CVE-2026-104476

Backdrop CMS before 1.35.1 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve configuration export archives left on the server after transfer. Attackers can download compressed archives generated by users with configuration export permission to obta...

CVE-2026-104476: Exposure of Sensitive Information to an Unauthorized Actor

Backdrop CMS before 1.35.1 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve configuration export archives left on the server after transfer. Attackers can download compressed archives generated by users with configuration export permission to obta...

Linux Distros Unpatched Vulnerability : CVE-2026-71892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients,...

CVE-2026-71892: Incorrect Comparison

In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bouncycastle.cms.jcajce.JceKeyTransRecipient.setKeySizeValidationtrue, never ran for a message using RFC 9709 content-encryption key derivation id-alg-cek-hkdf-sha256. The branch that should...

CVE-2023-41425

CVE-2023-41425 CVE-2023-41425 XSS to RCE, Wonder CMS 3.2.0 = 3.4.2 Usage ➜ CVE-2023-41425 python3 exploit.py Enter target URL RHOST, e.g., http://example.com/loginURL: http://redacted.com/loginURL Enter your local host IP LHOST, e.g., 10.10.14.xxx: xx.xx.xx.xx Enter your local web server port...

CVE-2026-104476

Backdrop CMS versions prior to 1.35.1 are susceptible to an information disclosure vulnerability. This flaw allows unauthenticated attackers to retrieve configuration export archives that remain on the server after a transfer is completed. By downloading these compressed archives, an attacker can...

CVE-2026-104476 Backdrop CMS before 1.35.1 Information Disclosure via Configuration Export Archive

Backdrop CMS before 1.35.1 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve configuration export archives left on the server after transfer. Attackers can download compressed archives generated by users with configuration export permission to obta...

CVE-2026-104476 Backdrop CMS before 1.35.1 Information Disclosure via Configuration Export Archive

Backdrop CMS before 1.35.1 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve configuration export archives left on the server after transfer. Attackers can download compressed archives generated by users with configuration export permission to obta...

Xibo-CMS-Zip-Slip-RCE-Exploit-CVE-2023-33177

Xibo CMS Zip Slip RCE Exploit CVE-2023-33177 This exploit demonstrates a path traversal vulnerability in Xibo CMS CVE-2023-33177 that allows remote code execution through malicious layout imports. Vulnerability Details CVE/Advisory: CVE-2023-33177 Affected Versions: Xibo CMS 1.8.0 - 2.3.16 Xibo C...

CVE-2025-25967

CVE-2025-25967: Cross-Site Request Forgery CSRF DDSN Interactive cm3 Acora CMS version 10.1.1 is vulnerable to Cross-Site Request Forgery CSRF. This flaw enables attackers to trick authenticated users into performing unauthorised actions, such as account deletion or user creation, by embedding...

CVE-2020-25790

CVE-2020-25790 Typesetter CMS File Upload Vulnerability Environment Pull Method docker pull mtwf/typesettercve-2020-25790:5.1 docker run -it -d -p 80:80 mtwf/typesettercve-2020-25790:5.1 /bin/bash -c "service apache2 start;/bin/bash" Typesetter account password is admin:admin Vulnerability...

weaponised-XSS-payloads

Weaponised XSS Payloads XSS-пейлоады, созданные для превращения alert1 в P1. Статья в блоге Этот репозиторий был опубликован вместе со статьёй под названием "How to Upgrade Your XSS Bugs from Medium to Critical" https://medium.com/@hakluke/upgrade-xss-from-medium-to-critical-cb96597b6cc4 Что это...

DEVVORTEX

DEVVORTEX HackTheBox: Devvortex — разбор машины Подробное техническое руководство, описывающее компрометацию машины Devvortex на HackTheBox. Этот путь демонстрирует фаззинг поддоменов , перечисление Joomla API , модификацию шаблона для первоначального доступа, извлечение и взлом хешей базы данных...

CVE-2025-2304-Camaleon-CMS-Mass-Assignment-Privilege-Escalation-PoC

CVE-2025-2304 — Camaleon CMS Mass Assignment Privilege Escalation PoC Privilege escalation vulnerability in Camaleon CMS /updatedajax with passwordrole=admin injected into the password parameters. 4. Verifies the role has been updated to admin. Requirements Python 3 Install dependencies: python3 ...

CVE-2025-32432-PoC

CVE-2025-32432: Инструмент эксплуатации Log-Poisoning до RCE Описание Этот репозиторий содержит профессиональный proof-of-concept PoC эксплойт, написанный на Go, предназначенный для демонстрации критической цепочки уязвимостей в Craft CMS. Эксплойт использует уязвимость отравления журналов log...

CVE-2026-28695-craft-rce-bypass

Обход патча CVE-2026-28695 — аутентифицированный RCE в Craft CMS ≤ 5.9.8 element-search CVSS 3.x : 8.8 HIGH приблизительно — проверьте CWE : CWE-502 Unsafe Object Instantiation + CWE-1336 SSTI origin Base : CVE-2026-28695 SSTI через create + Symfony Process Fix : исправление из advisory e31e508...

CVE-2026-28695

CVE-2026-28695 Обход патча — слепая RCE в Craft CMS Аутентифицированное слепое удалённое выполнение кода в Craft CMS. Обходит ограничение create — BaseObject, добавленное в исправлении CVE-2026-28695 коммит e31e508. Использование python3 exp.py -t http://target.htb -u user -p 'password' -c 'busyb...

CVE-2026-63573

Observable discrepancy in the CMS RSA PKCS1 v1.5 key-transport unwrap KeyTransRecipientInformation.UnwrapKey in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who holds a captured CMS EnvelopedData message, and who can submit many modified messages to an...

CVE-2018-16763

CVE-2018-16763 Analyzer CVE-2018-16763 Analyzer is a small Python project for analyzing CVE-2018-16763 against FUEL CMS targets. It focuses on checking whether a target appears vulnerable and on displaying command output in a cleaner, more readable way when the application response is noisy. This...

CVE-2026-63578

The bc-csharp library (versions before 2.7.0 ) by Legion of the Bouncy Castle Inc. is vulnerable to a denial of service via CPU exhaustion in the PbeUtilities.GenerateCipherParameters function. This is caused by the allocation of resources without limits during password-based private-key decrypti...