132 matches found
CVE-2026-36358
CVE-2026-36358 PoC - Juzaweb CMS v.5.0.0 （XSS） First, set up the platform normally and register an account. Here, the administrator account I registered is [email protected] / 123456. After setting up the platform, you can see the website homepage. Access /admin and log in. After logging in,...
CVE-2026-36358
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
EUVD-2026-27826
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
CVE-2026-36358
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
Juzaweb CMS 跨站脚本漏洞
Juzaweb CMS is a content management system developed by Juzaweb’s individual developers, based on the Laravel framework and web platform. Version 5.0.0 of Juzaweb CMS has a cross-site scripting vulnerability. This vulnerability stems from the Add Banner Ads feature, which contains cross-site...
CVE-2026-36358
The Juzaweb CMS v.5.0.0 , a content management system built on the Laravel framework , is vulnerable to a Cross Site Scripting (XSS) flaw in its Add Banner Ads function. This vulnerability allows a remote attacker to execute arbitrary code via a specially crafted script. While exploitation detail...
CVE-2026-36358: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
CVE-2026-36358
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
PT-2026-37629
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
📄 JuzaWeb CMS 3.4.2 Remote Code Execution
JuzaWeb CMS version 3.4.2 suffers from an authenticated remote code execution vulnerability. Exploit Title: JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution Date: 2026-01-10 Exploit Author: Sardor Shoakbarov Author GitHub: https://github.com/TheDeepOpc Vendor Homepage: https://juzaweb.com/...
JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution
Exploit Title: JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution Date: 2026-01-10 Exploit Author: Sardor Shoakbarov Author GitHub: https://github.com/TheDeepOpc Vendor Homepage: https://juzaweb.com/ Software Link: https://github.com/juzaweb/ CVE: N/A Pending import requests import argparse...
EUVD-2025-16590
Malicious code in bioql PyPI...
EUVD-2025-16586
Malicious code in bioql PyPI...
EUVD-2025-16604
Malicious code in bioql PyPI...
EUVD-2025-16602
Malicious code in bioql PyPI...
EUVD-2025-16612
Malicious code in bioql PyPI...
EUVD-2025-16589
Malicious code in bioql PyPI...
EUVD-2025-19247
Malicious code in bioql PyPI...