CVE-2017-5638-ApacheStruts2.3.5

CVE-2017-5638-ApacheStruts2.3.5 CVE-2017-5638에 대한 익스플로잇입니다. 이 익스플로잇은 버전 2.3.5-2.3.31 및 2.5 – 2.5.10에서 작동합니다. 요구 사항 optparse, requests 사용법 이 익스플로잇은 다음과 같이 사용할 수 있습니다: $ python3 CVE-2017-5638ApacheStruts.py -u http://10.129.187.188:8080/Monitoring/example/Welcome.action -c id b'uid=115tomcat8...

CVE-2016-2098

CVE-2016-2098 Ruby on Rails 3.2.22.2 이전 버전, 4.x 4.1.14.2 이전 버전, 4.2.x 4.2.5.2 이전 버전의 Action Pack에서 원격 공격자가 애플리케이션의 제한 없는 render 메서드 사용을 악용하여 임의의 Ruby 코드를 실행할 수 있습니다 RCE https://nvd.nist.gov/vuln/detail/CVE-2016-2098 사용법 git clone https://github.com/Debalinax64/CVE-2016-2098.git cd CVE-2016-2098...

CVE-2022-0739

CVE-2022-0739 BookingPress 1.0.11 - 인증되지 않은 SQL 인젝션 이 플러그인은 사용자가 제출한 POST 데이터를 동적으로 구성된 SQL 쿼리에 사용하기 전에 적절히 검증하지 못하며, 이는 bookingpressfrontgetcategoryservices AJAX 액션인증되지 않은 사용자도 접근 가능을 통해 발생하여 인증되지 않은 SQL 인젝션으로 이어집니다. CVE-2022-0739 https://plugins.trac.wordpress.org/changeset/2684789 출처:...

Suricata-Rule-for-Detecting-CVE-2025-55182

CVE‑2025‑55182용 Suricata 탐지 규칙 Next.js Action Poisoning → Node.js execSync RCE 📌 설명 이 문서는 Suricata 규칙 SID 900304 이 CVE‑2025‑55182 의 악용 시도를 탐지하는 방법을 설명합니다. CVE‑2025‑55182는 Action Poisoning 을 가능하게 하여 임의의 Node.js RCE 로 이어지는 Next.js의 치명적인 취약점입니다. 구체적으로 다음 경로를 통해 발생합니다: 프로토타입 오염Prototype Pollution 내부...

CVE-2026-94132

The AcyMailing Enterprise extension for Joomla (versions 1.0.0 – 11.0.5 ) contains a Remote Code Execution (RCE) vulnerability. The root cause is that the mailbox actions in POP3 mode save incoming MIME attachments to the media/com_acym/upload/ directory without performing extension checks. This ...

CVE-2026-94132 Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension 11.1.0 - MIME parts of incoming emails were saved to media/comacym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PH...

EUVD-2026-87772

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension 11.1.0 - MIME parts of incoming emails were saved to media/comacym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PH...

CVE-2026-94132 Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension 11.1.0 - MIME parts of incoming emails were saved to media/comacym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PH...

CVE-2026-11871

The Team Members WordPress plugin (version

CVE-2026-11871 Team Showcase Supreme < 9.3 - Unauthenticated Sensitive Data Disclosure via wpm_6310_team_member_details

The Team Members WordPress plugin before 9.3 does not perform any authorization or visibility check in an unauthenticated AJAX action that returns full team member records by ID, allowing unauthenticated attackers to enumerate and disclose details, including email addresses and phone numbers, of...

EUVD-2026-87528

The Team Members WordPress plugin through 9.2 does not perform any authorization or visibility check in an unauthenticated AJAX action that returns full team member records by ID, allowing unauthenticated attackers to enumerate and disclose details, including email addresses and phone numbers, of...

CVE-2026-100579

OpenClaw npm package 'openclaw' before 2026.7.1 incorrectly trusts requester provenance in message.action. In identity-bearing Gateway deployments authentication modes that honor caller identity and narrower operator scopes, a write-scoped caller can supply another sender's identifier to the...

CVE-2026-14962

CVE-2026-14962 WordPress 插件 ELEX WooCommerce Request a Quote 未认证 SQL 注入 ELEX WooCommerce Request a Quote（WordPress 插件 elex-request-a-quote）≤ 2.4.0 — 通过公开的 elexraqaddtoquote AJAX 操作实现未认证 SQL 注入。 仅限授权测试。请勿对您不拥有或未获授权测试的系统运行此工具。 要求： Python 3，仅使用标准库。目标必须运行 WooCommerce（报价脚本/nonce 会打印在商店/首页上）。 python3...

PT-2026-99234

Name of the Vulnerable Software and Affected Versions openclaw versions prior to 2026.7.1 Description The software incorrectly binds Signal approval reactions. When unrelated outbound messages and a pending approval exist in the same conversation, a reaction intended for a structured approval...

CVE-2026-100526: Missing Authorization

OpenClaw's Discord integration npm package @openclaw/discord before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker upload actions before loading a local file. A sender permitted to invoke those actions could cause OpenClaw to read a host path that the same...

PT-2026-99394

Name of the Vulnerable Software and Affected Versions AcyMailing Enterprise versions prior to 11.1.0 Description A remote code execution issue exists in the mailbox action feature. The system saves MIME parts of incoming emails to the media/com acym/upload/ directory without performing extension...

PT-2026-99239

Name of the Vulnerable Software and Affected Versions Team Members WordPress plugin versions prior to 9.3 Description An unauthenticated AJAX action fails to perform authorization or visibility checks when returning team member records by ID. This allows unauthenticated attackers to enumerate and...

PT-2026-99163

Name of the Vulnerable Software and Affected Versions @openclaw/discord versions prior to 2026.9.3 Description The Discord integration for OpenClaw fails to maintain the sender-scoped media policy during emoji and sticker upload actions before a local file is loaded. An authorized sender can bypa...

CVE-2026-100378 Missing permission check in the Translate sandbox doRemind action

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - Translate Extension: from before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-100377 Revision-deleted pages can be viewed through WikiLambda's action=edit and Special:ViewAbstract

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Excavation. This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the master branch...