CVE-2024-7120

Vulnerabilità di Command Injection nei dispositivi Raisecom CVE-2024-7120 Proof of concept! Panoramica È stata identificata una vulnerabilità di command injection nei dispositivi Gateway RAISECOM, che interessa i modelli MSG1200, MSG2100E, MSG2200 e MSG2300. Questa vulnerabilità consente a un...

WordPress Tutor LMS plugin <= 4.0.5 - Unauthenticated Remote Code Execution via 'template' and 'data' POST Parameters vulnerability

Unauthenticated Remote Code Execution via 'template' and 'data' POST Parameters vulnerability discovered by Slopothecary in WordPress Plugin Tutor LMS versions = 4.0.5...

CVE-2019-3396

CVE-2019-3396 Path traversal del Connector Widget di Confluence CVE-2019-3396 POC RCE root@kitploit: POST /rest/tinymce/1/macro/preview HTTP/1.1 Host: x.x.x.x Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 X11; Linux x8664; rv:60.0 Gecko/20100101 Firefox/60.0...

phpcms-2008-CVE-2018-19127

phpcms-2008-CVE-2018-19127 Recentemente, encontramos uma vulnerabilidade no /type.php do código-fonte do phpcms 2008. Quando atacantes enviam requisições maliciosas como "/type.php?template=tag;@unlinkFILE;assert$POST1;//../rss", conteúdo malicioso neste caso "@unlinkFILE;assert$POST1;" será...

CVE-2025-1661

CVE-2025-1661 - Inclusione Locale di File LFI non autenticata in HUSKY – Products Filter Professional per WooCommerce Descrizione Il plugin HUSKY – Products Filter Professional for WooCommerce per WordPress è vulnerabile a Local File Inclusion LFI in tutte le versioni fino alla 1.3.6.5 inclusa...

CVE-2025-4524

CVE-2025-4524 - Nicht authentifizierte LFI im madara-core WordPress-Theme WordFence-Link Beschreibung Eine Schwachstelle liegt in der Aktion madaraloadmore von madara, bei der ein template-Parameter beliebige Daten vom Benutzer annimmt und an die include-Funktion von PHP übergeben wird...

CVE-2026-76218

A flaw was found in GitPython. This vulnerability allows a remote attacker to achieve arbitrary code execution. By supplying a specially crafted template parameter to the Repo.init function, an attacker can point to a directory containing malicious Git hooks. When Git operations are performed on...

CVE-2024-7120-Exploit-by-Dark-07x

Iniezione di comandi nei dispositivi Raisecom CVE-2024-7120 Prova di concetto! Panoramica È stata identificata una vulnerabilità di iniezione di comandi nei dispositivi gateway RAISECOM, che interessa i modelli MSG1200, MSG2100E, MSG2200 e MSG2300. Questa vulnerabilità consente a un attaccante...

CVE-2025-1661

CVE-2025-1661 – Unauthentifizierte Local File Inclusion LFI in HUSKY – Products Filter Professional für WooCommerce Beschreibung Das HUSKY – Products Filter Professional für WooCommerce -Plugin für WordPress ist in allen Versionen bis einschließlich 1.3.6.5 anfällig für Local File Inclusion LFI...

CVE-2026-76218

GitPython before 3.1.58 has an RCE flaw in Repo.init that passes unvalidated git options, allowing attackers to inject a template directory with malicious hooks executed during subsequent git operations. Affected libraries should upgrade to 3.1.58 or later; no in-the-wild exploitation is reported...

CVE-2026-76218 GitPython before 3.1.58 Remote Code Execution via Repo.init

GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a template parameter pointing to a directory with malicious git hooks that execute arbitrary code when git operations are performed on the...

VulnCheck KEV: CVE-2026-49049

The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated attackers to delete arbitrary files, write arbitrary JSON files and update template parameters...

Arbitrary Code Injection

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Arbitrary Code Injection via the Repo.init process. An attacker can execute arbitrary code by supplying a malicious template parameter that points to a directory...

CVE-2026-15404

The Lpagery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.5.7. This is due to insufficient input sanitization and output escaping in the lpageryaddfiltertexttemplatepost function, which is hooked to adminfooter and echoes the...

CVE-2026-15404

CVE-2026-15404 concerns the Lpagery WordPress plugin (&lt;= 2.5.7). It enables a Stored Cross-Site Scripting (XSS) via post titles due to insufficient sanitization and output escaping in lpagery_add_filter_text_template_post(), which runs on admin_footer and echoes the raw post_title of the post ...

CVE-2026-46687

Emlog is an open source website building system. In 2.6.13 and earlier, the article publishing interface stores a path-traversal template parameter from apicontroller.php without validation, and logcontroller.php later checks fileexists and calls include View::getView$template, allowing an...

CVE-2026-46687 Emlog Local File Inclusion (LFI)

Emlog is an open source website building system. In 2.6.13 and earlier, the article publishing interface stores a path-traversal template parameter from apicontroller.php without validation, and logcontroller.php later checks fileexists and calls include View::getView$template, allowing an...

EUVD-2026-44986

Emlog is an open source website building system. In 2.6.13 and earlier, the article publishing interface stores a path-traversal template parameter from apicontroller.php without validation, and logcontroller.php later checks fileexists and calls include View::getView$template, allowing an...

CVE-2026-46687

CVE-2026-46687 affects Emlog prior to or including 2.6.13. The flaw stems from an unvalidated path-traversal template parameter used by api_controller.php and a subsequent include in View::getView($template) after a file_exists check in log_controller.php. This enables an authenticated author to ...

CVE-2026-15005

The CVE-2026-15005 issue affects the WordPress Loco Translate plugin (versions up to and including 2.8.5). Root cause: missing or incorrect nonce validation in execTemplate enables a CSRF that can bypass path validation and pass a php://filter URI to the include sink via a forged request. This ca...