279 matches found
Exploit for CVE-2026-82222
CVE-2026-82222 Unauthenticated PHP object injection to RCE...
CVE-2026-76210
phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...
EUVD-2026-62451
phpMyFAQ before 4.1.7 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...
CVE-2026-76210
phpMyFAQ before 4.1.6 (some sources cite 4.1.7) contains an inadequate HTML sanitization flaw in FAQ answers before PDF generation via TCPDF . An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory (e.g...
CVE-2026-76210 phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export
phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...
CVE-2026-76210 phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export
phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...
CVE-2026-76210 phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export
phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...
PT-2026-78392
Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.7 Description Insufficient sanitization of HTML in FAQ answers occurs before generating PDFs via TCPDF. An attacker with permissions to create or edit FAQ content can embed an tag with a src attribute referencing...
CVE-2026-76210: External Control of File Name or Path
phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...
WALLABAG-FULL-DISCLOSURE-Stored-XSS-SSRF-CVSS-8.5-GHSA-q2g2-
WALLABAG-FULL-DISCLOSURE-Stored-XSS-SSRF-CVSS-8.5-GHSA-q2g2- T...
PHP TCPDF SSRF
The vulnerability of the PHP library TCPDF is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a remote attacker to perform an SSRF attack...
EUVD-2017-15165
Malware in sbrugna...
EUVD-2024-3571
Malicious code in bioql PyPI...
EUVD-2024-3618
Malicious code in bioql PyPI...
EUVD-2024-3555
Malicious code in bioql PyPI...
EUVD-2024-3587
Malicious code in bioql PyPI...
EUVD-2024-3609
Malicious code in bioql PyPI...
PHP TCPDF Complexity DoS
The vulnerability of the PHP TCPDF library is related to the inefficient complexity of regular expressions. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Linux Distros Unpatched Vulnerability : CVE-2017-6100
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP. CVE-2017-6100 Note that Nessus relies on the presence of the package a...
PT-2025-43979
Уязвимость PHP-библиотеки TCPDF связана с недостаточной проверкой запросов на стороне сервера. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, осуществить SSRF-атаку...