grafana-CVE-2024-9264

grafana-CVE-2024-9264 このリポジトリにはCVE-2024-9264に関する詳細が含まれています。また、脆弱性のあるgrafanaのバージョンもビルドしており、ghcr.io/patrickpichler/grafana-cve-2024-9264:11.0.0からプルできます。...

CVE-2026-1357-Lab

CVE-2026-1357 — WPvivid Backup & Migration（漏洞版 vs 已修复版 Docker 实验环境） 仅限本地的 Docker 实验环境，用于对比 WPvivid Backup & Migration： 漏洞版本： 0.9.123 已修复版本： 0.9.124 专为学习实践而构建（实验环境搭建、验证、日志、笔记）。任何与 PoC 相关的内容均设计为仅在此实验环境的 localhost 上运行 。 安全与范围 请仅 在您自己的机器上运行（localhost + Docker 网络）。 请勿针对您不拥有或未经明确许可测试的真实站点/系统。...

qdPM 9.2 - Directory Traversal

qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI. id: CVE-2023-45855 info: name: qdPM 9.2 - Directory Traversal author: DhiyaneshDk severity: high description: | qdPM 9.2 allows Directory Traversal to list files and directories by navigating to t...

Extreme Management Center 8.4.1.24 - Cross-Site Scripting

Extreme Management Center 8.4.1.24 contains a cross-site scripting vulnerability via a parameter in a GET request. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

DedeCMS 5.7.109 - Server-Side Request Forgery

Manipulation of the rssurl parameter in codo.php leads to server-side request forgery in DedeCMS version 5.7.109. id: CVE-2023-3578 info: name: DedeCMS 5.7.109 - Server-Side Request Forgery author: ritikchaddha severity: critical description: | Manipulation of the rssurl parameter in codo.php lea...

CVE-2021-32724-Target

CVE-2021-32724 漏洞利用目标仓库 /!\ 此仓库配置了易受攻击的 Check Spelling Workflow 版本 /!\ 此仓库是 CVE-2021-32724 漏洞利用的目标。 Helllo World...

EUVD-2026-64834

Contributor Server Side Request Forgery SSRF in Shared Files = 1.7.69 versions...

CVE-2026-66586

Author Local File Inclusion in WP Cafe Pro 3.0.15 versions...

UBUNTU-CVE-2026-76220

GitPython before 3.1.58 contains a command execution vulnerability in...

EUVD-2026-62496

Joomla Extension - cmsjunkie.com - Reflected XSS / XML injection in J-BusinessDirectory 6.2.3 - companyName from the request was written unescaped into an XML attribute...

MINI-MGWH-PV97-W83H

Bulletin has no description...

EUVD-2026-62376

Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...

CVE-2026-59940

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.5.3, seroval.fromJSON allows attacker-controlled JSON Promise control nodes to operate on values from the general deserialization reference table without verifying genuine...

CVE-2026-75056

In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...

MINI-762H-G653-93FM

Bulletin has no description...

WordPress Prevent Direct Access - Protect WordPress Files plugin <= 2.8.8.8 - Unauthenticated Protected File Access vulnerability

WordPress Prevent Direct Access - Protect WordPress Files plugin = 2.8.8.8 - Unauthenticated Protected File Access vulnerability discovered by Lucas Montes NiRoX in WordPress Plugin Prevent Direct Access versions = 2.8.8.8...

CVE-2026-63964 affecting package kernel for versions less than 6.6.144.1-2

CVE-2026-63964 affecting package kernel for versions less than 6.6.144.1-2. A patched version of the package is available...

WordPress FluentCommunity plugin <= 2.7.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Septio Noerdiansyah in WordPress Plugin FluentCommunity versions = 2.7.5...

CVE-2026-18030

The BricksForge WordPress plugin before 3.1.8.8 does not verify the identity of the requester when processing a password change submitted through one of its form actions, allowing unauthenticated attackers to set an arbitrary password for any user, including administrators, and take over their...

CVE-2026-19338 automateyournetwork MCPyATS generate_mermaid_markdown index.ts processGenerateRequest path traversal

A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcpservers/mermaid/index.ts of the component generatemermaidmarkdown. The manipulation of the argument folder/name leads to path traversal. The attack...