6776 matches found
CVE-2026-13200
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to, and including, 2.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2026-13191
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2026-13200 Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order' Parameter
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to, and including, 2.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2026-13200
The Create plugin for WordPress (by Mediavine) is vulnerable to generic SQL injection via the 'order' parameter in all versions up to and including 2.5.3 . The root cause is insufficient escaping and inadequate preparation of the SQL query. The vulnerable code path in the advanced-filter branch i...
EUVD-2026-83551
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to, and including, 2.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
EUVD-2026-83543
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2026-13191
The Create plugin for WordPress (by MediaVine ) is affected by a generic SQL injection in the order_by parameter, present in all versions up to and including 2.5.3 . The root cause is insufficient escaping of the user-supplied parameter combined with lack of proper preparation of the existing SQL...
CVE-2026-13191 Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order_by' Parameter
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2025-55182
이것은 create-next-app으로 부트스트랩된 Next.js 프로젝트입니다. 시작하기 먼저, 개발 서버를 실행하세요: root@kitploit: npm run dev or yarn dev or pnpm dev or bun dev http://localhost:3000을 브라우저로 열어 결과를 확인하세요. 페이지를 수정하려면 app/page.tsx를 편집하세요. 파일을 편집하면 페이지가 자동으로 업데이트됩니다. 이 프로젝트는 Vercel의 새로운 폰트 패밀리인 Geist를 자동으로 최적화하고 로드하기 위해 next/font...
CVE-2026-81669
IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...
EUVD-2026-83307
IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...
CVE-2026-81669 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...
CVE-2026-81669
IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input , achieving command execution with root privileges . The CVSS 3.1 score is 7....
CVE-2026-81669 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...
CVE-2026-14802
CVE-2026-14802 脆弱なソフトウェア名と影響を受けるバージョン create-react-app 5.0.2 より前のバージョン 説明 macOS 上では、react-dev-utils コンポーネントの openBrowser.js ファイル内の startBrowserProcess 関数が OS コマンドインジェクションを許容します。この問題により、指定された関数を操作することでリモートから悪用される可能性があります。 推奨事項 暫定的な回避策として、パッチが利用可能になるまで startBrowserProcess 関数の使用を制限してください。...
test-cve-2025-29927
이것은 create-next-app으로 시작된 Next.js 프로젝트입니다. 시작하기 먼저, 개발 서버를 실행하세요: root@kitploit: npm run dev or yarn dev or pnpm dev or bun dev 브라우저에서 http://localhost:3000을 열어 결과를 확인하세요. app/page.tsx 파일을 수정하여 페이지 편집을 시작할 수 있습니다. 파일을 수정하면 페이지가 자동으로 업데이트됩니다. 이 프로젝트는 next/font를 사용하여 Vercel의 새로운 폰트 패밀리인 Geist를 자동으로...
rrdtool: rrdtool: Stack buffer overflow allows local code execution or denial of service
A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary...
CVE-2026-31431-mitigation-suite
AFALG 防御フレームワーク Linux AFALG（アドレスファミリ・アルゴリズム、ファミリ 38）サブシステム向けのカーネルランタイム防御フレームワークです。ゼロトラストをネットワーク境界で止めるのではなく、カーネル 内部 まで拡張する必要があるエンタープライズLinuxフリートを運用するセキュリティオペレーションセンター（SOC）向けに構築されています。 AFALGがSOCにとって重要な理由 AFALG は、ソケットインターフェース（socketAFALG, SOCKSEQPACKET, 0）を通じてカーネル暗号APIをユーザースペースに公開します。これは元々 /dev/cryp...
CVE-2026-7482-PoC
CVE-2026-7482: Ollama ヒープ領域外読み取り（1-Day PoC） このリポジトリには、CVE-2026-7482 （Ollama の GGUF モデルローダー（0.17.1 より前のバージョン）における認証不要の領域外（OOB）読み取り脆弱性）に対する 1-Day Proof of Concept（PoC）エクスプロイトチェーンが含まれています。 注記: これは 1-Day リサーチによる再現です。私は元の CVE を発見したわけではありません。この PoC...
next-rep-CVE-2026-4800
これは create-next-app でブートストラップされた Next.js プロジェクトです。 はじめに まず、開発サーバーを実行します: root@kitploit: npm run dev または yarn dev または pnpm dev または bun dev ブラウザで http://localhost:3000 を開くと結果を確認できます。 app/page.tsx を編集することでページの編集を開始できます。ファイルを編集すると、ページは自動的に更新されます。 このプロジェクトは next/font を使用して、Vercel 用の新しいフォントファミリーである Gei...