EUVD-2026-92451

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping method, image type set, order status an...

CVE-2026-102776 Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping method, image type set, order status an...

CVE-2026-102776 Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping method, image type set, order status an...

CVE-2021-46074

CVE-2021-46074 Exploit Title: Vehicle Service Management System - 'Settings' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss...

CVE-2022-43271

CVE-2022-43271 Stored Cross-Site Scripting XSS Product: Move CRM https://inhabit.com.au/Move-Real-Estate-CRM-Software Discovery date: 2/8/2022 Fix date: 4/8/2022 Affected Version: version 4, build 260 Fixed Version: version 4, build 261 Description: The vulnerability was discovered in the 'staff...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Content Settings in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Low...

CVE-2022-28598

ERPNext - 12.29.0 Stored cross-site scripting XSS vulnerability in the "lastknownversion" field found in the "My Setting" page in ERPNext 12.29.0 allows remote attackers to inject arbitrary web script or HTML via a crafted site name by doing an authenticated POST HTTP request to...

CVE-2026-71204-PoC

CVE-2026-71204 — changedetection.io: Omitted Checkbox in /settings Save Silently Disables API Key Enforcement Product: dgtlmoon/changedetection.io — v0.55.7 Files: changedetectionio/blueprint/settings/init.py, changedetectionio/forms.py CWE: CWE-284 — Improper Access Control CVSS 3.1:...

CVE-2023-44487

CVE-2023-44487 — HTTP/2 Rapid Reset Test Lab Educational environment for LTAT.04.022 Homework 4. Four containers let you scan and compare vulnerable vs. patched configurations. Port Map Container| Port| Software| Status ---|---|---|--- nginx-vuln| 8441| nginx 1.24| Vulnerable nginx-secure| 8442|...

CVE-2023-44766_ConcreteCMS-Stored-XSS---SEO

ConcreteCMS Stored XSS v.9.2.1 Author: Sergio Description: Cross Site Scripting vulnerability in ConcreteCMS v.9.2.1 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Extra from Page Settings. Attack Vectors: Scripting A vulnerability in the sanitization of the...

PT-2026-106143

In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-106011

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping method, image type set, order status an...

CVE-2026-28648: Undefined Security Weakness

In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

chef-os-hardening

os-hardening Chef cookbook 1 2 Описание Этот cookbook предоставляет множество конфигураций, связанных с безопасностью, обеспечивая всестороннюю базовую защиту. Он настраивает: Настройка управления пакетами, например, разрешает только подписанные пакеты Удаление пакетов с известными проблемами...

CVE-2023-49984

CVE-2023-49984 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "name" field/parameter on "/management/settings" Description : A cross-site scripting XSS vulnerability in the component "/management/settings" of School Fees Management System v1.0 allows attackers to...

packages_apps_Settings_CVE-2020-0201

This repository does not have a README...

CVE-2022-35649

CVE-2022-35649 Payload Generator using Python 2 and Detailed Analysis for CVE-2022-35649 The PoC in python generates payload when exploited for a 0-day of GhostScript 9.50. This 0-day exploit affect to ImageMagick with the default settings from Ubuntu repository Tested with default settings of...

CVE-2024-2782-PoC

CVE-2024-2782-PoC CVE-2024-2782 Proof-of-Concept The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/fluentform/v1/global-settings REST A...

Packages_app_settings_CVE-2020-0201

This repository does not have a README...

TP-L-NK-SIZMA-EXPLO-T

TP-LiNK-SIZMA-EXPLOiT Exploit de RCE autenticado en router TP-Link CVE-2022-30075 Esta herramienta utiliza la vulnerabilidad CVE-2022-30075 presente en el TP-Link Archer AX50 y algunos otros modelos de router TP-Link para realizar ejecución remota de comandos autenticada Authenticated Remote Code...