Lucene search
+L

8797 matches found

EUVD
EUVD
added 3 hours ago3 views

EUVD-2026-53377

Subrion CMS's admin grid sorting helper, gridGetSorting in includes/classes/ia.base.controller.admin.php, whitelists the dir ASC/DESC request parameter via inarray, but falls back to the raw, attacker-supplied sort GET parameter whenever the requested key is not present in the per-controller...

7.2CVSS5.8AI score
SaveExploits0References2
EUVD
EUVD
added 3 hours ago5 views

EUVD-2026-53364

Zigbee2MQTT's ExternalJSExtension.getFilePath lib/extension/externalJS.ts joins a name parameter received via an MQTT message topic zigbee2mqtt/bridge/request/extension/save into the extensions base path using path.joinbasePath, name with no sanitization. Because path.join resolves ../ sequences,...

8CVSS6AI score
SaveExploits0References2
EUVD
EUVD
added 3 hours ago3 views

EUVD-2026-53359

OpenBK7231T's CHANNELSetLabel src/cmnds/cmdchannels.c stores channel labels received via the MQTT SetChannelLabel command using strdup with no HTML sanitization. CHANNELGetLabel returns these labels unsanitized, and they are rendered via hprintf255 at 15+ locations in src/httpserver/httpfns.c wit...

8.5CVSS5.5AI score
SaveExploits0References1
NVD
NVD
added 4 hours ago2 views

CVE-2026-71249

299Ko's public contact form plugin/contact/controllers/ContactController.php, home sets raw POST field values name, firstname, email, message into the page template with no sanitization. The template engine's variable output function common/Template.php, showvar echoes values with no...

6.1CVSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 4 hours ago2 views

CVE-2026-46581

In Eclipse Mojarra versions 2.3 and following, URL handing in DefaultFaceletFactory does not properly sanitize and/or block remote URLs, allowing an attacker to specify a URL to a remote Facelet which will be included and processed as part of the normal request, with the privileges of the target...

SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 4 hours ago6 views

CVE-2026-71249 299Ko: Unauthenticated Reflected XSS in Public Contact Form

299Ko's public contact form plugin/contact/controllers/ContactController.php, home sets raw POST field values name, firstname, email, message into the page template with no sanitization. The template engine's variable output function common/Template.php, showvar echoes values with no...

6.1CVSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 4 hours ago2 views

CVE-2026-71249

299Ko's public contact form plugin/contact/controllers/ContactController.php, home sets raw POST field values name, firstname, email, message into the page template with no sanitization. The template engine's variable output function common/Template.php, showvar echoes values with no...

6.1CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 4 hours ago3 views

EUVD-2026-53322

299Ko's public contact form plugin/contact/controllers/ContactController.php, home sets raw POST field values name, firstname, email, message into the page template with no sanitization. The template engine's variable output function common/Template.php, showvar echoes values with no...

6.1CVSS5.5AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 4 hours ago2 views

CVE-2026-71248

Inventory-Management-System-PHP's login.php constructs its authentication query via direct string concatenation of raw POST parameters: $sql = "select from user where email = '$email' and password = '$password'", with no escaping or parameterization, allowing authentication bypass via a payload...

9.8CVSS5.8AI score
SaveExploits0References3
Cvelist
Cvelist
added 4 hours ago5 views

CVE-2026-71239 DjangoCRM: Server-Side Template Injection in Mass Mail Message Rendering

DjangoCRM's massmail module renders user-controlled EmlMessage fields subject, content through Django's Template constructor with no sanitization, in at least three locations: messagepreviews.py builds an f-string embedding message.subject/message.content directly into a Template call;...

8.1CVSS
SaveExploits0References1
EUVD
EUVD
added 4 hours ago3 views

EUVD-2026-53312

DjangoCRM's massmail module renders user-controlled EmlMessage fields subject, content through Django's Template constructor with no sanitization, in at least three locations: messagepreviews.py builds an f-string embedding message.subject/message.content directly into a Template call;...

8.1CVSS5.6AI score
SaveExploits0References1
NVD
NVD
added 8 hours ago4 views

CVE-2025-15677

The GeoDirectory WordPress plugin before 2.8.110 does not sanitise and escape a place-category setting before outputting it back in an admin page, allowing high-privilege users such as editors and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is...

3.5CVSS
SaveExploits0References1
EUVD
EUVD
added 10 hours ago3 views

EUVD-2026-53050

In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests when s3acl=true. An attacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a...

6CVSS5.5AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 10 hours ago4 views

CVE-2026-71192

In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests when s3acl=true. An attacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a...

6CVSS5.5AI score
SaveExploits0References4Affected Software1
EUVD
EUVD
added 11 hours ago4 views

EUVD-2026-53038

VikAppointments Service Booking Calendar wordpress plugin is vulnerable to unauthenticated SQL injection due to one of the parameters that controls how the public reviews list is sorted is taken from the incoming request and used to build a database query without proper validation or sanitization...

7.5CVSS5.8AI score
SaveExploits0References5
Nuclei
Nuclei
added 12 hours ago17 views

WP BASE Booking - Reflected XSS

WP BASE Booking of Appointments, Services and Events WordPress plugin 5.0.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before output, letting attackers execute malicious scripts in high privilege users' browsers, exploit requires victim to...

6.1CVSS7.5AI score0.00579EPSS
SaveExploits1References1
Nuclei
Nuclei
added 12 hours ago65 views

Post Sync Plugin <= 1.1 - Cross-Site Scripting

Post Sync WordPress plugin = 1.1 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a maliciou...

6.1CVSS7.5AI score0.00598EPSS
SaveExploits1References2
Nuclei
Nuclei
added 12 hours ago15 views

Pinger 1.0 - Remote Code Execution

Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can exploit the unsanitized input in ping.php to write arbitrary PHP files and execute system commands by appending shell metacharacters. id:...

9.8CVSS6.6AI score0.03135EPSS
SaveExploits0References2
Nuclei
Nuclei
added 12 hours ago15 views

Advance Post Prefix WordPress plugin - Reflected XSS

Advance Post Prefix WordPress plugin through 1.1.1 contains a reflected cross-site scripting caused by unsanitized and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin, exploit requires crafted request. id: CVE-2024-12734 info: name: Advance...

6.1CVSS5.3AI score0.00517EPSS
SaveExploits1References2
Nuclei
Nuclei
added 12 hours ago15 views

Dyn Business Panel Plugin <= 1.0.0 - Cross-Site Scripting

Dyn Business Panel WordPress plugin = 1.0.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter in output, letting attackers execute scripts in the context of high privilege users, exploit requires victim to click a malicious link. id: CVE-2024-130...

7.1CVSS7.5AI score0.00526EPSS
SaveExploits1References2
Rows per page
Query Builder