31388 matches found
Academy Learning Management System <5.9.1 - Cross-Site Scripting
Academy Learning Management System before 5.9.1 contains a cross-site scripting vulnerability via the Search parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...
Leantime < 2.4 - Authenticated SQL Injection
Leantime is an open source project management system. A 'userId' variable in app/domain/files/repositories/class.files.php is not parameterized. An authenticated attacker can send a carefully crafted POST request to /api/jsonrpc to exploit an SQL injection vulnerability. Confidentiality is impact...
My Calendar WordPress Plugin - Information Disclosure
My Calendar WordPress plugin = 3.7.6 contains an injection vulnerability caused by unvalidated user input passed to parsestr in mcajaxmcjsaction endpoint, letting unauthenticated attackers access or crash sites via switchtoblog, exploit requires WordPress Multisite or Single Site setup. id:...
DVHMA
DVHMA DVHMADamn Vulnerable Hybrid Mobile App는 의도적으로 취약점을 포함한 하이브리드 모바일 앱Android용입니다. 그 목적은 보안 전문가가 합법적으로 자신의 도구와 기술을 테스트하고, 개발자가 안전한 하이브리드 모바일 앱 개발의 일반적인 함정을 더 잘 이해할 수 있도록 하는 것입니다. 동기 및 범위 이 앱은 Apache Cordova 또는 SAP Kapsel과 같은 도구를 사용하여 안전한 하이브리드 앱 개발의 함정을 연구하기 위해 개발되었습니다. 현재 주요 초점은 JavaScript-Jav...
Online Event Booking and Reservation System 2.3.0 - SQL Injection
Online Event Booking and Reservation System 2.3.0 contains a SQL injection vulnerability in event-management/views. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...
WordPress JobWP Plugin <= 2.3.9 - SQL Injection
The JobWP - Job Board, Job Listing, Career Page and Recruitment Plugin plugin for WordPress is vulnerable to SQL Injection via the 'jobwpuploadresume' parameter in all versions up to, and including, 2.3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparati...
safetext
safetext 这不是 Google 官方支持的产品。 这些库采用 safe-by-construction（安全构造）方法生成 YAML 等格式，用来替代像 text/template 和 sprintf 这样不感知语法、易受注入漏洞影响的库。 示例用例 由于 text/template 不感知它生成格式的语法，因此它无法提供任何针对注入漏洞的防护。 请考虑下面这个使用 text/template 生成 YAML 的 produceConfig 函数： root@kitploit: package main import "bytes" "fmt" "text/template"...
CVE-2026-33937
This post is a research article published by EQSTLab. Referenced PoC: dinhvaren/cve-2026-33937 CVE-2026-33937 ★ CVE-2026-33937 Handlebars.js ASTインジェクション リモートコード実行 PoC ★ https://github.com/user-attachments/assets/99e383e7-e71f-4e10-8c62-f50abff8b4f5 説明 CVE-2026-33937 : Handlebars.js...
Astra Linux – Vulnerability in Twisted
Twisted is an event-based framework for internet applications. It was introduced with version 0.9.4. At that time, when the host header did not match a configured host using twisted.web.vhost.NameVirtualHost, a “NoResource” resource would be returned. This caused the Host header to be rendered...
MOVEit Transfer - SQL Injection
In Progress MOVEit Transfer before 2021.0.8 13.0.8, 2021.1.6 13.1.6, 2022.0.6 14.0.6, 2022.1.7 14.1.7, and 2023.0.3 15.0.3, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit...
CVE-2026-87572
A flaw was found in the DevTools component of Chromium. A remote attacker, after compromising the renderer process, could exploit an injection vulnerability by crafting a malicious HTML page. This could potentially lead to the execution of arbitrary code outside the sandbox, allowing the attacker...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libvirt (UTSA-2026-106765)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106765 advisory. An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attribut...
N-able N-central Static Code Injection Vulnerability
N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution...
rConfig 3.9 - SQL Injection
An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter. id: CVE-2020-10220 info: name: rConfig 3.9 - SQL Injection author: ritikchaddha,theamanrawat severity: critical description: | An issue was discovered i...
CVE-2026-45570
A flaw was found in go-git, a library used for Git operations. The component responsible for secure shell SSH communication does not correctly handle special characters in repository paths. This oversight allows a remote attacker to manipulate the command executed on the server by including a...
CVE-2026-79087
A flaw was found in Chromium. This injection vulnerability, specifically within Chrome Tabs, allows a remote attacker to potentially bypass system access restrictions. The exploitation occurs when a user interacts with a specially crafted HTML page, leading to unauthorized access within the syste...
CVE-2026-76148
CorvusSKK is affected by a code injection vulnerability that may allow an attacker to achieve arbitrary code execution on the target system. The attack vector is local, requires user interaction, and needs no prior privileges, with high impact on confidentiality, integrity, and availability (CVSS...
EUVD-2026-62952
In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security role that contains the mcinvestigationread capability could inject Search Processing Language SPL through Analyst Queue search filters, allowing for access to all relevant data and system integrity...
CVE-2026-19351
A vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28. Affected by this vulnerability is the function SelectQuery.from/SelectQuery.build in the library lib/Select.js of the component Request Parameter Handler. Performing a manipulation results in sql injection. It is...