91041 matches found
PT-2026-60145
Name of the Vulnerable Software and Affected Versions grav-plugin-api versions prior to 1.0.4 Description An unauthenticated attacker can cause a password reset email to contain a link pointing to a server under their control. This occurs because the sanitizeHttpUrl function fails to verify the...
CVE-2026-26719
Cross Site Scripting vulnerability in xxl-job-admin v.3.0.0 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request containing a malicious script...
GHSA-7RX3-5WX3-5V76 Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private`
Summary Non-admin operators role user can set allowprivate: true on their own managed webhook subscription POST/PATCH /api/v1/webhook-subscriptions. No admin check exists on this field. At delivery time, allowprivate switches the dispatcher to an unguarded HTTP client, bypassing the...
GHSA-8559-GWJ3-Q37R EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField
EasyAdmin's FileField and ImageField accept browser-executable file types by default FileField applies no MIME/extension restrictions; ImageField's default Image constraint accepts SVG. When the upload directory is configured inside the public web root — as shown in the documentation — EasyAdmin...
CVE-2026-56196
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network...
CVE-2026-56197
Improper neutralization of special elements used in a command 'command injection' in Windows Admin Center allows an authorized attacker to execute code over a network...
GHSA-2P5X-4JR6-X5JG FacturaScripts: CSV formula injection in CSVExport allows authenticated low-priv users to plant payloads that execute when an admin opens the export
Summary Live PoC verified 2026-04-30 against a stock FacturaScripts master at 127.0.0.1:8081. A low-privilege user lowpriv created a customer with nombre = "=SUM1+1cmd|/c calc!A1". An admin then exported ListCliente to CSV via ?action=export&option=CSV. The downloaded file contains the raw payloa...
CSV Injection
Overview Affected versions of this package are vulnerable to CSV Injection in the writeData process. An attacker can achieve code execution on an administrator's workstation by planting specially crafted payloads in text fields, which are then exported to CSV and executed when opened in spreadshe...
CVE-2026-58631
Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally...
CVE-2026-56185
Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network...
CVE-2026-57107
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally...
CVE-2026-56169
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
CVE-2026-36214
osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip component and insufficient HTML sanitization, allowing remote attackers to execute arbitrary JavaScript in Agent or Admin sessions...
CVE-2026-15703
A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This vulnerability affects unknown code of the file /admin/userproductdeletequery.php. Performing a manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely...
CVE-2026-15429
A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1. Improper handling of user-controlled input may allow newline characters to be injected into internally constructed configuration data. An authenticated user with sufficient privileges may be abl...
GHSA-5QMH-X653-G8QJ FacturaScripts: Authenticated SQL injection in the FacturaScripts REST API filter parameter via parenthesis bypass in `Where::sqlColumn`
Summary Live PoC verified 2026-04-30 against a stock FacturaScripts master at 127.0.0.1:8081. A scoped ApiKey with fullaccess=0 and an ApiAccess row granting allowget=1 on the clientes resource only no other rights, no UI session, no admin issued one GET /api/3/clientes?filter0UNION%20SELECT%20.....
CVE-2026-56197 Windows Admin Center (WAC) Remote Code Execution Vulnerability
...
CVE-2026-56197 Windows Admin Center (WAC) Remote Code Execution Vulnerability
...
CVE-2026-56197
The CVE-2026-56197 entry describes a remote code execution in Windows Admin Center caused by improper neutralization of special elements used in a command (command injection). The NVD entry states threat is network-based with an 8.8 CVSS v3.1 base score (High) and that an authenticated attacker w...