CVE-2026-104465

Versions of YesWiki prior to 4.6.7 are vulnerable to a reflected cross-site scripting (XSS) vulnerability. The flaw exists in the mail handler due to improper sanitization of the field parameter . Unauthenticated attackers can craft malicious links where a crafted field value breaks out of the aj...

EUVD-2026-91476

YesWiki before 4.6.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the field parameter of the mail handler. Attackers can craft links whose field value breaks out of the ajax-mail-form action attribute to execute JavaScript in...

0-click-RCE-Exploit-for-CVE-2024-50526

CVE-2024-50526 / 0-Click RCEエクスプロイト 著者: Joshua Provoste https://x.com/JoshuaProvoste/status/1859403137435459727 このリポジトリには、CVE-2024-50526の概念実証エクスプロイトが含まれています。これは、Multi Purpose Mail Form WordPressプラグインにおける認証不要の任意ファイルアップロード脆弱性であり、リモートコマンド実行RCEにつながります。 スクリプトの機能...

GHSA-8CR7-R8QW-GP3C baserCMS has Mail Form Acceptance Bypass via Public API

Summary A public mail submission API allows unauthenticated users to submit mail form entries even when the corresponding form is not accepting submissions. This bypasses administrative controls intended to stop form intake and enables spam or abuse via the API. Details In baserCMS, mail form...

baserCMS has Mail Form Acceptance Bypass via Public API

Summary A public mail submission API allows unauthenticated users to submit mail form entries even when the corresponding form is not accepting submissions. This bypasses administrative controls intended to stop form intake and enables spam or abuse via the API. Details In baserCMS, mail form...

CVE-2026-30878

CVE-2026-30878 affects baserCMS. Before 5.2.3, the public mail submission API allowed unauthenticated users to submit mail form entries even when the form was not accepting submissions, bypassing administrative controls and enabling spam via the API. This issue is patched in version 5.2.3 . The C...

Exploit for Unrestricted Upload of File with Dangerous Type in Lindeni Multi_Purpose_Mail_Form

CVE-2024-50526 / 0-Click RCE Exploit - Author: Joshua Provost...

EUVD-2005-0494

Malware in sbrugna...

EUVD-2024-44910

Malicious code in bioql PyPI...

EUVD-2024-44939

Malicious code in bioql PyPI...

EUVD-2022-5734

Malicious code in bioql PyPI...

EUVD-2023-2820

Malicious code in bioql PyPI...

CVE-2024-50484

Unrestricted Upload of File with Dangerous Type vulnerability in Lindeni Mahlalela Multi Purpose Mail Form multi-purpose-mail-form allows Upload a Web Shell to a Web Server.This issue affects Multi Purpose Mail Form: from n/a through = 1.0.2...

CVE-2024-50526

Unrestricted Upload of File with Dangerous Type vulnerability in Lindeni Mahlalela Multi Purpose Mail Form multi-purpose-mail-form allows Upload a Web Shell to a Web Server.This issue affects Multi Purpose Mail Form: from n/a through = 1.0.2...

CVE-2024-50526

Unrestricted Upload of File with Dangerous Type vulnerability in mahlamusa Multi Purpose Mail Form allows Upload a Web Shell to a Web Server.This issue affects Multi Purpose Mail Form: from n/a through 1.0.2...

CVE-2024-50526

Unrestricted Upload of File with Dangerous Type vulnerability in mahlamusa Multi Purpose Mail Form allows Upload a Web Shell to a Web Server.This issue affects Multi Purpose Mail Form: from n/a through 1.0.2...

CVE-2024-50526

Unrestricted Upload of File with Dangerous Type vulnerability in Lindeni Mahlalela Multi Purpose Mail Form multi-purpose-mail-form allows Upload a Web Shell to a Web Server.This issue affects Multi Purpose Mail Form: from n/a through = 1.0.2...

CVE-2024-50526 WordPress Multi Purpose Mail Form plugin <= 1.0.2 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Lindeni Mahlalela Multi Purpose Mail Form multi-purpose-mail-form allows Upload a Web Shell to a Web Server.This issue affects Multi Purpose Mail Form: from n/a through = 1.0.2...

CVE-2024-50526

CVE-2024-50526 affects the WordPress plugin Multi Purpose Mail Form (mahlamusa) versions n/a through 1.0.2, due to an unrestricted upload of dangerous file types that can lead to remote code execution. An unauthenticated, pre-authentication 0-click exploit exists (GitHub PoC) and demonstrates arb...

PT-2024-34303

Name of the Vulnerable Software and Affected Versions: Multi Purpose Mail Form versions n/a through 1.0.2 Description: The issue allows users to upload dangerous files, potentially leading to a web server compromise by uploading a web shell. This can happen due to an unrestricted upload of file...