CVE-2025-50286

Grav CMS v1.7.48 / Admin Plugin v1.10.48 - RCE autenticado a través de la subida de plugins CVE-2025-50286 Grav CMS v1.7.48 con Admin Plugin v1.10.48 es vulnerable a Ejecución Remota de Código RCE a través de la función de subida de plugins "Instalación Directa", permitiendo a administradores...

CVE-2023-22515

CVE-2023-22515 Información principal sobre CVE-2023-22515 Producto afectado: Atlassian Confluence Data Center & Confluence Server. Fecha de publicación: 04/10/2023. Gravedad: Critical CVSS 10.0. Tipo de vulnerabilidad: Broken Access Control / Improper Authorization → permite al atacante crear una...

CVE-2026-105468

The girishsaraf Online-Appointment-Booking-System is vulnerable to a SQL injection flaw within the Login Handler component, specifically affecting the mysqli_query function in the Admin/mlogin.php file. An attacker can initiate a remote attack by manipulating the uname or pass arguments. While th...

CVE-2025-2825

CVE-2025-2825/CVE-2025-31161 介绍 本文档展示了对影响 CrushFTP 服务器端的漏洞 CVE-2025-2825 的研究——CrushFTP是一个用于文件传输和存储的商业解决方案（支持FTP、SFTP、HTTP/S、类S3接口等）。 该缺陷被归类为 认证绕过 ，允许远程未认证攻击者获得管理员权限。成功利用可获得 crushadmin 权限，浏览和修改文件，管理用户账户，并通过 CrushFTP 的 Web 界面和 API 执行管理操作。 报告的受影响版本（根据公开的安全公告和研究人员报告）： CrushFTP 10.0.0 — 10.8.3 CrushFT...

CVE-2026-77226

Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured...

ScreenConnect-AuthBypass-RCE

Cómo usar Estoy usando Python3.9 pip install requests python check.py python batchAdduser.py python ScreenConnect-AuthBypass-RCE.py -h usage: ScreenConnect-AuthBypass-RCE.py -h -u USERNAME -p PASSWORD -t TARGET -d DOMAIN --proxy PROXY CVE-2024-1708 && CVE-2024-1709 -- RCE!!! optional arguments: -...

EUVD-2026-92791

Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured...

CVE-2026-77226

The Camunda engine, specifically versions 7.24.0 before 7.24.15 , is vulnerable to an incorrect authorization flaw in the Admin web application's first-run setup endpoint. The SetupResource component incorrectly determines setup availability by only counting direct members of the camunda-admin gr...

CVE-2026-77226 Camunda 7.24.0 < 7.24.15 Incorrect Authorization via SetupResource Endpoint

Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines setup availability by counting only direct members of the camunda-admin group rather than recognizing all configured...

CVE-2026-105679

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

CVE-2026-105687 Penpot: A team admin (non-owner) can remove the team owner via ::delete-team-member — missing owner-protection

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-team-member RPC allows a team administrator to remove any member other than themselves but does not protect the team owner. A non-owner administrator can delete the owner's team-profile-rel membership and lock t...

CVE-2023-42793

CVE-2023-42793 描述 JetBrains TeamCity 中的一个安全漏洞允许攻击者创建一个具有管理员权限的新用户（由攻击者指定）。 使用示例 ./cve-2023-42793 http://teamcity.examplewebsite.com username password...

CVE-2023-37755---Hardcoded-Admin-Credential-in-i-doit-Pro-25-and-below

CVE-2023-37755 - Credencial de administrador codificada en i-doit Pro 25 y versiones anteriores i-doit Pro 25 y versiones anteriores son vulnerables a una vulnerabilidad de credencial de administrador codificada. Estas vulnerabilidades permiten que cualquier persona inicie sesión como administrad...

CVE-2025-34077

CVE-2025-34077 未经身份验证的管理员会话劫持 - Pie Register 插件 版本 ≤ 3.7.1.4 📌 描述 该漏洞利用针对 Pie Register WordPress 插件 （版本 ≤ 3.7.1.4）中的漏洞，允许未经身份验证即可劫持管理员会话 。 🛡️ 此工具仅用于授权的测试和研究。请勿将其用于您没有所有权或未获得明确许可的系统。 🧪 概念验证 🚀 使用方法 python3 CVE-2025-34077.py http://target.site 示例： python3 CVE-2025-34077.py http://example.com ✅ 功能特性...

CVE-2020-6287_SAP-NetWeaver-bypass-auth

CVE-2020-6287SAP-NetWeaver-bypass-auth 针对 CVE-2020-6287 的自动化利用工具 CVE-2020-6287: SAP NetWeaver AS JAVA LM Configuration Wizard, 版本 - 7.30, 7.31, 7.40, 7.50, 未执行身份验证检查，允许未经身份验证的攻击者执行配置任务，对 SAP Java 系统执行关键操作，包括创建管理用户的能力，从而破坏系统的机密性、完整性和可用性，导致身份验证检查缺失。 你需要一个 shodan 许可证 请勿用于恶意目的 用法：./exploit.sh...

CVE-2026-105679

The Ghost Node.js content management system is vulnerable to Stored XSS in versions 6.22.1 through 6.64.0 . The root cause is that the restriction on content types for uploaded files is not applied when using the default local storage adapter , allowing files to be served with content types deriv...

CVE-2026-105644

Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, SVG images included in content imports were stored without sanitization. An attacker who convinced an Administrator to import a crafted file could host scripts on the site's domain, possibly resulting in compromise of staff...

CVE-2026-105643

Ghost is a Node.js content management system. From version 6.34.0 until 6.67.0, embed cards in the Ghost editor could bypass protections against stored cross-site scripting. Any staff user, including Contributors, could store scripts in post content that ran when another staff user opened the pos...

CVE-2026-105675 Ghost: Invite Token Disclosure in Ghost Admin API

Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permission to view staff invites were able to discover the secret token of pending invites, including invites for roles with higher privileges than their own. This could allow a staff user to escalate their...

CVE-2026-105675

The Ghost Node.js content management system is affected by a vulnerability where staff users with permissions to view staff invites can discover secret tokens for pending invites. This flaw exists in versions 4.39.0 through 6.64.0 . An attacker could exploit this to escalate privileges by accepti...