220 matches found
CVE-2024-42009
CVE-2024-42009 – Roundcube Webmail における反射型XSS 📌 概要 このリポジトリには、Roundcube Webmail の重大な反射型XSS脆弱性である CVE-2024-42009 を安全に実証・検証するための Nuclei テンプレート と補助リソースが含まれています。この欠陥は show.php の messagebody 関数に存在し、サニタイズ後の変更によりサニタイズが無効化され、細工された HTML メールコンテンツが安全でない方法でレンダリングされます。 ⚠️ この PoC は 教育および許可されたテスト...
CVE-2026-52773: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
YesWiki is a wiki system written in PHP. From version 4.1.0 to before version 4.6.6, YesWiki's archived-revision view reflects the time GET parameter into a hidden HTML input in handlers/page/show.php without escaping. Because MySQL coerces malformed DATETIME strings, an attacker can append HTML ...
CVE-2026-52773 Reflected XSS via Unescaped Archived-Revision `time` Parameter in `handlers/page/show.php` in YesWiki
YesWiki is a wiki system written in PHP. From version 4.1.0 to before version 4.6.6, YesWiki's archived-revision view reflects the time GET parameter into a hidden HTML input in handlers/page/show.php without escaping. Because MySQL coerces malformed DATETIME strings, an attacker can append HTML ...
CVE-2026-52773
YesWiki (PHP wiki system), versions 4.1.0 through 4.6.5 , is vulnerable to a reflected XSS (CWE-79) in the archived-revision view. The time GET parameter is reflected unescaped into a hidden HTML input in handlers/page/show.php. Because MySQL coerces malformed DATETIME strings, an attacker append...
PT-2026-83581
Name of the Vulnerable Software and Affected Versions Admidio versions prior to 5.0.12 Description An issue exists that allows unauthenticated attackers to execute arbitrary SQL queries. By providing a dummy UUID in the role list parameter, attackers can bypass authentication and use the relation...
CVE-2026-55219: Concurrent Execution using Shared Resource with Improper Synchronization
Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.5, the credit payment implementation in app/Livewire/Invoices/Show.php executes a pessimistic row lock lockForUpdate outside of an active database transaction. Because MySQL/MariaDB...
CVE-2025-15142 9786 phpok3w show.php sql injection
A vulnerability was identified in 9786 phpok3w up to 901d96a06809fb28b17f3a4362c59e70411c933c. Impacted is an unknown function of the file show.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and...
CVE-2025-15142
CVE-2025-15142 affects 9786 phpok3w up to commit 901d96a06809fb28b17f3a4362c59e70411c933c. The vulnerability is an SQL injection in the file show.php caused by manipulation of the ID argument. It can be exploited remotely, and public exploit code exists. The project uses a rolling release, and no...
CVE-2025-15142 9786 phpok3w show.php sql injection
A vulnerability was identified in 9786 phpok3w up to 901d96a06809fb28b17f3a4362c59e70411c933c. Impacted is an unknown function of the file show.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and...
CVE-2025-15142: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in 9786 phpok3w up to 901d96a06809fb28b17f3a4362c59e70411c933c. Impacted is an unknown function of the file show.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and...
PT-2025-53657
Name of the Vulnerable Software and Affected Versions 9786 phpok3w versions prior to 901d96a06809fb28b17f3a4362c59e70411c933c Description A flaw exists in 9786 phpok3w. The issue is related to the manipulation of the ID argument, which can lead to SQL injection within the show.php file. The attac...
phpok3w SQL注入漏洞
phpok3w is an article management system by the individual developer of sunbingzibo. A SQL injection vulnerability exists in phpok3w, which stems from incorrect manipulation of the parameter ID in the file show.php, which may lead to SQL injection...
EUVD-2010-2723
Malware in sbrugna...
EUVD-2009-4825
Malware in sbrugna...
EUVD-2007-0540
Malware in sbrugna...
EUVD-2007-1802
Malware in sbrugna...
EUVD-2020-14977
Malware in sbrugna...
EUVD-2008-6380
Malware in sbrugna...