562340 matches found
CVE-2026-107639 ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload Filename
ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image filenames. Attackers can embed tab-separated options, which escapeshellcmd does no...
CVE-2026-107639 ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload Filename
ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image filenames. Attackers can embed tab-separated options, which escapeshellcmd does no...
CVE-2026-107639
The ILIAS learning management system versions before 9.24 , 10.x before 10.12 , and 11.x before 11.5 are vulnerable to an argument injection vulnerability in the assImagemapQuestionGUI component. The root cause is that escapeshellcmd() fails to neutralize tab-separated options embedded within upl...
EUVD-2026-95026
ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image filenames. Attackers can embed tab-separated options, which escapeshellcmd does no...
EUVD-2026-95018
EspoCRM before 10.0.6 contains a stored HTML injection vulnerability that allows unauthenticated attackers to inject HTML by submitting crafted Lead Capture public form data. The request body is stored in LeadCaptureLogRecord.data and rendered unescaped when administrators view the log record,...
CVE-2026-105831
EspoCRM versions before 10.0.6 are vulnerable to an unauthenticated stored HTML injection vulnerability. An attacker can submit crafted data via a Lead Capture public form , which is stored in LeadCaptureLogRecord.data . When an administrator views the log record, the request body is rendered une...
CVE-2026-105831 EspoCRM before 10.0.6 Unauthenticated Stored HTML Injection via Lead Capture Form
EspoCRM before 10.0.6 contains a stored HTML injection vulnerability that allows unauthenticated attackers to inject HTML by submitting crafted Lead Capture public form data. The request body is stored in LeadCaptureLogRecord.data and rendered unescaped when administrators view the log record,...
CVE-2026-105831 EspoCRM before 10.0.6 Unauthenticated Stored HTML Injection via Lead Capture Form
EspoCRM before 10.0.6 contains a stored HTML injection vulnerability that allows unauthenticated attackers to inject HTML by submitting crafted Lead Capture public form data. The request body is stored in LeadCaptureLogRecord.data and rendered unescaped when administrators view the log record,...
CVE-2026-105404
Removed by vendor...
CVE-2026-105404
The ImageMagick software is vulnerable to a code injection flaw in its PostScript coders prior to versions 6.9.13-56 and 7.x before 7.1.2-31 . The root cause is the failure to properly sanitize, escape, or trim values written to output files. A remote attacker can supply crafted input values to e...
CVE-2026-105404
...
EUVD-2026-95008
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code injection vulnerability in its PostScript coders, because some values are not properly escaped or trimmed when written to output. Attackers can supply crafted values that embed arbitrary PostScript code into files generated by...
poc_cve-2026-42208
CVE-2026-42208 — حقن SQL قبل المصادقة في LiteLLM بيئة مختبرية لإعادة إنتاج وكشف CVE-2026-42208 ، وهي ثغرة حرجة لحقن SQL قبل المصادقة في LiteLLM حيث تصل رموز Bearer غير المنقحة إلى استعلام PostgreSQL خام. نظرة عامة على الثغرة الحقل| التفاصيل ---|--- معرف CVE| CVE-2026-42208 GHSA| GHSA-r75f-5x8p-qv...
CVE-2024-20931
CVE-2024-20931 The Poc for CVE-2024-20931 Vulnerability Analysis A New Attack Surface for JNDI Injection - CVE-2024-20931 Analysis...
CVE-2024-53900
CTF Challenge - Mongoose RCE CVE-2024-53900 Challenge Overview This Capture The Flag CTF challenge is based on CVE-2024-53900, a vulnerability in Mongoose that allows Remote Code Execution RCE due to improper use of the $where operator in MongoDB queries. Your objective is to exploit this...
CVE-2021-21110
CVE-2021-21110 CVE-2021-21110 : Tiki Wiki CMS GroupWare Serverside Template Injection Remote Code Execution Exploit...
mountain_goat
Hi, I'm a mountain goat and I'm going to ram your TCP connections, because that's a pretty goat thing to do. This is a PoC demonstrating techniques exploiting CVE-2016-5696 Off-Path TCP Exploits: Global Rate Limit Considered Dangerous by Yue Cao, Zhiyun Qian, Zhongjie Wang, Tuan Dao, Srikanth V...
CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection
README.md CVE-2025-60787 Detection: motionEye RCE via Config Injection Unauthenticated Remote Code Execution in motionEye Still Images - Image File Name Example PoC payload: $touch /tmp/test.%Y-%m-%d-%H-%M-%S When motion restarts, the shell command executes and creates /tmp/test. Detection Covera...