1271 matches found
CVE-2019-3396
CVE-2019-3396 Confluence Unauthorized RCE CVE-2019-3396 Vulnerability Pitfall: Some versions require adding Referer to succeed File Read POST /rest/tinymce/1/macro/preview HTTP/1.1 Host: 10.10.20.181 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:55.0 Gecko/20100101 Firefox/55.0 Accept:...
CVE-2026-38526
CVE-2026-38526 — Krayin CRM ≤ 2.2.x Authenticated RCE ⚠️ Legal disclaimer : this code is provided for educational purposes and for authorized testing only CTF, bug bounty, private lab. The author is not responsible for any illegal use. Description Krayin CRM Webkul ≤ 2.2.x exposes the...
CVE-2026-38526
CVE-2026-38526 — Krayin CRM ≤ 2.2.x Authenticated RCE ⚠️ Legal disclaimer : this code is provided for educational purposes and for authorized testing only CTF, bug bounty, private lab. The author is not responsible for any illegal use. Description Krayin CRM Webkul ≤ 2.2.x exposes the...
PoC-CVE-2026-38526
CVE-2026-38526 - Krayin CRM PHP Upload RCE Automated exploit for Krayin CRM ≤ 2.2.x. This script exploits an unrestricted file upload vulnerability in the TinyMCE endpoint /admin/tinymce/upload, bypasses MIME-type validation by spoofing image/jpeg, uploads a PHP webshell, and executes arbitrary...
Moodle - Cross-Site Scripting/Remote Code Execution
The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system. Moodle versions 4.1.x before 4.1.3 and 4.2.x before...
CVE-2021-37787
CVE-2021-37787: SQL Injection in ABOCMS via TinyMCE Module Vulnerability Details CVE ID : CVE-2021-37787 Product : ABOCMS Affected Versions : 5.8.x, ≤5.9.3 Vulnerability Type : SQL Injection CVSS Score : 9.8 Description A critical SQL injection vulnerability exists in ABOCMS within the TinyMCE...
KrayinCRM-RCE-Exploit-CVE-2026-38526
🔓 Krayin CRM v2.2.x - Authenticated Remote Code Execution Exploit ⚠️ FOR AUTHORIZED SECURITY TESTING ONLY - Unauthorized use is illegal and unethical. 📋 Overview This exploit tool demonstrates a critical authenticated remote code execution RCE vulnerability discovered in Krayin CRM version 2.2.x...
CVE-2026-38526-PoC
CVE-2026-38526 | Krayin CRM v2.2.x Authenticated RCE - Unrestricted PHP File Upload via TinyMCE Description CVE-2026-38526 is a critical authenticated remote code execution vulnerability affecting Webkul Krayin CRM v2.2.x. The vulnerability exists in the TinyMCE media upload endpoint...
CVE-2026-47761
👋 Hello ! Security Research 🛡️ CVE-2026-47761 – Security Researcher Type : Stored Cross-Site Scripting XSS Product : TinyMCE References : CVE : https://nvd.nist.gov/vuln/detail/CVE-2026-47761 GHSA : https://github.com/tinymce/tinymce/security/advisories/GHSA-vg35-5wq7-3x7w Hall of Fame...
CVE-2026-38526-POC
CVE-2026-38526 - Krayin CRM RCE Exploit Krayin CRM ≤ 2.2.x - Unrestricted File Upload leading to Remote Code Execution. This PoC exploits the vulnerable TinyMCE upload endpoint /admin/tinymce/upload to upload a PHP webshell and achieve command execution on the server. Features Full automatic logi...
CVE-2026-38526-KrayinCRM
CVE-2026-38526 KrayinCRM Authenticated Arbitrary File Upload leading to Remote Code Execution Technical analysis and controlled reproduction of CVE-2026-38526 in Webkul Krayin CRM 2.2.x. Overview CVE-2026-38526 is an authenticated arbitrary file upload vulnerability affecting Webkul Krayin CRM...
CVE-2026-38526-PoC-htb-nexus
CVE-2026-38526-PoC-htb-nexus A PoC script for CVE-2026-38526, RCE via a file upload vulnerability in the /admin/tinymce/upload endpoint of webkul krayin 2.2.x built for htb-nexus 🛠 Quick start and Usage 1. Clone the repository: git clone https://github.com/Resolvdd/CVE-2026-38526-PoC-htb-nexus.gi...
CVE-2012-20002
TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the href parameter. Attackers can send GET requests to /php/download-image.php with traversal sequences like...
EUVD-2012-6610
TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the href parameter. Attackers can send GET requests to /php/download-image.php with traversal sequences like...
CVE-2012-20002 TinyMCE Thumbnail Gallery WordPress Plugin < 1.1.0 Path Traversal via download-image.php
TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the href parameter. Attackers can send GET requests to /php/download-image.php with traversal sequences like...
CVE-2012-20002
The TinyMCE Thumbnail Gallery plugin for WordPress (versions before 1.1.0 ) is vulnerable to a path traversal vulnerability. Unauthenticated attackers can exploit this by sending GET requests to the /php/download-image.php endpoint using traversal sequences (e.g., ../../../../wp-config.php) via t...
VulnCheck KEV: CVE-2012-20002
TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the href parameter. Attackers can send GET requests to /php/download-image.php with traversal sequences like...
EUVD-2026-91855
Shopclass before 6.2.0 contains a stored cross-site scripting vulnerability that allows self-registered non-admin users to inject scripts into item listing descriptions when frontend TinyMCE is enabled. Attackers can submit malicious JavaScript, which ItemActions.php saves without tag stripping,...
CVE-2026-104479
Shopclass before 6.2.0 contains a stored cross-site scripting vulnerability that allows self-registered non-admin users to inject scripts into item listing descriptions when frontend TinyMCE is enabled. Attackers can submit malicious JavaScript, which ItemActions.php saves without tag stripping,...
CVE-2026-104479: Improper Neutralization of Input During Web Page Generation
Shopclass before 6.2.0 contains a stored cross-site scripting vulnerability that allows self-registered non-admin users to inject scripts into item listing descriptions when frontend TinyMCE is enabled. Attackers can submit malicious JavaScript, which ItemActions.php saves without tag stripping,...