CVE-2026-94034: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drugrecommender/Admin/changepassword of the component Password Change. Performing a manipulation of the argument txtoldpassword/txtnewpassword results in cross site...

CVE-2026-92541: Improper Privilege Management

The Import and export users and customers WordPress plugin before 2.5.2 does not enforce the promoteusers capability in its front-end import functionality, allowing users with only the createusers capability to change the role of existing users, including promoting them to administrator...

CVE-2025-70559

Pythonスクリプトのアップロードディレクトリを変更 python3 exploit.py LHOST LPORT...

CVE-2024-13513.py

사용법 기본 사용법 bash python3 exploit.py -l targets.txt -e [email protected] 고급 사용법 bash python3 exploit.py -l targets.txt -e [email protected] -t 100 -o /path/to/results 매개변수 설명 매개변수| 설명| 필수| 기본값 ---|---|---|--- -l, --list| 대상 URL이 포함된 파일 경로| ✅ 예| - -e, --email| 비밀번호 재설정을 위한 이메일 주소| ✅ 예| - -...

CVE-2021-40101

설문조사 XSS와 CSRF 결합으로 Concrete5 8.5.4에서 관리자 계정 탈취 발생 9 미만 버전의 Concrete CMS 관리자는 다른 사용자의 비밀번호를 변경할 때 자신의 비밀번호를 제공할 필요가 없었습니다. CVE-2021-28145 "Concrete CMS 이전 concrete5 8.5.5 이전 버전에서는 원격 인증 사용자가 조작된 설문조사 블록을 통해 XSS 공격을 수행할 수 있습니다. 이를 위해서는 최소한 편집자 권한이 필요합니다": 수정 사항은 버전 8.5.5에 포함되었습니다.와 결합하여 낮은 권한의 사용자...

CVE-2020-24029

CVE-2020-24029 説明 ForLogic Qualiex v1 および v3 では、認証されていないパスワード変更が可能であるため、単純なリクエストによって顧客および管理者の権限とデータにアクセスできます。 重要日付 ベンダーへの通知: 2020-07-12 公開日: 2020-08-31 脆弱性タイプ 不正確なアクセス制御 製品ベンダー ForLogic 影響を受ける製品コードベース Qualiex - v1 Qualiex - v3 他のバージョンも影響を受ける可能性があります（特に同じファミリーのもの。未テスト） 影響を受けるコンポーネント Qualiex 攻撃タイプ...

CVE-2025-22963

概要 Teedy バージョン = v1.11 にはクロスサイトリクエストフォージェリCSRFの脆弱性が存在し、リモートの攻撃者が、現在認証されている Web アプリケーション上でエンドユーザーにユーザー情報ユーザー名、パスワードなどの変更を強制することが可能です。...

CVE-2025-4796

CVE-2025-4796 Eventin メールアドレスが攻撃者制御のアドレスに変更されると、標準のWordPressパスワードリセットフローを使用してアカウントを乗っ取ることができます。 🧰 スクリプト PoC Filename: CVE-2025-4796.py このスクリプトは以下の手順を自動化します： 1. 提供された認証情報を使用して対象のWordPressサイトにログインします。 2. 必要なX-WP-Nonceを抽出します。 3. PUTリクエストを/wp-json/eventin/v2/speakers/に送信してスピーカーのメールを更新します。 4...

CVE-2026-92435

The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting user holds the required capability in the permission callback for several of its REST API routes, allowing unauthenticated users to reach administrator-oriented endpoints and trigger a persistent state...

CVE-2026-92435 Mailchimp for WooCommerce < 6.1.1 - Unauthenticated Broken Access Control in REST API

The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting user holds the required capability in the permission callback for several of its REST API routes, allowing unauthenticated users to reach administrator-oriented endpoints and trigger a persistent state...

EUVD-2026-83517

The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting user holds the required capability in the permission callback for several of its REST API routes, allowing unauthenticated users to reach administrator-oriented endpoints and trigger a persistent state...

CVE-2026-92435

The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting user holds the required capability in the permission callback for several of its REST API routes, allowing unauthenticated users to reach administrator-oriented endpoints and trigger a persistent state...

CVE-2026-92435 Mailchimp for WooCommerce < 6.1.1 - Unauthenticated Broken Access Control in REST API

The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting user holds the required capability in the permission callback for several of its REST API routes, allowing unauthenticated users to reach administrator-oriented endpoints and trigger a persistent state...

CVE-2026-92435: Missing Authorization

The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting user holds the required capability in the permission callback for several of its REST API routes, allowing unauthenticated users to reach administrator-oriented endpoints and trigger a persistent state...

CVE-2026-80441

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker could inject malicious SQL that is subsequently processed by the application, potentially resulting...

CVE-2026-80441 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker could inject malicious SQL that is subsequently processed by the application, potentially resulting...

CVE-2026-80441 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker could inject malicious SQL that is subsequently processed by the application, potentially resulting...

CVE-2026-80441

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker can inject malicious SQL that is subsequently processed by the application, potentially compromising the confiden...

EUVD-2026-83301

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker could inject malicious SQL that is subsequently processed by the application, potentially resulting...

CVE-2026-91202

CVE-2026-91202 affects cockpit-files , a component of the Cockpit web-based server management suite. A low-privileged local user can exploit a symlink-following flaw in the privileged "Paste as owner" function by crafting a directory containing a symbolic link. This allows arbitrary file ownershi...