CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ

InSAT MasterSCADA BUK-TS - 未认证 RCE CVE-2026-22553 | CVSS 9.8 严重 | 漏洞利用作者 Mohammed Idrees Banyamer 📝 描述 InSAT MasterSCADA BUK-TS 在 MMadmServ Web 界面中存在一个未认证的 OS 命令注入 漏洞。该缺陷允许远程攻击者在无需任何身份认证的情况下实现完全远程代码执行（RCE） 。 受影响产品 ：InSAT MasterSCADA BUK-TS（所有版本） 漏洞类型 ：OS 命令注入（CWE-78） 严重性 ：严重（CVSS v3.1 评分：9.8）...

Blackash-CVE-2025-33073

✨ CVE-2025-33073: Windows SMB 远程代码执行漏洞 🚨 🔥 高危：经身份验证的远程代码执行 🔥 Windows SMB 客户端中的访问控制不当 CWE-284 🛡️ 核心信息一览...

EyesOfNetwork 5.1-5.3 - SQL Injection/Remote Code Execution

EyesOfNetwork 5.1 to 5.3 contains SQL injection and remote code execution vulnerabilities. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. See also CVE-2020-8655,...

Joomla! JCK Editor SQL Injection

The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter. id: CVE-2018-17254 info: name: Joomla! JCK Editor SQL Injection author: SumanKar severity: critical description: The JCK Editor component 6.4.4 for Joomla! allows SQL Injection vi...

Metabase - Unauthenticated SQL Injection

Metabase contains a sql injection caused by improper sanitization of input in the '/resetpassword' database endpoint, letting remote unauthenticated attackers gain administrator access, exploit requires no special privileges. id: CVE-2026-72898 info: name: Metabase - Unauthenticated SQL Injection...

SPIP BigUp Plugin - Remote Code Execution

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request. id: CVE-2024-8517 info: name: SPIP BigUp Plugin - Remote Code Execution...

Altenergy Power Control Software C1.2.5 - Remote Command Injection

Altenergy Power Control Software C1.2.5 is susceptible to remote command injection via shell metacharacters in the index.php/management/settimezone parameter, because of settimezone in models/managementmodel.php. An attacker can potentially obtain sensitive information, modify data, and/or execut...

Fortinet FortiNAC - Arbitrary File Write

Fortinet FortiNAC is susceptible to arbitrary file write. An external control of the file name or path can allow an attacker to execute unauthorized code or commands via specifically crafted HTTP request, thus making it possible to obtain sensitive information, modify data, and/or execute...

CVE-2026-1208

CVE-2026-1208：Friendly Functions for Welcart 中的跨站请求伪造 关键词： CVE-2026-1208, Friendly Functions for Welcart 漏洞, CSRF, 跨站请求伪造, WordPress 安全, WordPress 插件漏洞, CWE-352, Welcart 安全, 设置篡改, WordPress CVE 2026 目录 概述 漏洞详情 技术分析 攻击向量 概念验证 修复指南 CVSS 指标 参考资料 安全联系 概述 Friendly Functions for Welcart WordPress 插件 CS...

CVE-2025-12163

CVE-2025-12163：Omnipress WordPress 插件中的存储型跨站脚本漏洞 目录 概述 漏洞详情 技术分析 攻击向量 修复指南 CVSS 指标 参考资料 安全联系 概述 Omnipress WordPress 插件存储型 XSS 漏洞（CVE-2025-XXXXX） — Omnipress Gutenberg 块插件中存在一个存储型跨站脚本漏洞，允许拥有作者级权限的认证攻击者注入恶意脚本。 在 Omnipress WordPress 插件中发现了一个存储型跨站脚本（XSS）漏洞，允许拥有作者级或更高权限的认证攻击者在页面中注入任意 Web...

