EUVD-2026-91453

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by supplying a syndication action through the render handler's content parameter. Attackers can target internal hosts and ports, read bac...

CVE-2026-104442 YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by supplying a syndication action through the render handler's content parameter. Attackers can target internal hosts and ports, read bac...

CVE-2026-104442

YesWiki versions prior to 4.6.7 are vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) . The root cause is the lack of input validation in the render handler's content parameter , which allows remote attackers to supply a syndication action . This enables the server to fetch arbi...

CVE-2026-104442 YesWiki before 4.6.7 Unauthenticated SSRF via syndication Action

YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by supplying a syndication action through the render handler's content parameter. Attackers can target internal hosts and ports, read bac...

CVE-2024-25600-WordPress-Bricks-Builder-RCE-PoC

CVE-2024-25600 — WordPress Bricks Builder RCE PoC 인증되지 않은 원격 코드 실행 취약점이 WordPress Bricks Builder id uid=33www-data gid=33www-data groups=33www-data 참고 자료 CVE-2024-25600 Bricks Builder 보안 권고 Wordfence 분석 글 크레딧 발견: Snicco / Calvin Alkan 원본 익스플로잇: K3ysTr0K3R 정리 및 단순화: Esteban Zárate...

cve-2018-7600-drupalgeddon2-lab

CVE-2018-7600 Drupalgeddon2 취약점 실습 랩 Docker로 배포된 취약한 Drupal 7.56 환경을 활용하여 CVE-2018-7600Drupalgeddon2 익스플로잇을 시연하는 교육용 실습 랩입니다. 이 프로젝트는 실제 환경과 유사한 취약점 평가 워크플로를 시뮬레이션하며, 다음을 포함합니다: 취약한 환경 구축 탐지스캐너 익스플로잇RCE 페이로드 분석 문서화 취약점 개요 CVE-2018-7600Drupalgeddon2은 Drupal CMS의 치명적인 원격 코드 실행RCE 취약점입니다. 이 문제는...

CVE-2016-2098-my-first-exploit

CVE-2016-2098-my-first-exploit このエクスプロイトは、Ruby-on-Railsにおいて、ユーザーが提供したデータに対してrenderを使用する際のリモートコード実行脆弱性です。 Python3で書かれており、requestsライブラリをインストールすることを忘れないでください。以下がコマンドです。 pip3 install requests...

CVE-2026-4060-PoC

CVE-2026-4060 — Geo Mashup ≤ 1.13.18 인증 없는 SQL 인젝션 PoC -blue 인증되지 않은 공격자가 Geo Mashup render-map 엔드포인트의 sort 파라미터를 통해 ORDER BY 절에 임의의 SQL을 주입할 수 있으며, 이를 통해 시간 기반 블라인드 방식으로 민감한 데이터베이스 정보를 추출할 수 있습니다. 목차 취약점 개요 테스트 환경 실행 방법 테스트 결과 완화 방안 탐지 공개 타임라인 참고 자료 취약점 개요 필드| 세부 정보 ---|--- CVE| CVE-2026-4060...

Grafana-cve-2025-4123

Grafana-cve-2025-4123 결과 FOFA app="Grafana" Shodan product:"Grafana Open Source" SSRF http://localhost:3000/render/public/..%252f%255COpenRedirectURL%252f%253F%252f..%252f.. 오픈 리다이렉트 /public/..%2F%5cwebsite.com%2F%3f%2F..%2F...

CLEANSTART-2026-RX76391 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the kube-state-metrics-fips package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

AlmaLinux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1789576991)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789576991 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...

Rocky Linux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1789576991)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789576991 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...

CVE-2026-75098 Product Designer App <= 1.1.3 - Unauthenticated Arbitrary File Read via 'svg' Parameter in pdapp-render-design

The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

CVE-2026-75098 Product Designer App <= 1.1.3 - Unauthenticated Arbitrary File Read via 'svg' Parameter in pdapp-render-design

The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

CVE-2026-75098

The Product Designer App plugin for WordPress (versions up to and including 1.1.3 ) is vulnerable to an unauthenticated arbitrary file read via a Directory Traversal flaw in the svg parameter. An attacker can exploit this by obtaining a nonce and token, which are publicly emitted as JavaScript gl...

Rocky Linux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1789483713)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789483713 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...

AlmaLinux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1789483713)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789483713 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...

Rocky Linux 9.6 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / osbuild-composer-tests / etc (ALMALINUX9.6:CLSA-2026:1789657645)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789657645 advisory. - Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS...

CVE-2020-8163

CVE-2020-8163 CVE-2020-8163 - Rails에서 사용자가 제공한 로컬 이름의 원격 코드 실행 Rails 5.0.1에서 사용자가 제공한 로컬 이름의 원격 코드 실행 Rails 5.0.1 이전 버전에는 render 호출의 locals 인수를 제어하는 공격자를 허용하는 취약점이 있었습니다. 이 취약점에는 CVE 식별자 CVE-2020-8163이 할당되었습니다. 영향을 받는 버전: rails 5.0.1 영향을 받지 않는 경우: 사용자가 locals의 이름을 제어할 수 없는 애플리케이션 수정된 버전: 4.2.11.2...

vBulletin_5.x-tab_panel-RCE

vBulletin5.x-tabpanel-RCE CVE-2020-17496 は、vBulletin の ajax/render/widgetphp ルートにおいて、widgetConfig パラメータを介して悪意のあるコードを注入する脆弱性です。 影響を受けるシステム vBulletin 5.5.4 5.6.2 vBulletin 5.x Widgettabbedcontainertabpanel RCE 脆弱性テストスクリプト 使用法 python vBulletin5.x-tabpanel-RCE.py user defined port python...