CVE-2022-42095

Backdrop CMS 버전 1.23.0 취약점 설명: Backdrop CMS 버전 1.23.0에서 Page 콘텐츠를 통해 저장형 크로스 사이트 스크립팅XSS 취약점이 발견되었습니다. 공격 벡터: 공격자는 "Page 콘텐츠"에 무언가를 게시하고 XSS 페이로드를 "본문" 입력란에 삽입한 후, 저장형 XSS를 악용하기 위해 원시 HTML 편집기를 선택해야 합니다. XSS 페이로드는 저장 직후 즉시 실행됩니다. 영향: http://ipaddress//backdrop/node/add/page POST...

pki-core:10.6 security update

An update is available for module.tomcatjss, module.resteasy, tomcatjss, ldapjdk, jss, module.jss, module.ldapjdk, module.pki-core, resteasy, pki-core. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

CVE-2026-26980

CVE-2026-26980 — 👻 Ghost CMS Content API를 통한 인증 없는 SQLi Ghost의 Content API에 SQL 삽입SQLi 취약점이 존재하여, 인증되지 않은 공격자가 데이터베이스의 임의 데이터를 읽을 수 있었습니다. | ---|--- CVE| CVE-2026-26980 CVSS| 9.4 치명적 영향을 받는 버전| Ghost = 3.24.0, = 6.19.0 수정된 버전| 6.19.1 공개일| 2026-02-20 발견자| Nicholas Carlini 공개 익스플로잇| vognik 유형|...

CVE-2026-26980-PoC

CVE-2026-26980 — Ghost CMS Content API 블라인드 SQL 인젝션 영향 대상: Ghost 3.24.0 – 6.19.0 수정 버전: Ghost 6.19.1 인증 필요: 없음 — Content API 키는 공개 영향: 인증 없이 전체 데이터베이스 읽기 가능 자격 증명, API 키 취약점 slug-filter-order.js는 사용자가 제공한 slug 값을 매개변수화된 바인딩 대신 원시 SQL ORDER BY 절에 직접 삽입합니다. // VULNERABLE — Ghost '$s'.join','; retur...

CVE-2022-45059-demo

CVE-2022-45059-데모 Varnish Cache 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.1.0, 7.1.1 및 7.2.0 릴리스에는 공격자가 content-length 헤더를 hop-by-hop으로 만들도록 요청할 수 있는 요청 스몰글링 취약점이 있습니다. 이 데모는 취약한 버전의 Varnish Cache 뒤에서 실행되는 Spring Boot 웹 애플리케이션으로 구성되어 있습니다. ‘피해자’가 5초마다 애플리케이션에 요청을 보내며, 목표는 그의 쿠키를 탈취하는 것입니다. 애플리케이션 실행 옵션 1 - 사...

CVE-2026-40000

CVE-2026-40000 A poc for CVE-2026-40000, a vulnerability in ZTE File Manager zte.com.cn.filer which allows to read arbitrary files from other apps as the privileges of this file manager How to: build the project or get the app from releases, install and open the poc, then input a file to open and...

CVE-2023-44766_ConcreteCMS-Stored-XSS---SEO

ConcreteCMS Stored XSS v.9.2.1 작성자: Sergio 설명: ConcreteCMS v.9.2.1의 크로스 사이트 스크립팅Cross Site Scripting 취약점으로 인해 로컬 공격자가 Page Settings의 SEO - Extra 항목에 조작된 스크립트를 삽입하여 임의 코드를 실행할 수 있습니다. 공격 벡터: "SEO"의 "Header Extra Content" 입력값 검증 부재로 인해 사용자가 웹 페이지에 접속할 때 실행되는 JavaScript 코드를 삽입할 수 있습니다. PoC: 패널에 로그인한...

CVE-2011-1571

CVE-2011-1571 요약 Apache Tomcat을 사용할 때 Liferay Portal Community EditionCE 5.x 및 6.0.6 GA 이전 6.x의 XSL Content portlet에서 명시되지 않은 취약점이 발견되었으며, 원격 공격자가 알려지지 않은 벡터를 통해 임의의 명령을 실행할 수 있습니다. CVE 상세 : https://www.cvedetails.com/cve/CVE-2011-1571/ PoC :...

CVE-2026-71892

In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bouncycastle.cms.jcajce.JceKeyTransRecipient.setKeySizeValidationtrue, never ran for a message using RFC 9709 content-encryption key derivation id-alg-cek-hkdf-sha256. The branch that should...

CVE-2026-77802: Inconsistent Interpretation of HTTP Requests

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, HTTP request smuggling is possible in the proxy request forwarding component. Requests containing multiple Content-Length headers with conflicting values are forwarded verbatim to the origin server, while...

PT-2026-106178

Name of the Vulnerable Software and Affected Versions Ghost versions 4.0.0 through 6.66.0 Description SVG images included in content imports are stored without sanitization. This allows an attacker to convince an Administrator to import a crafted file to host scripts on the site domain, which cou...

CVE-2026-102426: Improper Neutralization of Input During Web Page Generation

Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dcfilter request parameter, split on the delimiter "l-r", HTML-escaped inside the data-value attribute, and then...

PT-2026-106008

Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dc filter request parameter, split on the delimiter "l-r", HTML-escaped inside the data-value attribute, and then...

CVE-2026-102779: Missing Authorization

Joomla Extension - joomlafry.com - Unauthenticated forced execution of published automation tasks in TF Content 2.9.0 - 2.9.4 - The extension exposes the site task records.customaction without authentication, ACL, CSRF, task-trigger, content-binding, or cron-token enforcement. A Guest can supply...

PT-2026-106013

Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension unconditionally authorizes both creation and editing in its public RecordController. Its shared frontend save controller accepts the raw jform array, assigns...

PT-2026-106018

Joomla Extension - joomlafry.com - Unauthenticated forced execution of published automation tasks in TF Content 2.9.0 - 2.9.4 - The extension exposes the site task records.custom action without authentication, ACL, CSRF, task-trigger, content-binding, or cron-token enforcement. A Guest can supply...

PT-2026-106198

Name of the Vulnerable Software and Affected Versions Ghost versions 6.22.1 through 6.63.0 Description Ghost is a Node.js content management system. When using the default local storage adapter, the system fails to restrict the content type of uploaded files. This allows files uploaded by staff...

CVE-2026-105679: Improper Neutralization of Input During Web Page Generation

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

RHEL 8 : pki-core:10.6 (RHSA-2026:75573)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:75573 advisory. The Public Key Infrastructure PKI Core contains fundamental packages required by Red Hat Certificate System. Security Fixes: pki-core: Dogtag/PKI:...

RockyLinux 8 : pki-core:10.6 (RLSA-2026:75573)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:75573 advisory. pki-core: Dogtag/PKI: certprofile-import allows code execution via unsanitized profile content ExternalProcessConstraint CVE-2026-76561 Tenable has extracted the...