CVE-2026-48172---LiteSpeed-cPanel-Plugin-Version-Auditor

CVE-2026-48172 - LiteSpeed cPanel 插件漏洞审计器 本仓库包含一个本地安全合规与审计工具，用于检测受 CVE-2026-48172 影响的 LiteSpeed User-End cPanel 插件的存在漏洞的安装。 该项目的目标是帮助系统管理员和安全工程师在恶意利用发生之前识别并修复资产。 🔍 漏洞概述 CVE ID ：CVE-2026-48172 严重级别 ：9.8 严重 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 弱点 ：CWE-266（权限分配错误） 受影响组件 ：LiteSpeed User-End...

CVE-2026-30081

CVE-2026-30081 CVE-2026-30081 ha sido publicado oficialmente por MITRE. Resumen de la Vulnerabilidad...

CVE-2026-27180-MajorDoMo-unauthenticated-RCE

MajorDoMo RCE CVE-2026-27180 Unauthenticated Remote Code Execution via Update URL Poisoning in MajorDoMo CWE-494 – Download of Code Without Integrity Check Impact : Full server compromise via webshell placed in web root Authentication Required : None Patch : PR 1177 📜 Description This repository...

CVE-2021-43129

CVE-2021-43129 Vulnerabilidad en el Sistema de Gestión de Aprendizaje LMS de D2L Brightspace Tipo de vulnerabilidad: CWE-668: Exposición de un recurso a una esfera incorrecta Proveedor del producto: Desire2Learn/D2L Base de código del producto afectado: Sistema de Gestión de Aprendizaje LMS de D2...

cve-2026-25676

Investigación sobre CVE-2026-25676 Secuestro de la ruta de búsqueda de DLL en el instalador de M-Track Duo HD Descripción general Este repositorio contiene investigación inicial y una prueba de concepto relacionada con CVE-2026-25676, una vulnerabilidad de secuestro de la ruta de búsqueda de DLL...

CVE-2026-5281-Research-Toolkit

CVE-2026-5281 Research Toolkit Chrome WebGPU Use-After-Free CWE-416 This toolkit is for security research and defensive verification around CVE-2026-5281. Patched Chrome version: 146.0.7680.178 Potentially vulnerable versions: anything below 146.0.7680.178 Files cve20265281scanner.py Unified...

CVE-2025-9776

CVE-2025-9776：CatFolders WordPress 插件中的认证 SQL 注入漏洞 关键词： CVE-2025-9776, CatFolders WordPress 漏洞, SQL 注入 WordPress, 认证 SQL 注入, WordPress 安全, CSV 导入漏洞, WordPress 插件利用, CWE-89, WordPress 数据库攻击, 媒体库漏洞, WordPress CVE 2025 目录 概述 漏洞详情 技术分析 利用证明 修复指南 CVSS 指标 参考 安全联系方式 概述 在 CatFolders WordPress 插件中发现了一个经过认...

CVE-2026-73296

🚨 CVE-2026-73296 - UFO-Vuln 💥 El acceso no autenticado a Mobile MCP puede exponer los datos de la pantalla de Android y proporcionar capacidades de control remoto de la interfaz de usuario a través de ADB. ⚠️ Aviso de seguridad Este repositorio está destinado únicamente a investigación de segurida...

CVE-2026-28858

⚠️ CVE-2026-28858 — Buffer Overflow en Apple iOS/iPadOS root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ SEVERIDAD: CRÍTICA │ CVSS: 9.8 │ CWE-120 │ REMOTO ║ ╚══════════════════════════════════════════════════════════════╝ Un usuario remoto puede provocar la...

CVE-2026-82329-JFrog-Artifactory-Auth-Bypass

artifactory.py root@kitploit: ╔══════════════════════════════════════════════════════════╗ ║ artifactory · CVE-2026-82329 unauth admin takeover ║ ║ mitsec · https://x.com/ynsmroztas ║ ╚══════════════════════════════════════════════════════════╝ CVE-2026-82329 — JFrog Artifactory self-hosted...