CVE-2021-43617

CVE-2021-43617 这是对 PHP Laravel 8.70.1 - 跨站脚本（XSS）到跨站请求伪造（CSRF）漏洞的复现 描述 该漏洞利用了我们可以绕过 Laravel 图片文件上传功能，在 Web 服务器上上传任意文件的事实，从而允许我们运行任意 JavaScript 并绕过 CSRF 令牌。 复现步骤： 创建一个 Laravel 8.7. 应用程序，其中包含上传图片文件的表单 创建一个 HTML 文件 csrfbypass.html，其中包含绕过表单 CSRF 令牌的利用代码。 使用 HxD 工具在文件开头添加 FF D8 FF E0（得到...

CVE-2026-96567

The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postid' parameter in all versions up to, and including, 5.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts ...

EUVD-2026-91239

The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postid' parameter in all versions up to, and including, 5.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts ...

CVE-2023-32315-POC

CVE-2023-32315-POC CVE-2023-32315-Openfire-Bypass-Py 概述 这个代码是CVE-2023-32315 Python版本的POC，用于执行一系列操作来验证目标网站是否受 CVE-2023-32315 漏洞的影响，并尝试在受影响的网站上执行一些操作。 经过验证，cookie的csrf和jsessionid并非必要，只要有而且格式正确就行，4.0.x左右的低版本没用csrf...

CVE-2024-51567

CVE-2024-51567 漏洞利用脚本 CVE-2024-51567 是一个针对 CVE-2024-51567 的 Python 概念验证 PoC 漏洞利用脚本，该漏洞是影响 CyberPanel v2.3.6 的一个关键命令注入漏洞。该漏洞位于 upgrademysqlstatus 端点，通过绕过 CSRF 保护并在特定参数中使用 shell 元字符，可实现远程命令执行 RCE。 ⚠️ 重要免责声明...

halo-cors-csrf-CVE-2026-67921

CVE-2026-67921: Configuración incorrecta de CORS en Halo CMS + Bypass de Protección CSRF — Ataque Combinado Resumen Existe una vulnerabilidad crítica de ataque combinado en las versiones de Halo CMS hasta la 2.25.4 debido a dos configuraciones de seguridad incorrectas: 1. Configuración incorrecta...

cve-2024-51567-poc

cve-2024-51567-poc Descripción simplificada Resumen de la vulnerabilidad Identificador : CVE-2024-51567 Tipo : Inyección de comandos / Bypass de CSRF Alcance : CyberPanel versiones 2.3.6 y 2.3.7 sin parche Descripción : En el endpoint upgrademysqlstatus de CyberPanel, al eludir la protección de...

CVE-2026-64947

A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload and execute arbitrary PHP code, resulting in Remote Code Execution. This issue affects Pandora FMS: from 777 onwards...

CVE-2026-64947

The Pandora FMS software, version 777 onwards , is vulnerable to a chained CSRF bypass and unrestricted file upload vulnerability within the Plugin File Manager . This flaw allows an attacker to upload and execute arbitrary PHP code , leading to Remote Code Execution (RCE) . No specific remediati...

EUVD-2026-90596

A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload and execute arbitrary PHP code, resulting in Remote Code Execution. This issue affects Pandora FMS: from 777 onwards...

CVE-2026-64947 CSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File Manager

A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload and execute arbitrary PHP code, resulting in Remote Code Execution. This issue affects Pandora FMS: from 777 onwards...

CVE-2026-64946

The Pandora FMS monitoring platform is affected by a chained vulnerability involving CSRF and unrestricted SVG file upload within the File Manager module . This flaw allows for stored Cross-Site Scripting (XSS) , which can be leveraged to exfiltrate session cookies and perform administrator accou...

aapanel-ws-bypass

aaPanel：供应商并不总是能正确修复问题 针对 CVE-2021-37840 的不完整修复在 5 年后仍使 360 万台服务器面临 root RCE 风险 发现者： EON Security CVE： 待分配 CVSS： 8.8（高危）— AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 受影响版本： aaPanel 6.8.12 至 7.65.0（自 2021 年修复以来的所有版本） 安装基数： 超过 360 万台服务器 简介 2021 年，aaPanel（一款运行在超过 360 万台服务器上的免费托管控制面板）披露了一个跨站 WebSocket...

CVE-2018-8062

CVE-2018-8062 Comtrend AR-5387un 路由器上的持久性XSS 利用说明： 要利用此漏洞，必须登录路由器后创建一个WAN服务 点击"Advanced Setup"，"WAN Service"。点击"Add button"，然后"Next" 然后在"Enter Service Description"字段中插入payload。本次PoC使用了 接着点击四次"Next"逐步完成各个步骤，最后点击"Apply/Save" XSS的结果将在WAN服务页面上显示并触发 本漏洞利用脚本自动完成整个流程，绕过CSRF保护，并允许设置自定义XSS payload Happy...

CVE-2018-15365

Reflected XSS in Deep Discovery Inspector 3.8 我在 Deep Discovery Inspector 3.8 Service Pack 5 Build: 3.85.1165 的管理Web界面中发现了一个反射型XSS漏洞。易受攻击的脚本路径是 /php/detectiondetailfilter.php。该脚本仅可供经过身份验证的用户访问，但考虑到下面的攻击场景，这并不会降低漏洞的严重性。 以下POST请求负载会触发JavaScript代码执行：...

SolarWinds Web Help Desk < 2026.1 - Unauthenticated JNDI Injection RCE

SolarWinds Web Help Desk before version 2026.1 contains an insecure deserialization vulnerability in the jabsorb JSON-RPC library. When chained with a CSRF whitelist bypass CVE-2025-40536, remote unauthenticated attackers can exploit JNDI injection via the Apache Xalan JNDIConnectionPool class to...

CVE-2026-86066

The HR and CRM software Horilla is vulnerable to a Cross-Site Request Forgery (CSRF) flaw in versions prior to 2.0.0 . The approve_validate_attendance_request function at /attendance/approve-validate-attendance-request/ performs state-changing actions (such as updating attendance_validated and ap...

PT-2026-96694

Name of the Vulnerable Software and Affected Versions open-vsx.org affected versions not specified Description The deployment of the service returned an Access-Control-Allow-Origin header that reflected the requesting origin combined with Access-Control-Allow-Credentials: true on authenticated...

CVE-2026-82412 ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API

ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, the vulnerability-scan endpoints scripts/lua/rest/v2/add/host/toscan.lua and scripts/lua/rest/v2/exec/host/schedulevulnerabilityscan.lua accept the scanports parameter without an administrator gate and pass it...

CVE-2026-54510

Speakr is a personal, self-hosted web application designed for transcribing audio recordings. Prior to 0.8.21-alpha, the csrfexemptforapitokens beforerequest hook in src/app.py calls csrf.exemptviewfunc, permanently adding the selected view to Flask-WTF's process-global exemption set. The...