CVE-2023-4771

Vulnerabilità di cross-site scripting in CKEditor nell'esempio AJAX CVE-2023-4771 PoC CKEditor 4 Vulnerabilità di cross-site scripting XSS nell'esempio AJAX Questo documento descrive come eseguire una vulnerabilità XSS CVE-2023-4771 utilizzando CKEditor. Assicurati di eseguire i seguenti passaggi...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion RCE Questo repository contiene il mio codice exploit per la vulnerabilità RCE in Adobe ColdFusion 2021. Descrizione dell'exploit L'exploit invia una richiesta POST contenente una reverse shell JSP a /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm...

CVE-2023-46694

CVE-2023-46694 Descoberto por: Federico Zambito com Innovery Resumo O Vtenext 21.02 permite que um atacante autenticado faça upload de arquivos arbitrários, resultando em execução remota de código. Essa falha existe devido à falha do aplicativo em aplicar controles de autenticação adequados ao...

Drupal 7 CKEditor XSS

CKEditor 4.14.0 through 4.16.x before 4.16.1 contains a reflected cross-site scripting caused by mishandling in comments, letting remote attackers inject executable JavaScript code, exploit requires victim to view malicious content. id: CVE-2021-33829 info: name: Drupal 7 CKEditor XSS author:...

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload POC di DNN Insufficient Access Control - Image Upload permette la sovrascrittura dei contenuti del sito Sono un uomo semplice, vedo cvss:10/10 e ci vado xD Ho visto questa nuova CVE CVE-2025-64095 DNN Insufficient Access Control - Image...

CVE-2018-15961

CVE-2018-15961 Unbeschränkter Dateiupload in Adobe ColdFusion root@kitploit: POST /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm HTTP/1.1 Host: coldfusion:port User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64 AppleWebKit/537.36 KHTML, like Gecko Chrome/62.0.3202.9 Safari/537.36...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion 2018 RCE यह रिपॉजिटरी Adobe ColdFusion 2018 में RCE भेद्यता के लिए मेरे एक्सप्लॉइट कोड को शामिल करता है। एक्सप्लॉइट विवरण एक्सप्लॉइट /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm पर एक JSP रिवर्स शेल युक्त POST अनुरोध भेजता है। यदि सफल होता है, ...

CVE-2024-24816

CVE-2024-24816 CKEditor 4 XSS Questo problema è stato causato dalla mancanza di sanificazione dei dati passati alla funzione "preview". Questo problema è stato risolto in CKEditor 4 alla versione 4.24.0-lts. Versioni interessate 4.24.0-lts Avviso...

CVE-2024-37888

CVE-2024-37888 Dieses Repository dokumentiert Schwachstellendetails und Exploit für CVE-2024-37888, entdeckt und gemeldet von mir selbst. Metriken CWE-79: Unzureichende Neutralisierung von Eingaben während der Generierung von Webseiten 'Cross-Site-Scripting' CVSS: 6.1 MITTEL Schwachstellenübersic...

Malicious code in @onereach/ckeditor5-build-classic (npm)

npm/@onereach/ckeditor5-build-classic is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized a...

CLSA-2026-1782262731 TuxCare security update for ckeditor (1 CVE)

TuxCare rebuilt ckeditor to address 1 CVE. Fixed in 4.5.11-tuxcare.1...

@ckeditor/ckeditor-cloud-services-collaboration (>=23.0.0, <=29.0.0), @ckeditor/ckeditor5-real-time-collaboration (>=29.1.0, <=33.0.0) +2 more potentially affected by CVE-2026-69185 via socket.io-parser (3.4.1)

socket.io-parser NPM version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on socket.io-parser and may be impacted: - @ckeditor/ckeditor-cloud-services-collaboration =23.0.0, =29.1.0, =29.0.0, =1.5.3, =2.1.0 Source cves: CVE-2026-69185 Source...

@ckeditor/ckeditor-cloud-services-collaboration (>=23.0.0, <=29.0.0), @ckeditor/ckeditor5-real-time-collaboration (>=29.1.0, <=33.0.0) +2 more potentially affected by CVE-2026-69185 via socket.io-parser (3.4.1)

socket.io-parser NPM version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on socket.io-parser and may be impacted: - @ckeditor/ckeditor-cloud-services-collaboration =23.0.0, =29.1.0, =29.0.0, =1.5.3, =2.1.0 Source cves: CVE-2026-69185 Source...

CVE-2026-58451

Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read arbitrary files from the server filesystem by embedding traversal sequences after a CKEditor path prefix in img src URLs. Attackers can bypass the stripos prefix validatio...

DEBIAN-CVE-2026-58451

Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read arbitrary files from the server filesystem by embedding traversal sequences after a CKEditor path prefix in img src URLs. Attackers can bypass the stripos prefix validatio...

CVE-2026-58451

Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read arbitrary files from the server filesystem by embedding traversal sequences after a CKEditor path prefix in img src URLs. Attackers can bypass the stripos prefix validatio...

CVE-2026-58451

Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read arbitrary files from the server filesystem by embedding traversal sequences after a CKEditor path prefix in img src URLs. Attackers can bypass the stripos prefix validatio...

CVE-2026-58451

Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.php that allows authenticated attackers to read arbitrary files from the server filesystem by embedding traversal sequences after a CKEditor path prefix in img src URLs. Attackers can bypass the stripos prefix validatio...

PT-2026-54913

Name of the Vulnerable Software and Affected Versions Horde IMP versions prior to 7.0.1 Description A path traversal issue exists in the lib/Compose.php file. Authenticated attackers can read arbitrary files from the server filesystem by embedding traversal sequences after a CKEditor path prefix ...

CVE-2026-41524

Brave CMS is an open-source CMS. Prior to commit 6c56603, page and article body content entered through the CKEditor rich-text editor is stored verbatim in the database and subsequently rendered with Laravel Blade's unescaped output directive !! !!. Any JavaScript or HTML injected by an editor-ro...