CVE-2026-54675

FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and conversion functionality that allows an authenticated attacker to perform arbitrary file writes, leading directly to remote code execution RCE. Authentication...

CVE-2026-45562

FreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, the FreePBX Music on Hold MoH module contains a critical security flaw that allows authenticated attackers to execute arbitrary system commands with the privileges of the Asterisk service. Authentication with an existing FreeP...

CVE-2021-38699-Reflected-XSS

CVE-2021-38699 : Múltiples XSS Reflejados en TastyIgniter v3.0.7 Restaurtant CMS Existe XSS reflejado autenticado en el panel de administración de TastyIgniter en la versión 3.0.7. https://vulners.com/cve/CVE-2021-38699 POC: Parámetro start del panel de administración: POST...

CVE-2023-51281

CVE-2023-51281 Customer Support System 1.0 - “firstname”、“lastname”、“middlename”、“contact”或“address”参数中的多个跨站脚本XSS漏洞 描述 ：Customer Support System 1.0 中的 /customersupport/ajax.php?action=savecustomer...

AdTran-Personal-Phone-Manager-Vulns

AdTran-Personal-Phone-Manager-Vulns A repository hosting write ups for the 0 days CVE-2021-25679, CVE-2021-25680, and CVE-2021-25681. Summary CVE-2021-25679: Adtran Personal Phone Manager Authenticated Stored XSS in Change Email Address Form CVE-2021-25680: Adtran Personal Phone Manager Multiple...

CVE-2026-55160

The self-hosted RSS reader Stringer is vulnerable to an unrestricted Server-Side Request Forgery (SSRF) in versions prior to commit 75cb095 . This flaw allows any authenticated user to compel the server to send arbitrary HTTP/HTTPS requests to internal networks, localhost services, and cloud meta...

EUVD-2026-88400

Stringer is a self-hosted, anti-social RSS reader. Prior to commit 75cb095, an unrestricted Server-Side Request Forgery SSRF vulnerability allows any authenticated user to force the Stringer server to send arbitrary HTTP/HTTPS requests to internal networks, localhost services, and cloud metadata...

CVE-2023-47400

CVE-2023-47400 CVE-2023-47400 的概念验证 通过任意文件写入在 Nagios XI 5.11.0 上实现已认证的 PHP 远程代码执行 !Note 此 PoC 基于 NCC 集团发布的技术公告 https://research.nccgroup.com/2023/12/13/technical-advisory-multiple-vulnerabilities-in-nagios-xi/ 此 PoC 遵循以下过程： 上传一个名为 placeholder.jpg 的有效图像（仅包含 JFIF 魔数头部，无内容） 使用自定义包含的 重命名 功能将图像重命名为...

CVE-2023-42326

pfSense 2.7.0 Exploit de Inyección de Comandos CVE-2023-42326 Este script de Python es una Prueba de Concepto PoC para la vulnerabilidad de inyección de comandos CVE-2023-42326 en pfSense 2.7.0. La vulnerabilidad permite a atacantes autenticados inyectar y ejecutar comandos arbitrarios a través d...

CVE-2026-75600

FreePBX, an open-source IP PBX, is vulnerable to Host Command Injection in versions prior to 17.0.9 . The vulnerability exists in the GraphQL api module's documentation generator , which accepts an authenticated host parameter and incorporates it into a shell command without proper validation or ...

CVE-2026-75600 FreePBX: Authenticated API generatedocs Host Command Injection

FreePBX is an open source IP PBX. Prior to version 17.0.9, authenticated users who are authorized to access the GraphQL api module interface of FreePBX are able to execute arbitrary shell commands. Authenticated access to the api module is required. The PBX API module's documentation generator...

CVE-2026-54710 FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)

FreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution RCE vulnerability exists in the superfecta module due to unsafe inclusion of arbitrary PHP files, allowing authenticated attackers to execute arbitrary PHP code on the server with the privileg...

CVE-2024-46986

CVE-2024-46986 Camaleon CMS 漏洞利用 - 任意文件上传 该存储库包含一个 Python 脚本，用于自动化利用 Camaleon CMS 中的文件上传漏洞。该漏洞允许攻击者向服务器上传任意文件（如 Ruby 脚本），可能导致远程代码执行 RCE 或其他严重安全影响。 功能 文件上传利用 ：向目标服务器上传恶意 Ruby 脚本。 有效载荷选项 ：在反弹 Shell 有效载荷和命令执行有效载荷之间选择。 重复命令执行 ：对于命令执行有效载荷，脚本允许用户重复输入命令。 自动化 ：使用 Python 的 requests 库自动化整个过程。 前提条件 有效用户凭证...

EUVD-2026-88388

FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and conversion functionality that allows an authenticated attacker to perform arbitrary file writes, leading directly to remote code execution RCE. Authentication...

CVE-2022-31101

CVE-2022-31101 PrestaShop bockwishlist 模块 2.1.0 SQL注入漏洞利用 CVE-2022-31101 使用方法 python3 cve-2022-31101.py 在提示时提供愿望清单的url。例如：http://example.com/module/blockwishlist/view?idwishlist=1 在提示时提供你账户的cookies。 现在它将开始攻击该网站。 实际运行效果 注意 此利用程序假设数据库中表名的前缀为 ps。这是 PrestaShop 提供的默认前缀。...

CVE-2025-23942-poc

WP Load Gallery 漏洞利用 CVE-2025-23942 📌 描述 NgocCode WP Load Gallery 中存在危险类型文件无限制上传漏洞，允许向 Web 服务器上传 Web Shell。该漏洞影响 WP Load Gallery 版本：从 n/a 至 2.1.6。 ⚠️ 漏洞详情 CVE ID: CVE-2025-23942 受影响插件: WP Load Gallery 受影响版本: 最高 2.1.6 漏洞类型: 无限制文件上传 严重性: 严重 CVSS 9.1 攻击向量: 已验证用户 作者级+ 远程代码执行 RCE 补丁可用性: ❌ 尚无官方补丁 🚀...

CVE-2024-42327_Zabbix_SQLI

CVE-2024-42327 - Vulnerabilidad de Inyección SQL en Zabbix SQLI No es ciega ni basada en tiempo POC para CVE-2024-42327, una inyección SQL autenticada en Zabbix a través del método API user.get. Este POC no está basado en tiempo como algunos de los otros POCs que he visto por ahí. Descripción de...

EUVD-2026-88385

FreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, the FreePBX Music on Hold MoH module contains a critical security flaw that allows authenticated attackers to execute arbitrary system commands with the privileges of the Asterisk service. Authentication with an existing FreeP...

CVE-2024-46209

Redaxo Security Research CVE-2024-46209, CVE-2024-46210 Investigación de seguridad de Redaxo CMS v5.17.1 Completado el 09 de agosto de 2024 Contiene una descripción detallada de: CVE-2024-46210 - Cross-Site Scripting almacenado a través de la carga de archivos en el módulo MediaPool CVE-2024-4620...

CVE-2026-10053-lab

CVE-2026-10053 — laboratorio de verificación reproducible Laboratorio autónomo que demuestra el path traversal del registro de paquetes npm de GitLab CVE-2026-10053 y muestra que está corregido, usando un oráculo determinista en disco — no el estado HTTP. Qué se demuestra y qué no. Este laborator...