147 matches found
Read More & Accordion <= 3.5.7 - Authenticated Privilege Escalation
The Read More & Accordion expand-maker plugin for WordPress through 3.5.7 allows privilege escalation due to improper validation in the importData AJAX handler yrmimportdata action. An authenticated user with plugin access can upload a crafted JSON attachment to insert arbitrary rows into WordPre...
React-site-CVE-2025-55182
React Site - CVE-2025-55182 README: Š£ŃŠ·Š²ŠøŠ¼ŃŠ¹ Next.js ŠæŃŠ¾ŠµŠŗŃ React RSC Š»ŠµŠ½Š“ŠøŠ½Š³ ŠŃŠ¾ ŃŠµŠæŠ¾Š·ŠøŃŠ¾ŃŠøŠ¹ Ń ŠæŃŠøŠ¼ŠµŃŠ¾Š¼ Š¼Š½Š¾Š³Š¾ŃŃŃŠ°Š½ŠøŃŠ½Š¾Š³Š¾ ŠŗŠ¾ŃŠæŠ¾ŃŠ°ŃŠøŠ²Š½Š¾Š³Š¾ Š»ŠµŠ½Š“ŠøŠ½Š³Š° Š½Š° Next.js 15.0.0 + React 19.0.0. Š”Š°Š¹Ń ŠøŠ¼ŠøŃŠøŃŃŠµŃ ŃŃŃŃŠŗŃŃŃŃ Š²ŃŠ¾Š“Šµ t1.ru: Š³Š»Š°Š²Š½Š°Ń, ŠæŃŠ¾Š“ŃŠŗŃŃ, ŠŗŠµŠ¹ŃŃ, Š¼ŠµŠ“ŠøŠ°, Š¾ ŠŗŠ¾Š¼ŠæŠ°Š½ŠøŠø, ŠŗŠ¾Š½ŃŠ°ŠŗŃŃ. ŠŃŠæŠ¾Š»ŃŠ·ŃŠµŠ¼ React Server...
CVE-2026-18404
The Social Chat ā Click To Chat App Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'consentmessage' JSON Attribute in .qlwapp data-box in all versions up to, and including, 8.6.2 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-84655
Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing objects as JSON and Python through its REST API. Attackers who can control map property names can inject arbitrary fields into JSON and Python API responses, leading to a low-impact integrity issue (CVSS ...
EUVD-2026-70121
Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing objects as JSON and Python through its REST API, allowing attackers able to control map property names to inject arbitrary fields into JSON and Python API responses...
CVE-2026-82958
In Eclipse Ditto versions 1.3.0, 3.9.6, the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values e.g. header:deviceid resolved from inbound message headers into a pre-configured JSON "thing" template as raw, un-escaped...
EUVD-2026-69896
In Eclipse Ditto versions 1.3.0, 3.9.6, the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values e.g. header:deviceid resolved from inbound message headers into a pre-configured JSON "thing" template as raw, un-escaped...
CVE-2026-82958
Eclipse Ditto versions [1.3.0, 3.9.6] are affected by a JSON injection flaw in the ImplicitThingCreationMessageMapper of the connectivity service. When building a CreateThing command, placeholder values resolved from inbound message headers (e.g., MQTT 5 user properties, AMQP 1.0 application prop...
CVE-2026-82958
In Eclipse Ditto versions 1.3.0, 3.9.6, the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values e.g. header:deviceid resolved from inbound message headers into a pre-configured JSON "thing" template as raw, un-escaped...
CVE-2026-82958
In Eclipse Ditto versions 1.3.0, 3.9.6, the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values e.g. header:deviceid resolved from inbound message headers into a pre-configured JSON "thing" template as raw, un-escaped...
CVE-2026-78077
Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in MegaMenu Layout Container & Embed Inputs in Helix Ultimate 2.2.10 - Unsanitized column and item configuration values stored within the MegaMenu layout JSON were rendered without complete contextual escaping, allowing injection...
PrivateBin has reflected JSON injection in backend responses via unescaped REQUEST_URI
Vulnerability Details A reflected JSON injection allows an attacker to return arbitrary data in the JSON endpoints like /?jsonld= and /?pasteid. Root Cause Request::getRequestUri sanitizes $SERVER'REQUESTURI' with FILTERSANITIZEURL: php public function getRequestUri $uri =...
GHSA-XRJC-C68J-HP7W PrivateBin has reflected JSON injection in backend responses via unescaped REQUEST_URI
Vulnerability Details A reflected JSON injection allows an attacker to return arbitrary data in the JSON endpoints like /?jsonld= and /?pasteid. Root Cause Request::getRequestUri sanitizes $SERVER'REQUESTURI' with FILTERSANITIZEURL: php public function getRequestUri $uri =...
CVE-2026-55891
PrivateBin , a zero-knowledge PHP pastebin, is vulnerable to reflected JSON injection in its JSON-LD response paths (/?jsonld= and /?pasteid) in versions prior to 2.0.5 . The root cause is that FILTER_SANITIZE_URL does not strip quotation marks from $_SERVER['REQUEST_URI'], and the unsanitized va...
CVE-2026-55891 PrivateBin: Reflected JSON injection in backend responses via unescaped REQUEST_URI
PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, Request::getRequestUri in lib/Request.php passes $SERVER'REQUESTURI' through FILTERSANITIZEURL, which does not remove quotation marks, angle brackets, or apostrophes, and Controller::init stores t...
CVE-2026-55891 PrivateBin: Reflected JSON injection in backend responses via unescaped REQUEST_URI
PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, Request::getRequestUri in lib/Request.php passes $SERVER'REQUESTURI' through FILTERSANITIZEURL, which does not remove quotation marks, angle brackets, or apostrophes, and Controller::init stores t...
CVE-2026-72778
Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in the control panel element-search condition handling. Craft cleanses the outer request-controlled condition array via Component::cleanseConfig, but...
CVE-2026-71217 Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion
A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as parallel and len, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread...
PT-2026-70178
Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in the control panel element-search condition handling. Craft cleanses the outer request-controlled condition array via Component::cleanseConfig, but...
Apache Log4j API: Improper encoding of non-finite floating-point values during MapMessage JSON serialization
Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. This issue affects Apache Log4j API versions 2.13.1 through 2.25.4 and version 2.26.0. The fix for CVE-2026-34481 did not cover all code paths: wh...