pywhatcms

PyWhatCMS Paquete Python para la API de whatcms.com El paquete proporciona una forma sencilla de usar la API de whatcms.org para detectar 467 sistemas de gestión de contenido CMS diferentes Instalación root@kitploit: pip install pywhatcms Uso Primero, importa pywhatcms: root@kitploit: from...

CMS_Detector

CMSDetector Python2 Donación : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...

cve-2023-41564-research

Sintesi della vulnerabilità CVE-2023-41564 CVE-2023-415641 è una vulnerabilità di tipo XSS persistente presente nel CMS Cockpit = v2.6.3. Caricando un file HTML con estensione .shtml durante l'upload, JavaScript viene eseguito nel momento in cui si apre il file caricato. 1:...

CVE-2023-23752

CVE-2023-23752 Vulnerabilità di accesso non autorizzato in Joomla CVE-2023-23752 Descrizione della vulnerabilità Joomla è un sistema di gestione dei contenuti CMS open source scritto in PHP, che supporta diversi database come MySQL, MSSQL e PostgreSQL. A causa di una gestione inadeguata delle...

petereport

PeTeReport PeTeReport Pe nTe st Report é uma ferramenta de relatório de vulnerabilidades de aplicações de código aberto projetada para auxiliar esforços de pentest/redteam, simplificando a tarefa de escrever e gerar relatórios. Focada na segurança de produtos, a ferramenta ajuda pesquisadores de...

CMSeeK

Was ist ein CMS? Ein Content-Management-System CMS verwaltet die Erstellung und Bearbeitung digitaler Inhalte. Es unterstützt in der Regel mehrere Benutzer in einer kollaborativen Umgebung. Einige bemerkenswerte Beispiele sind: WordPress, Joomla, Drupal usw. Versionsgeschichte...

Masa CMS - Authentication Bypass

Masa CMS 7.2, 7.3, and 7.4-beta are susceptible to authentication bypass in the Remember Me function. An attacker can bypass authentication via a crafted web request and thereby obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...

PrestaHome Blog for PrestaShop <1.7.8 - SQL Injection

PrestaHome Blog for PrestaShop prior to version 1.7.8 is vulnerable to a SQL injection blind via the sbcategory parameter. id: CVE-2021-36748 info: name: PrestaHome Blog for PrestaShop 1.7.8 - SQL Injection author: whoever severity: high description: PrestaHome Blog for PrestaShop prior to versio...

Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Page content. id: CVE-2022-42095 info: name: Backdrop CMS version 1.23.0 - Cross Site Scripting Stored author: theamanrawat severity: medium description: | Backdrop CMS version 1.23.0 was...

u5cms v8.3.5 - Open Redirect

u5cms version 8.3.5 contains a URL redirection vulnerability that can cause a user's browser to be redirected to another site via /loginsave.php. id: CVE-2022-32444 info: name: u5cms v8.3.5 - Open Redirect author: 0xAkoko severity: medium description: | u5cms version 8.3.5 contains a URL...

EUVD-2026-41147

Wagtail: Improper restriction handling on Documents and Images chosen endpoints...

CVE-2026-59992

creationtimestamp| type| source ---|---|--- 2026-08-19 22:35:05+00:00| published-proof-of-concept| https://github.com/tinacms/tinacms/security/advisories/GHSA-8mq9-5fw2-5rm4...

EUVD-2026-55624

Magnolia CMS is vulnerable to Stored XSS in import functionality. An attacker with editor privileges can inject arbitrary HTML and JS into the name of uploaded image, which will be rendered/executed when opening uploaded image. The issue was fixed in version 6.3.10...

CVE-2026-19357

MingSoft MCMS

EUVD-2026-54577

Kirby is an open-source content management system. Prior to 4.9.5 and from 5.0.0 through 5.5.1, the REST API error handler can return unsanitized PHP error messages that expose the full filesystem path of the Kirby installation to unauthenticated API users. This vulnerability affects all Kirby...

CVE-2026-71435

Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.3 and 6.24.2, the default "automagic" form notification email rendered user-submitted values without escaping, allowing an unauthenticated form submitter to inject HTML into the notification emails sent to the...

Exposure of Resource to Wrong Sphere

Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere via the elementId parameter, which allows interpolation of environment variables and secrets into a Twig template even when the Twig sandbox is enabled. A...

GHSA-XXPX-F366-4XPQ Craft CMS:Authorization bypass: view-only Categories user can modify category structure via structures/move-element

A control-panel user who holds only the viewCategories permission for a category group and not saveCategories can permanently modify that group's category structure — reordering and re-parenting categories via the structures/move-element action. A read-time authorization grant that a write endpoi...

EUVD-2026-41804

Craft CMS: Missing authorization check allows non-admin control panel users to reorder Global Sets...

GHSA-265M-7826-WJQM Craft CMS: Authenticated RCE via `condition.config` JSON cleanse bypass

Craft CMS has an authenticated remote code execution issue in the control panel element-search condition handling. Craft cleans the outer request-controlled condition array with Component::cleanseConfig, but Conditions::createCondition later decodes and merges the JSON string in condition.config...