google Chrome prior to 153.0.8010...

CVE-2026-15748

CVE-2026-15748 — Forminator Forms 認証なし任意ファイルアップロード → RCE CVSS 9.8 Critical · 影響を受けるバージョン: Forminator = 1.56.1 · 修正済み: 1.56.2 研究者: daroo（Wordfence バグバウンティ、$2,048）· アクティブインストール数 約60万 Writeup:...

CVE-2026-32710

CVE-2026-32710 MariaDBJSONSCHEMAVALID におけるヒープバッファオーバーフロー → 永続的な権限昇格 → UDF RCE | ---|--- 影響を受けるバージョン| MariaDB 11.4.x（11.4.9 で確認） バグ| jsongetnormalizedstring における OOB 書き込み — 境界チェックなしで 128 バイトの DYNAMICSTRING に strncpy を実行 影響| SELECT のみのユーザー → ALL PRIVILEGES WITH GRANT OPTION → UDF による任意コマンド実行 ソース|...

CVE-2026-87807

siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter. Attackers can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and...

EUVD-2026-74833

siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter. Attackers can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and...

CVE-2026-87807

siyuan (a self-hosted knowledge management application) versions before v3.8.2 are affected by an SQL injection vulnerability in the fullTextSearchBlock endpoint via the method=1 query parameter. The description describes the flaw as requiring authentication, while the assigned CVSS vectors (3.1:...

CVE-2026-87807 siyuan before v3.8.2 SQL Injection via fullTextSearchBlock

siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter. Attackers can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and...

CVE-2026-87807 siyuan before v3.8.2 SQL Injection via fullTextSearchBlock

siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter. Attackers can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and...

BUI-select-xss

BUI-select-xss cve-2018-8108 在一次安全测试中，偶然发现给问题 bui是一个前端框架，很多企业都在使用该框架构建自己的前端 通常我们防范xss的方法是会对用户输入统一按照不信任原则，在输出的时候进行转义，传递给前端页面进行展示 但是bui的select组件在展示这部分输出的时候，却将原本已经在转义好的用户输入又给转义了回去，造成xss的payload绕过了原有的安全机制，继续运行 附件中的例子来自于真实的案例 可以看到id为“workGroupList”的input标签中的数据已经做了转义，...

CVE-2026-87459

Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-87459

Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-65321-pyathena

CVE-2026-65321: 非SELECTステートメント向けバックスラッシュ引用符エスケープを介したPyAthenaにおけるSQLインジェクション 深刻度: 緊急、CVSS v4.0 9.3 / CVSS v3.1 9.8 CNAであるVulnCheckが割り当て ベクター v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N ベクター v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 影響を受けるバージョン: PyAthena = 3.35.3...