CMS-Made-Simple-2.2.9-CVE-2019-9053

Disclaimer This repository provides a Python 3 compatible exploit targeting an unauthenticated SQL injection vulnerability in CMS Made Simple versions 2.2.9 and earlier. The flaw, tracked as CVE-2019-9053, allows attackers to extract sensitive administrator data, including username, hashed...

CVE-2025-63314

CVE-2025-63314 - Acora CMS 中密码重置令牌处理不当漏洞 由印度 Crowe 的 Joby Y Daniel 发现 📌 概述 DDSN Interactive cm3 Acora CMS 版本 10.7.1 在其密码重置功能中存在安全漏洞。 该应用程序使用了一个静态且持久的密码重置令牌，该令牌在使用后不会被失效，且不会随时间过期。 此缺陷允许获取有效重置令牌的攻击者无限期重复使用该令牌，从而导致账户接管 ，包括特权用户账户 。 🛠 受影响产品 产品名称： cm3 Acora CMS 供应商： DDSN Interactive 受影响版本： 10.7.1 组件：...

Exfiltrated-Machine-Walkthrough---Subrion-CMS-CVE-2021-2220-

Exfiltrated 机器演练 - Subrion CMS-CVE-2021-2220- 请参阅 Exfiltrated.pdf 实验室: https://portal.offsec.com/machine/exfiltrated-17398/overview/details 实验室名称: Exfiltrated 旗标: 2...

CVE-2019-9053-POC

CMS Made Simple ⚠️ Disclaimer: This script is for educational and authorized testing purposes only. Do not use it on systems you do not own or have explicit permission to test. The author and contributors are not responsible for any misuse or damage caused by this tool. 🎯 What is this? This is a...

CVE-2025-60574

漏洞发现者与漏洞利用作者 Stefano Andreatta & Jacopo Candido Augelli CVE-2025-60574 漏洞描述 已在 tQuadra CMS 4.2.1117 中发现一个本地文件包含（LFI）漏洞。该问题存在于 "/styles/" 路径中，该路径未能正确清理用户提供的输入。攻击者可以通过发送精心构造的 GET 请求，从底层系统中检索任意文件。 发现者：Stefano Andreatta & Jacopo Candido Augelli CVSS 3.1 - 7.5 高危 root@kitploit:...

CVE-2025-63589

CVE-2025-63589 Reflected XSS in CMSimpleXH index.php path handling Discovered: October 6, 2025 Products: CMSimpleXH open-source flat-file CMS Affected versions: 1.8 CVEs: CVE-2025-63589 Authentication required: None unauthenticated Attack type: Reflected Cross-Site Scripting XSS Estimated CVSS...

Audit-BlackBox-Web-to-Root

Pentest Lab : Web および システム の エクスプロイト チェーン Drupal から Root へ 免責事項 このプロジェクトは、教育および学術目的のために、管理され隔離されたラボ環境 で実施されました。実際のインフラストラクチャは標的にされていません。目的は、攻撃メカニズムを理解することでシステムのセキュリティを強化する方法を学ぶことです。 作業環境と目的 シナリオ このプロジェクトの目的は、ブラックボックス監査 を実施することです。これは、対象に関する事前知識なしに分析を開始することを意味します。つまり、識別子、技術文書、ソースコードは一切提供されていません。...

CVE-2025-57520-Stored-XSS-in-Decap-CMS-3.8.3-

CVE-2025-57520 – XSS almacenado en Decap CMS Pasos...

CVE-2019-9053

CVE-2019-9053 CMS Made Simple 仅供教育和授权安全测试使用。...

CVE-2026-82396

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, src/Sulu/Bundle/MediaBundle/Controller/MediaStreamController.php allows the /media/id/download/slug route and its administration variant to honor the inline query parameter for...

CVE-2026-82395

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, the media move endpoint derives its permission check from the client-supplied collection value instead of the media item's actual source collection, and...

CVE-2026-82394

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, the preview-link endpoint and src/Sulu/Bundle/PreviewBundle/Application/Manager/PreviewLinkManager.php do not enforce VIEW permission for the target resource in...

CVE-2026-82396 Sulu: Stored XSS via media download inline-disposition override

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, src/Sulu/Bundle/MediaBundle/Controller/MediaStreamController.php allows the /media/id/download/slug route and its administration variant to honor the inline query parameter for...

CVE-2026-82395 Sulu: Media move/update authorization bypass (IDOR)

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, the media move endpoint derives its permission check from the client-supplied collection value instead of the media item's actual source collection, and...

CVE-2026-82394

Sulu , an open-source PHP CMS built on Symfony , contains an authorization bypass in its preview-link functionality. Prior to versions 2.6.25 and 3.0.8 , the methods PreviewLinkManager::generate() and PreviewLinkManager::revoke() fail to enforce the VIEW permission on the target resource. An auth...

CVE-2026-75594

Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler in src/Cms/Media.php allowed Kirby\Cms\Media::thumb to append a path-bearing filename to a validated parent media directory. On nginx, PHP's built-in server, or Apache...

CVE-2026-75592

Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler used incomplete filesystem containment checks in src/Filesystem/Dir.php and src/Filesystem/F.php through Kirby\Filesystem\Dir::realpath and Kirby\Filesystem\F::realpat...

EUVD-2026-68813

Kirby is an open-source content management system. Prior to 4.9.5 and 5.5.2, depending on the release line, Kirby's media handler in src/Cms/Media.php allowed Kirby\Cms\Media::thumb to append a path-bearing filename to a validated parent media directory. On nginx, PHP's built-in server, or Apache...

CVE-2026-75594

Kirby , an open-source CMS, is affected by a path traversal vulnerability in its media handler (src/Cms/Media.php, Kirby\Cms\Media::thumb()) and the file::version path (src/Filesystem/Asset.php). On nginx, PHP's built-in server, or Apache with AllowEncodedSlashes enabled, a remote unauthenticated...

CVE-2026-75592

Kirby (open-source CMS) contained an incomplete filesystem containment flaw in its media handler prior to 4.9.5 and 5.5.2 . The Dir::realpath() and F::realpath() functions accepted a sibling directory sharing the intended root's string prefix (e.g., /var/www/site2 next to /var/www/site) without e...