CVE-2026-55224

The MineAdmin backend management system is vulnerable to a path traversal flaw in its app-store plugin service prior to version 3.2.0-alpha.2 . The application fails to sanitize the user-supplied identifier parameter, concatenating it directly into filesystem paths within plugin/mine-admin/app-st...

CVE-2026-55224 MineAdmin: Path Traversal via Unsanitized identifier in Plugin Install/Uninstall

MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal management systems, CMS, CRM, OA, ERP and other business applications. Prior to version 3.2.0-alpha.2, the app-store plugin service concatenates...

CVE-2026-55224 MineAdmin: Path Traversal via Unsanitized identifier in Plugin Install/Uninstall

MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal management systems, CMS, CRM, OA, ERP and other business applications. Prior to version 3.2.0-alpha.2, the app-store plugin service concatenates...

CVE-2026-55224 MineAdmin: Path Traversal via Unsanitized identifier in Plugin Install/Uninstall

MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal management systems, CMS, CRM, OA, ERP and other business applications. Prior to version 3.2.0-alpha.2, the app-store plugin service concatenates...

ish

iSH A project to get a Linux shell running on iOS, using usermode x86 emulation and syscall translation. For the current status of the project, check the issues tab, and the commit logs. App Store page TestFlight beta Discord server Wiki with help and tutorials README中文 如若未能保持最新，请提交PR以更新 Hacking...

CVE-2026-94681

Unauthenticated Denial of Service Attack in WP Store Locator 3.0.0 versions...

EUVD-2026-89851

Unauthenticated Denial of Service Attack in WP Store Locator 3.0.0 versions...

CVE-2026-94681 WordPress WP Store Locator plugin < 3.0.0 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in WP Store Locator 3.0.0 versions...

CVE-2026-94681

The WP Store Locator WordPress plugin versions prior to 3.0.0 are vulnerable to an unauthenticated Denial of Service (DoS) attack. While the vulnerability allows an attacker to impact service availability, the provided documents do not specify the underlying root cause, specific affected function...

CVE-2026-94681 WordPress WP Store Locator plugin < 3.0.0 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in WP Store Locator 3.0.0 versions...

CVE-2026-55224: Improper Limitation of a Pathname to a Restricted Directory

MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal management systems, CMS, CRM, OA, ERP and other business applications. Prior to version 3.2.0-alpha.2, the app-store plugin service concatenates...

AuroraStore

Aurora Store Aurora Store를 사용하면 공식 Google Play 스토어에서 앱을 검색하고 다운로드할 수 있습니다. 앱 설명, 스크린샷, 업데이트, 리뷰를 확인하고 Google Play에서 APK를 기기로 직접 다운로드할 수 있습니다. Aurora Store를 사용하려면 처음 열고 구성할 때 Google Play 계정으로 로그인하세요. 기존 앱 스토어와 달리 Aurora Store는 어떤 앱도 소유, 라이선스 또는 배포하지 않습니다. Aurora Store의 모든 앱, 앱 설명, 스크린샷 및 기타 콘텐츠는...

CVE-2026-37149

CVE-2026-37149 GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0의 SQL 인젝션 개요 CVE ID: CVE-2026-37149 취약점 유형: SQL 인젝션 CWE-89 심각도: 높음High 발견자: Dhyey Patel 설명 GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0에는 "/grocery/searchproducts.php"의 "scost" 매개변수에 SQL 인젝션...

CVE-2026-20251

CVE-2026-20251 — Splunk Secure Gateway jsonpickle 역직렬화 RCE 연구자: Fady Oueslati · ReactiveZero Security Research 참조: 2026FO-SPLUNK-20251 CVSS: 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 상태: 공개 — 패치 제공됨 요약 낮은 권한의 인증된 사용자가 KV Storemobilealerts 컬렉션에 조작된 문서를 저장하여 Splunk 호스트에서 원격 코드 실행 을 달성할 수 있습니...

CVE-2025-4336

eMagicOne Store Manager for WooCommerce 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2:...

CVE-2023-49539

CVE-2023-49539 Book Store Management System v1.0 - "index.php/category"에서의 사이트 간 스크립팅XSS 취약점 - 취약 필드: "Category Name" 설명 : Book Store Management System v1.0에서 "/bsmsci/index.php/category"에 사이트 간 스크립팅XSS 취약점이 발견되었습니다. 이 취약점으로 인해 공격자는 "category Name" 필드에 조작된 페이로드를 주입하여 임의의 웹 스크립트 또는 HTML을 실행할 수 있습니...

EUVD-2025-26599

PaperCut Print Deploy is an optional component that integrates with PaperCut NG/MF which simplifies printer deployment and management. When the component is deployed to an environment, the customer has an option to configure the system to use a self-signed certificate. If the customer does not...

CVE-2026-65828 Zammad: Pending upload deletion bypass via legacy attachment endpoint

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the legacy destroyform action on AttachmentsController deletes UploadCache Store records based solely on a user-supplied formid without verifying that the requesting user owns those records. An authenticated...

CVE-2026-65828

The open-source helpdesk system Zammad contains a vulnerability in its AttachmentsController prior to version 7.1.2 . The legacy destroy_form action deletes UploadCache Store records based on a user-supplied form_id without verifying ownership. An authenticated attacker who obtains another user's...

CVE-2026-61525 Zammad: Arbitrary File Deletion via Unvalidated Session Identifier in Long Polling Controller

Zammad is a web based open source helpdesk/customer support system. In 7.0.2 and 7.1.0, zammad's session management for websocket and long-polling connections is susceptible to a path traversal attack. Session identifiers supplied by the client are insufficiently validated before being used to...