534069 matches found
EUVD-2026-83369
Cotonti 1.0.0 passes the base64-decoded cb parameter to unserialize without allowedclasses restriction in the comments plugin EditAction. Registered users with comment write permissions can instantiate arbitrary PHP objects and potentially achieve file write or code execution through gadget chain...
CVE-2026-93872 Cotonti 1.0.0 PHP Object Injection via Comments Plugin Edit Action cb Parameter
Cotonti 1.0.0 passes the base64-decoded cb parameter to unserialize without allowedclasses restriction in the comments plugin EditAction. Registered users with comment write permissions can instantiate arbitrary PHP objects and potentially achieve file write or code execution through gadget chain...
CVE-2026-93872 Cotonti 1.0.0 PHP Object Injection via Comments Plugin Edit Action cb Parameter
Cotonti 1.0.0 passes the base64-decoded cb parameter to unserialize without allowedclasses restriction in the comments plugin EditAction. Registered users with comment write permissions can instantiate arbitrary PHP objects and potentially achieve file write or code execution through gadget chain...
CVE-2026-84108 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation...
EUVD-2026-83359
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation...
CVE-2026-84108
IBM Guardium Data Protection 12.2 is vulnerable to remote code execution caused by improper neutralization of input during web page generation. A remote attacker with no privileges and no user interaction could exploit this via the network, though with high attack complexity. The assigned CVSS 3....
CVE-2026-84106 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...
CVE-2026-84106
IBM Guardium Data Protection 12.2 is affected by a vulnerability that could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation . The CVSS v3.1 score is 8.9 (HIGH) , with a changed scope and high impact on both confide...
EUVD-2026-83440
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory...
CVE-2016-2555
CVE-2016-2555 Exploit Este exploit se dirige a una vulnerabilidad de inyección SQL y a una vulnerabilidad de debilidad en la autenticación en ATutor 2.2.1. Al explotar estas vulnerabilidades, el atacante puede subir código malicioso para lograr ejecución remota de código RCE en el servidor...
CVE-2026-84074 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...
CVE-2026-84074
IBM Guardium Data Protection 12.2 is vulnerable to cross-site scripting (CWE-79) due to improper neutralization of input during web page generation. A remote authenticated attacker with low privileges can exploit this to execute arbitrary code, with changed scope (cross-origin impact) and high im...
CVE-2026-84070
IBM Guardium Data Protection 12.2 is vulnerable to arbitrary code execution caused by improper neutralization of input during web page generation. A remote authenticated attacker with low privileges and required user interaction can exploit this flaw, resulting in high impact on confidentiality a...
Prototype Pollution
Overview Affected versions of this package are vulnerable to Prototype Pollution via mergeObject, which fails to validate keys before writing them to target objects. An attacker can supply a malicious source object containing a proto key in a merge operation, injecting attacker-controlled...
CVE-2022-2185
CVE-2022-2185 wo ee cve-2022-2185 gitlab 认证 rce 阅读：https://starlabs.sg/blog/2022/07-gitlab-project-import-rce-analysis-cve-2022-2185/ 使用方法 首先启动一个 GitLab 实例。登录后，创建一个具有唯一名称的组和项目。创建一个访问令牌。 编辑 main.go 中的以下行并编译： root@kitploit: const importProjectName = "projectwtf" const runCmd = "/bin/sleep inf" cons...
CVE-2026-93031 WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box <= 3.8.3 - Authenticated (Subscriber+) Arbitrary File Upload via Media Import
The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable to Arbitrary File Upload in all versions from 2.0 up to, and including, 3.8.3 via the downloadfiletouploads function. This is due to the import action being registered for...
CVE-2026-93031
CVE-2026-93031 affects four WordPress plugins from WP Cloud Plugins — Use-your-Drive , Out-of-the-Box , Share-one-Drive , and Lets-Box — in versions 2.0 through 3.8.3 . The vulnerability is an Authenticated (Subscriber+) Arbitrary File Upload via the download_file_to_uploads function. Three combi...
CVE-2026-93031 WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box <= 3.8.3 - Authenticated (Subscriber+) Arbitrary File Upload via Media Import
The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable to Arbitrary File Upload in all versions from 2.0 up to, and including, 3.8.3 via the downloadfiletouploads function. This is due to the import action being registered for...
EUVD-2026-83414
The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable to Arbitrary File Upload in all versions from 2.0 up to, and including, 3.8.3 via the downloadfiletouploads function. This is due to the import action being registered for...