144 matches found
CVE-2026-36358
CVE-2026-36358 PoC - Juzaweb CMS v.5.0.0 （XSS） まず、プラットフォームを通常通りセットアップし、アカウントを登録します。ここでは、登録した管理者アカウントは [email protected] / 123456 です。 プラットフォームのセットアップ後、ウェブサイトのホームページを確認できます。 /admin にアクセスしてログインします。 ログイン後、管理バックエンドのダッシュボードに入ります。 /admin/banner-ads ルートに移動し、「Add Banner」をクリックして広告作成ページに移動します。 Type...
CVE-2026-36358
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
EUVD-2026-27826
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
CVE-2026-36358
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
CVE-2026-36358
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
CVE-2026-36358
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
CVE-2026-36358: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
Juzaweb CMS 跨站脚本漏洞
Juzaweb CMS is a content management system developed by Juzaweb’s individual developers, based on the Laravel framework and web platform. Version 5.0.0 of Juzaweb CMS has a cross-site scripting vulnerability. This vulnerability stems from the Add Banner Ads feature, which contains cross-site...
PT-2026-37629
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
CVE-2026-36358
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
CVE-2026-36358
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
📄 JuzaWeb CMS 3.4.2 Remote Code Execution
JuzaWeb CMS version 3.4.2 suffers from an authenticated remote code execution vulnerability. Exploit Title: JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution Date: 2026-01-10 Exploit Author: Sardor Shoakbarov Author GitHub: https://github.com/TheDeepOpc Vendor Homepage: https://juzaweb.com/...
JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution
Exploit Title: JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution Date: 2026-01-10 Exploit Author: Sardor Shoakbarov Author GitHub: https://github.com/TheDeepOpc Vendor Homepage: https://juzaweb.com/ Software Link: https://github.com/juzaweb/ CVE: N/A Pending import requests import argparse...
EUVD-2025-16586
Malicious code in bioql PyPI...
EUVD-2025-16604
Malicious code in bioql PyPI...
EUVD-2025-16590
Malicious code in bioql PyPI...
EUVD-2025-16602
Malicious code in bioql PyPI...
EUVD-2025-19247
Malicious code in bioql PyPI...