CVE-2026-27886-check

CVE-2026-27886 취약점 평가 도구 전체 계정 탈취 체인을 수행하지 않고 Strapi 인스턴스가 CVE-2026-27886에 취약한지 안전하게 탐지합니다. Bishop Fox 블로그에서 전체 분석 글을 참조하세요. 설명 CVE-2026-27886은 Strapi 버전 4.0.0부터 5.36.1까지에서 발생하는 인증되지 않은 파라미터 정리 우회 취약점으로, 원격의 인증되지 않은 공격자가 공개 Content API를 통해 관리자 비밀정보를 유출할 수 있습니다. @strapi/utils의 쿼리 정리기는 문서화된 filters...

CVE-2021-38817-Remote-OS-Command-Injection

CVE-2021-38817-Remote-OS-Command-Injection TastyIgniter v3.0.7 Sendmail 웹 파트에서의 인증된 원격 OS 명령 주입/원격 코드 실행 CVE-2021-38817 TastyIgniter v3.0.7 레스토랑 CMS의 Sendmail 구성 메뉴에 인증된 원격 OS 명령 주입 취약점이 존재합니다. Sendmail Path 매개변수가 적절히 삭제sanitize되지 않아, 필드에 채워진 /usr/sbin/sendmail -bs 명령어에 세미콜론과 추가 OS 명령어를 추가하여 임의...

CVE-2025-59470-PostgreSQL-Command-Injection

영향받는 소프트웨어: PostgreSQL 15.7 이전의 15.x, 16.3 이전의 16.x. 취약점 유형: pgbackup 확장 프로그램의 명령 주입. 설명: pgbackup 확장 프로그램은 사용자가 제공한 매개변수를 제대로 무해화하지 못하여, 백업 운영자가 임의의 명령을 주입하고 PostgreSQL 사용자 권한으로 실행되게 할 수 있습니다...

CVE-2024-46987

CVE-2024-46987: 자동화된 경로 탐색 Path Traversal 📖 개요 이 저장소는 CVE-2024-46987 에 대한 Python 기반 개념 증명PoC을 포함합니다. 이 취약점은 특정 CMS 환경특히 Camaleon CMS 버전 2.9.0의 파일 다운로드 모듈에서 발견된 경로 탐색Path Traversal 결함입니다. 이 스크립트는 일반적인 경로 정규화를 우회하여 민감한 시스템 파일예: /etc/passwd 또는 SSH 개인 키을 자동으로 검색합니다. 🛠️ 기술적 세부 사항 취약점은 애플리케이션이 file 매개변수...

EUVD-2026-62273

The Product Shortlist WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-18474 WP Directory Kit < 1.5.6 - Unauthenticated SQL Injection via search_location and search_category

The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when a non-default search field type is configured...

CVE-2026-18474 WP Directory Kit < 1.5.6 - Unauthenticated SQL Injection via search_location and search_category

The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when a non-default search field type is configured...

PT-2026-71026

The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when a non-default search field type is configured...

CVE-2026-17044 WordPress File Upload < 5.1.8 - Unauthenticated SQL Injection via uniqueuploadid

The Iptanus File Upload WordPress plugin before 5.1.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to an SQL injection exploitable by unauthenticated users...

PT-2026-69270

Name of the Vulnerable Software and Affected Versions Iptanus File Upload versions prior to 5.1.8 Description An issue exists where the software fails to properly sanitize and escape the uniqueuploadid parameter before incorporating it into a SQL statement. This allows unauthenticated users to...

CVE-2026-16535

The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action...

CVE-2026-15381

The WP Go Maps WordPress plugin before 10.1.04 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

EUVD-2026-51428

The WP Go Maps WordPress plugin before 10.1.04 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

PT-2026-66697

The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with administrator privileges to perform SQL injection attacks...

PT-2026-56899

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.469, Coolify's app/Jobs/ApplicationDeploymentJob.php generate healthcheck commands function directly interpolated the health check host, health check method, and health check pa...

CVE-2026-34098

Guardian language-system fails to sanitize the id GET parameter before inserting it into HTML source and form action attributes in media.php lines 119, 129. An authenticated attacker can craft a URL that injects script tags executing in the victim's browser session...

PT-2026-51476

The Infility Global WordPress plugin before 2.15.19 does not properly sanitize and escape some parameters before using them in SQL statements, leading to a SQL Injection vulnerability exploitable by authenticated users with Subscriber-level access and above...

EUVD-2026-35985

The Xstore WordPress theme before 9.7.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2025-66660

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRVSOCCMDIDSRIOVCHECKTACOMPAT to cause incorrect shared memory mapping, potentially resulting in unexpected behavior...

HCL iControl 安全漏洞

HCL iControl is an IT infrastructure monitoring and automation platform developed by HCL Company in India. HCL iControl has a security vulnerability, which stems from CSV injection during the export of CSV files. Due to insufficient parameter cleaning, reflection-type cross-site scripting attacks...