CVE-2026-82348 Apache Roller: Cross-weblog resource tampering via unscoped authoring lookups

Authorization Bypass Through User-Controlled Key in Apache Roller 6.1.5 allows an authenticated user with authoring rights on one weblog to read, modify, or delete resources belonging to another weblog through unscoped identifier-based lookups. This affects multi-user installations where users ar...

CVE-2026-82348

Apache Roller version 6.1.5 is vulnerable to an authorization bypass that enables cross-weblog resource tampering. An authenticated user with authoring rights on one weblog can use unscoped identifier-based lookups to read, modify, or delete resources belonging to a different weblog. This vulnera...

EUVD-2026-88129

Authorization Bypass Through User-Controlled Key in Apache Roller 6.1.5 allows an authenticated user with authoring rights on one weblog to read, modify, or delete resources belonging to another weblog through unscoped identifier-based lookups. This affects multi-user installations where users ar...

CVE-2024-31982

CVE-2024-31982 Java SSTI - 导致 RCE async async=falsegroovyprintln"Successful Injection"/groovy/ GET /bin/get/Main/DatabaseSearch?outputSyntax=plain&text=%7D%7D%7D%7B%7Basync%20async%3Dfalse%7D%7D%7B%7Bgroovy%7D%7Dprintln%28%22Successful%20Injection%22%29%7B%7B%2Fgroovy%7D%7D%7B%7B%2F HTTP/1.1 Host...

CVE-2024-23692

Vulnerabilidad CVE-2024-23692 en Rejetto HFS HTTP File Server Resumen Rejetto HFS HTTP File Server es un servidor simple de archivos web que facilita el intercambio de archivos a través de una red o internet. A pesar de su facilidad de uso y simplicidad, se ha descubierto una vulnerabilidad críti...

CVE-2025-24893-PoC

CVE-2025-24893 – XWiki远程命令执行（概念验证） 概述 本仓库包含一个针对CVE-2025-24893 的受控概念验证（PoC） ，该漏洞是影响XWiki 的未认证远程命令执行（RCE）漏洞。 由于不安全的服务器端模板和脚本评估，该漏洞允许攻击者在服务器上执行任意操作系统命令。 关于 XWiki XWiki是一个开源的企业级维基平台，常用于： 内部文档 知识库 团队协作门户 由于XWiki经常部署在面向互联网的服务器 上，其请求处理和脚本逻辑中的安全漏洞可能产生严重的现实影响。 漏洞摘要 CVE ID: CVE-2025-24893 类别：...

CVE-2022-22954

Análisis de CVE-2022-22954 Resumen Workspace ONE Access modelo de provisión de espacio de trabajo como servicio ofrece autenticación multifactor, inicio de sesión único y acceso condicional para SaaS, aplicaciones web y móviles. CVE-2022-22954 es una vulnerabilidad de Server-side Template Injecti...

CVE-2025-25369

CVE-2025-25369: Vulnerabilidad de Cross Site Scripting en ZKTeco ZKBio CVSecurity v.6.4.1 Se descubrió una vulnerabilidad XSS en ZKBio CVSecurity v.6.4.1. Un atacante podría explotar esta vulnerabilidad con privilegios de Template Editor y escalar sus privilegios a administrador. También se...

Visual Composer <= 45.16.0 - Unauthenticated LFI

Visual Composer Website Builder for WordPress = 45.16.0 contains a local file inclusion vulnerability caused by improper validation of the vcv-template parameter, letting unauthenticated attackers include and execute arbitrary files, exploit requires no authentication. id: CVE-2026-12227 info:...

CVE-2025-65271

CVE-2025-65271 CVE-2025-65271 的 PoC 如何运行？ node server.js 描述 Azuriom CMS 管理仪表盘中的客户端模板注入 CSTI 允许低权限用户在管理员会话上下文中执行任意模板代码。这可能通过渲染不可信用户输入的插件或仪表盘组件发生，从而可能实现权限提升至管理员账户。已在 Azuriom 1.2.7 中修复。 免责声明 使用前请阅读 本人不对任何人使用此 PoC 所采取的任何行为负责。本 PoC 仅供研究和安全测试目的使用。我明确反对任何非法或不道德的使用，包括未经授权入侵或利用系统。使用风险自负，并请遵守适用法律。 附加信息...

