55 matches found
0day
0day ご存じのとおり、元のリポジトリは削除されましたが、コピーは残されています。forks と stars はリセットされました。 ただしご安心ください。以前と同じレシピ、同じ味です。 このような事態が再発してこのプロジェクトが見つからなくなってもいいように、Follow しておいてください。 このリポジトリのすべての内容は学習・交流のみを目的としています。 English | 日本語 各種CMS、各種プラットフォーム、各種システム、各種ソフトウェアの脆弱性のEXP・POC。このプロジェクトは継続的に更新されます。 優れたプロジェクト一覧 1. Fastjson RCE...
TinaCMS 安全漏洞
TinaCMS is an open-source headless CMS developed by Tina for Markdown, MDX, and JSON formats. Versions of TinaCMS prior to 2.2.2 contained security vulnerabilities. These vulnerabilities stemmed from the lack of parsing symbolic link targets during the development of media routing, which could le...
CVE-2023-43875
Multiple Cross-Site Scripting XSS vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminusername and adminemail...
CVE-2022-23871
Multiple cross-site scripting XSS vulnerabilities in the component outcomesaddProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitrary web scripts or HTML via a crafted payload insterted into the name, category, description parameters...
EUVD-2014-8971
Malware in sbrugna...
EUVD-2018-9343
Malware in sbrugna...
EUVD-2008-6128
Malware in sbrugna...
EUVD-2008-2833
Malware in sbrugna...
EUVD-2012-4696
Malware in sbrugna...
EUVD-2005-4002
Malware in sbrugna...
EUVD-2014-4637
Malware in sbrugna...
EUVD-2018-10155
Malware in sbrugna...
EUVD-2018-0275
Malware in sbrugna...
EUVD-2012-5464
Malware in sbrugna...
EUVD-2011-2486
Malware in sbrugna...
EUVD-2010-1013
Malware in sbrugna...
EUVD-2006-3183
Malware in sbrugna...
CVE-2025-27802
The Episerver Content Management System CMS by Optimizely was affected by multiple Stored Cross-Site Scripting XSS vulnerabilities. This allowed an authenticated attacker to execute malicious JavaScript code in the victim's browser. RTE properties text fields, which could be used in the "Edit"...
CVE-2012-1898
Multiple cross-site scripting XSS vulnerabilities in wolfcms/admin/user/add in Wolf CMS 0.75 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 useremail, or 3 userusername parameters...