CVE-2021-38817-Remote-OS-Command-Injection

CVE-2021-38817-リモートOSコマンドインジェクション TastyIgniter v3.0.7 Sendmail Webパートにおける認証済みリモートOSコマンドインジェクション/リモートコード実行 CVE-2021-38817 TastyIgniter v3.0.7 レストランCMS WebアプリケーションのSendmail設定メニューには、認証済みリモートOSコマンドインジェクションの脆弱性が存在します。Sendmail Pathパラメータは適切にサニタイズされておらず、フィールドに入力されている /usr/sbin/sendmail -bs...

CVE-2026-27886-check

CVE-2026-27886 취약점 평가 도구 전체 계정 탈취 체인을 수행하지 않고 Strapi 인스턴스가 CVE-2026-27886에 취약한지 안전하게 탐지합니다. Bishop Fox 블로그에서 전체 분석 글을 참조하세요. 설명 CVE-2026-27886은 Strapi 버전 4.0.0부터 5.36.1까지에서 발생하는 인증되지 않은 파라미터 정리 우회 취약점으로, 원격의 인증되지 않은 공격자가 공개 Content API를 통해 관리자 비밀정보를 유출할 수 있습니다. @strapi/utils의 쿼리 정리기는 문서화된 filters...

CVE-2025-59470-PostgreSQL-Command-Injection

影響を受けるソフトウェア: PostgreSQL 15.7 未満の 15.x、16.3 未満の 16.x 脆弱性タイプ: pgbackup拡張機能におけるコマンドインジェクション 説明: pgbackup拡張機能はユーザー指定のパラメータを適切にサニタイズしていないため、バックアップ操作者が任意のコマンドを注入し、PostgreSQLユーザーとして実行される可能性があります。...

CVE-2024-46987

CVE-2024-46987: 自动化路径遍历 📖 概述 此仓库包含一个基于Python的概念验证（PoC），针对CVE-2024-46987 。此漏洞是某些CMS环境（特别是Camaleon CMS 2.9.0版本）的文件下载模块中发现的路径遍历缺陷。 该脚本通过绕过标准路径规范化，自动检索敏感系统文件（如/etc/passwd或SSH私钥）。 🛠️ 技术细节 该漏洞的存在是因为应用程序接受一个file参数，并将其附加到目录字符串上，但未进行充分的清理。 此PoC使用requests.Session对象和预准备请求（Prepared Requests）...

EUVD-2026-62273

The Product Shortlist WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-18474 WP Directory Kit < 1.5.6 - Unauthenticated SQL Injection via search_location and search_category

The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when a non-default search field type is configured...

PT-2026-71026

The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when a non-default search field type is configured...

CVE-2026-16535

The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action...

EUVD-2026-51428

The WP Go Maps WordPress plugin before 10.1.04 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

CVE-2026-34098

Guardian language-system fails to sanitize the id GET parameter before inserting it into HTML source and form action attributes in media.php lines 119, 129. An authenticated attacker can craft a URL that injects script tags executing in the victim's browser session...

EUVD-2026-35985

The Xstore WordPress theme before 9.7.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2025-66660

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRVSOCCMDIDSRIOVCHECKTACOMPAT to cause incorrect shared memory mapping, potentially resulting in unexpected behavior...

HCL iControl 安全漏洞

HCL iControl is an IT infrastructure monitoring and automation platform developed by HCL Company in India. HCL iControl has a security vulnerability, which stems from CSV injection during the export of CSV files. Due to insufficient parameter cleaning, reflection-type cross-site scripting attacks...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Strapi

CVE-2026-27886 Vulnerability Assessment Tool Safely detect wh...

CVE-2026-31380 Apache OFBiz: FreeMarker SSTI via Duplicate Parameter Sanitization Bypass

Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...

CVE-2026-31380 Apache OFBiz: FreeMarker SSTI via Duplicate Parameter Sanitization Bypass

Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...

CVE-2026-31380

CVE-2026-31380 affects Apache OFBiz prior to 24.09.06, with an issue described as an Expression Language Injection due to improper neutralization of special elements. The CVE entry notes the vulnerability can be exploited over the network without authentication and with no user interaction, resul...

CVE-2026-31380 Apache OFBiz: FreeMarker SSTI via Duplicate Parameter Sanitization Bypass

Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...

CVE-2026-6381

The WP Maps WordPress plugin before 4.9.3 does not properly sanitize a parameter before using it in a file path, allowing authenticated users to perform Local File Inclusion attacks...

CVE-2026-41553

PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Remote Code Execution due to lack of "data" parameter sanitization. An unauthenticated attacker can inject the malicious JavaScript code to the parameter whose value is processed by Node.js and subsequently executed...