POC-CVE-2026-19626

CVE-2026-19626 — RCE in report generation authenticated, non-admin Status: CONFIRMED — pure-REMOTE, non-admin, REST-only 6.7.2-14.el9 lab, 2026-08-21. The weaponized chain this is what poc.py does: 1. login as any regular org user 2. POST /rest/group with name: "=system''" — braces/quotes accepte...

CVE-2025-24893-XWiki-unauthenticated-RCE-via-SolrSearch

CVE-2025-24893 – Ejecución remota de código no autenticada en XWiki 0 Tabla de contenidos 1. Resumen 2. Detalles de la vulnerabilidad 3. Versiones afectadas 4. Prueba de concepto 4.1 Construir el payload 4.2 Explotación manual 4.3 Exploit automatizado en Python 5. Mitigación 6. Créditos y...

CVE-2026-23631

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Example usage: Install dependencies Run the project Replace the commands...

CVE-2025-29306

CVE-2025-29306 FOXCMS黔狐内容管理系统服务参数注入漏洞 一、漏洞简介 FoxCMS是一套可免费商用且开源的网站管理系统,采用PHP+MySQL架构。 FOXCMS黔狐内容管理系统存在服务参数注入漏洞，攻击者可利用该漏洞获取服务器控制权。 二、漏洞影响 FOXCMS黔狐内容管理系统 V1.2 三、复现过程 POC http://xx/images/index.html?id=%24%40printphpinfo 输入Poc访问漏洞页面 发现phpinfo命令执行后的信息...

CVE-2026-11561

CVE-2026-11561 — Apinizer SSTI / RCE 版本检测（基础设施） 用于检测版本低于 2026.04.6 的 Apinizer 的 Nuclei 模板，这些版本容易受到 CVE-2026-11561（服务器端模板注入导致远程代码执行，CVSS 9.8）的影响。 使用 echo | nuclei -t CVE-2026-11561.yaml 工作原理 1. 获取管理面板（内部/基础设施 UI）主页，并提取主 JavaScript 文件路径（例如 main.xxxx.js）。 2. 获取 JS 文件，并将 VERSION 字符串与易受攻击的版本模式进行匹配。 漏洞...

OpenCMS 14 & 15 - Cross Site Scripting

Cross-site scripting XSS vulnerability in Alkacon Software Open CMS, affecting versions 14 and 15 of the 'Mercury' template. id: CVE-2023-6379 info: name: OpenCMS 14 & 15 - Cross Site Scripting author: msegoviag severity: medium description: | Cross-site scripting XSS vulnerability in Alkacon...

OpenCATS - Open Redirect

OpenCATS contains an open redirect vulnerability due to improper validation of user-supplied GET parameters. This, in turn, exposes OpenCATS to possible template injection and obtaining sensitive information, modifying data, and/or executing unauthorized operations. id: CVE-2023-27292 info: name:...

XWiki <= 17.3.0 - Server-Side Template Injection (SSTI)

XWiki = 17.3.0 contains a server-side template injection caused by improper validation of Apache Velocity template code in the Administration interface HTTP Meta Info field, letting authenticated administrators execute arbitrary template logic. id: CVE-2025-51991 info: name: XWiki = 17.3.0 -...

Premium Addons for Elementor - Unauthenticated Information Disclosure

Premium Addons for Elementor plugin for WordPress version 4.11.53 and below contains an unauthenticated information disclosure vulnerability.The vulnerability exists due to a missing authorization check in the gettemplatecontent AJAX handler, allowing unauthenticated attackers to retrieve private...

OpenAM<=15.0.3 FreeMarker - Template Injection

OpenAM is an open access management solution. In versions 15.0.3 and prior, the getCustomLoginUrlTemplate method in RealmOAuth2ProviderSettings.java is vulnerable to template injection due to its usage of user input id: CVE-2024-41667 info: name: OpenAM=15.0.3 FreeMarker - Template Injection...