CVE-2024-48762

CVE-2024-48762 الوصف ثغرة حقن أوامر في /usr/www/application/models/settingscamera.php في FLIR AX8 حتى الإصدار 1.46.16 تسمح للمهاجمين بتنفيذ أوامر عشوائية عبر معامل value. إثبات المفهوم GET /settings/applyfirmware/;idtest123.txt;/false HTTP/1.1 Host: XXXX الاستجابة HTTP/1.1 200 OK X-Powered-By:...

CVE-2026-12626

The Bookly plugin for WordPress (versions up to and including 28.2 ) is vulnerable to PHP Object Injection due to the deserialization of untrusted input via the 'value' parameter . This flaw allows authenticated attackers with custom-level access or higher to inject a PHP Object. While a vulnerab...

CVE-2026-12626 Online Scheduling and Appointment Booking System <= 28.2 - Authenticated (Custom+) PHP Object Injection via 'value' Parameter

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 28.2 via deserialization of untrusted input via the ‘value’ parameter. This makes it possible for authenticated attackers, with custom-lev...

EUVD-2026-96221

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 28.2 via deserialization of untrusted input via the ‘value’ parameter. This makes it possible for authenticated attackers, with custom-lev...

CVE-2022-24124

مقدمة Casdoor هو منصة مركزية للمصادقة الموحدة SSO تعتمد على OAuth 2.0 / OIDC الرقم رقم CVE: CVE-2022-24124 رقم CNPD: CNPD-202201-7304 الإصدارات المتأثرة مستوى الخطورة: عالي 7.5 HIGH POC/EXP: منشور Casdoor POC:...

CVE-2023-51126

CVE-2023-51126 FLIR AX8 jusqu'à la version 1.46.16 est vulnérable à l'injection de commandes via /usr/www/res.php. Type de vulnérabilité Injection de commandes Fournisseur du produit FLIR Composant affecté dans /usr/www/res.php. Le paramètre value peut injecter la commande et l'exécuter. Type...

Cross-site Scripting (XSS)

Semantic MediaWiki is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient output-context encoding of the user-controlled value parameter in rendered output and error messages, which allows an attacker to inject malicious content and execute scripts in a victim's brows...

CVE-2026-77608

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, when the value parameter was reflected back into rendered output and error messaging paths without enough output-context encoding. Version 7.2.0...

EUVD-2026-83173

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, when the value parameter was reflected back into rendered output and error messaging paths without enough output-context encoding. Version 7.2.0...

Semantic MediaWiki has reflected XSS in `Special:SearchByProperty` (`property` and `value` parameters)

Failure mode The value parameter was reflected back into rendered output and error messaging paths without enough output-context encoding. Remediation - The form value is escaped before it is placed back into the input field. - Derived error messages are also escaped before being rendered into...

PT-2026-95499

Name of the Vulnerable Software and Affected Versions Semantic MediaWiki versions prior to 7.2.0 Description Semantic MediaWiki is an open-source extension for MediaWiki used for storing and querying data. The software fails to apply sufficient output-context encoding when the value parameter is...

CVE-2026-77608: Improper Neutralization of Input During Web Page Generation

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, when the value parameter was reflected back into rendered output and error messaging paths without enough output-context encoding. Version 7.2.0...

PT-2026-94087

Name of the Vulnerable Software and Affected Versions changedetection.io versions prior to 0.60.7 Description An issue exists where the software fails to validate the Goto URL action within browser steps. This allows unauthenticated attackers to access internal network addresses by providing...

PT-2026-84298

A vulnerability was determined in Xinhu Rainrock RockOA up to 2.3.2. The impacted element is the function toaddval of the file /index.php?m=index&a=publicsavevalue&ajaxbool=true. Executing a manipulation of the argument Value can lead to sql injection. The attack may be performed from remote. The...

CVE-2026-71288 Koha SQL Injection via order_by and {order}_ovalue Parameters in guided_reports.pl

Koha's guided report builder reports/guidedreports.pl reads the CGI parameter and, for each value, a dynamically-named parameter, and concatenates both directly into an SQL ORDER BY clause with no allowlist or validation. Since ORDER BY columns cannot be bound via prepared-statement placeholders,...

CVE-2026-71288 Koha SQL Injection via order_by and {order}_ovalue Parameters in guided_reports.pl

Koha's guided report builder reports/guidedreports.pl reads the CGI parameter and, for each value, a dynamically-named parameter, and concatenates both directly into an SQL ORDER BY clause with no allowlist or validation. Since ORDER BY columns cannot be bound via prepared-statement placeholders,...

CVE-2026-15070 Salon Booking System <= 10.30.32 - Cross-Site Request Forgery to Remote Code Execution via 'value' Parameter

The Salon Booking System – Free Version plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 10.30.32. This is due to missing or incorrect nonce validation on the setCustomText function. This makes it possible for unauthenticated attackers to inje...

CVE-2026-15070

The CVE covers the WordPress plugin “Salon Booking System – Free Version.” All versions up to and including 10.30.32 are vulnerable to Cross-Site Request Forgery due to missing/incorrect nonce validation in setCustomText, allowing unauthenticated attackers to inject PHP into translate-constants.p...

CVE-2026-3652

The ARForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the value parameter of the arfsaveincompleteformdata AJAX action in all versions up to, and including, 7.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-3652 ARForms <= 7.1.3 - Unauthenticated Stored Cross-Site Scripting via 'value' Parameter

The ARForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the value parameter of the arfsaveincompleteformdata AJAX action in all versions up to, and including, 7.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...