CVE-2018-0802

CVE-2018-0802 CVE-2018-08022: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 MITRE CVE-2018-0802: https://vulners.com/cve/CVE-2018-0802 Видео эксплуатации и исправления от 0patch: https://www.youtube.com/watch?v=XU-U4K270Z4 Пост в блоге Qihoo 360...

poc_CVE-2025-68613

PoC: n8n 샌드박스 이스케이프 CVE-2025-68613 교육 목적 전용 이 PoC는 n8n의 심각한 취약점CVE-2025-68613을 시연합니다. 소유하지 않은 시스템이나 명시적인 테스트 허가를 받지 않은 시스템에서는 사용하지 마십시오. 취약점 개요 1.122.0 이전 버전의 n8n에는 원격 코드 실행RCE 취약점이 존재합니다. 인증된 사용자는 워크플로 표현식 편집기의 특정 JavaScript 페이로드를 통해 표현식 샌드박스를 우회하고 호스트 시스템에서 임의 코드를 실행할 수 있습니다. 1. 취약한 환경 설정 데이터...

CVE-2025-51458-exp

CVE-2025-51458-exp DB-GPT --sql "SELECT VERSION" Dump tables python3 exp.py http://target:5670 --dump-tables Dump schema python3 exp.py http://target:5670 --dump-db DuckDB bypass python3 exp.py http://target:5670 --duckdb-bypass --sql "SELECT CURRENTSETTING'accessmode'" Interactive mode python3...

CVE-2026-105195

The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site...

CVE-2026-105195

The Booking Calendar WordPress plugin (versions 10.15 - 11.8.2 ) contains a vulnerability where it fails to adequately restrict which options a lower-privileged user can load through one of its settings handlers . This flaw allows users with the Editor role and above to disclose the values of arb...

EUVD-2026-94767

The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site...

CVE-2026-105195 Booking Calendar 10.15 - 11.8.2 - Editor+ Arbitrary Option Disclosure

The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site...

PT-2026-107834

The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site...

PT-2026-108199

Name of the Vulnerable Software and Affected Versions Indico versions prior to 3.3.13 Description Users with content creation privileges, such as speakers capable of creating minutes, can store crafted HTML within event minutes. When concurrent edits occur on the same minutes, the minute editor...

EUVD-2026-92769

Ghost: Editors Could Promote Staff Users to Their Own Role...

GHSA-4PVX-FWJJ-8GPC Ghost: Editors Could Promote Staff Users to Their Own Role

Impact Staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign that role. Vulnerable versions This vulnerability is present in Ghost from v0.5.0 up to v6.64.0. Patches v6.64.0 contains a fix for...

CVE-2025-64095

=== Описание === DNN ранее DotNetNuke — это система управления веб-контентом CMS с открытым исходным кодом в экосистеме Microsoft. До версии 10.1.1 поставщик редактора HTML по умолчанию позволяет неавторизованным пользователям загружать файлы, а изображения могут перезаписывать существующие файлы...

DRUPAL-CONTRIB-2026-202

This module provides a new UI experience for node editing using the Gutenberg Editor library. The module does not sufficiently check entity access in several editor endpoints. This vulnerability is mitigated by the fact that an attacker must have a role with the “use gutenberg” permission...

WordPress WP Coder plugin 4.0-4.5.1 - Editor+ RCE vulnerability

Editor+ RCE vulnerability discovered by Ayush Srivastava in WordPress Plugin WP Coder versions 4.0-4.5.1...

CVE-2026-104677

The WP Coder WordPress plugin before 4.5.2 does not restrict access to its PHP code-execution feature to administrators, gating it on a content capability that the Editor role holds by default, which allows Editor-level users to save and execute arbitrary PHP code on the server and fully compromi...

CVE-2026-97188

The String locator WordPress plugin, in versions before 2.6.8 , is vulnerable to an unauthenticated PHP Object Injection vulnerability. The root cause is the failure to restrict allowed classes during the deserialization of database row content saved via the plugin's database editor . This allows...

CVE-2026-97188 String Locator < 2.6.8 - Unauthenticated PHP Object Injection via Database Editor

The String locator WordPress plugin before 2.6.8 does not restrict the classes allowed when deserializing the content of a database row saved through its database editor, allowing unauthenticated attackers to store a serialized PHP object that is instantiated when an administrator later opens and...

CVE-2026-97188 String Locator < 2.6.8 - Unauthenticated PHP Object Injection via Database Editor

The String locator WordPress plugin before 2.6.8 does not restrict the classes allowed when deserializing the content of a database row saved through its database editor, allowing unauthenticated attackers to store a serialized PHP object that is instantiated when an administrator later opens and...

EUVD-2026-94184

The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...

CVE-2026-104677

The WP Coder WordPress plugin (versions 4.0-4.5.1 ) contains a vulnerability where the PHP code-execution feature is not restricted to administrators. Instead, it is gated on a content capability held by the Editor role by default. This allows users with Editor-level privileges to save and execut...