CVE-2026-78064 Joomla Extension - j2commerce.com - Anonymous cart-record tampering via inherited FOF `save` task in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6

Joomla Extension - j2commerce.com - Anonymous cart-record tampering via inherited FOF save task in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - fof.xml grants the carts view's tasks a wildcard true ACL, and FOF only enforces CSRF tokens on back-end HTML requests, not on front-end format=raw...

CVE-2026-78064

CVE-2026-78064 affects the J2Store Joomla extension (j2commerce.com) in versions 1.0.0–3.3.21, 4.0.0–4.0.21, and 4.1.0–4.1.6 . The vulnerability stems from fof.xml granting the carts view a wildcard true ACL, while FOF enforces CSRF tokens only on back-end HTML requests—not on front-end format=ra...

CVE-2018-7600-Drupalgeddon2-RCE

CVE-2018-7600 Drupalgeddon2 — レッドチームプロジェクト ITSOLERA サイバーセキュリティ部 | オフェンシブセキュリティインターンシップ 2026 概要 このプロジェクトは、CVE-2018-7600 Drupalgeddon2 を調査・再現・文書化するものです。 これは、Drupal CMS における Critical CVSS 9.8 の認証不要なリモートコード実行 RCE 脆弱性であり、 2018年3月にリリースされた 7.58 および 8.5.1 より前のバージョンに影響します。 この脆弱性は Drupal の Form API...

CVE-2026-33017-Langflop

CVE-2026-33017 Langflow（"Langflop"）未認証 RCE PoC Langflow の未認証 buildpublictmp コード実行脆弱性に対する PoC です。 悪意のあるコンポーネントを公開フローにアップロードし、ビルドをトリガーして、リバースシェルを取得します。 認可されたセキュリティテスト専用です。 自分が所有するシステム、または明示的なテスト許可を得たシステムに対してのみ使用してください。 要件 Python 3 requests（pip install requests） 使用方法 内蔵リスナーを起動して、エクスプロイトを一括実行します：...

ForgottenButNotGone

忘れられたが、消えてはいない このリポジトリには、Black Hat USA 2026 および DEF CON 34 で発表された講演「Forgotten but Not Gone: Unauthenticated RCEs and LPEs in Legacy Linux Services」で紹介された脆弱性の概念実証スクリプトが含まれています。 CVE-2026-28372 TelnetD におけるローカル権限昇格: 非特権攻撃者は、TelnetD の環境変数機能を悪用して、root 権限のシェルを取得できます。設計上およびその RFC に従い、Telnet...

CVE-2023-22527

CVE-2023-22527 - Atlassian Confluence 원격 코드 실행 개요 CVE-2023-22527 는 Atlassian Confluence Data Center 및 Server에서 발생하는 치명적인 원격 코드 실행 취약점입니다. 이 취약점은 인증되지 않은 공격자가 특정 엔드포인트에서 템플릿 인젝션을 통해 취약한 Confluence 인스턴스에서 임의 코드를 실행할 수 있게 합니다. 빠른 요약 CVE ID : CVE-2023-22527 CVSS 점수 : 10.0 치명적 CVSS 벡터 :...

CVE-2026-80465

A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.3, Mendix SAML Mendix 11 compatible All versions V4.2.3, Mendix SAML Mendix 9.24 compatible All versions V3.6.27. Affected versions of the module do not properly validate the SAML response signature. This...

EUVD-2026-70411

A vulnerability has been identified in Mendix SAML Mendix 10 compatible All versions V4.2.3, Mendix SAML Mendix 11 compatible All versions V4.2.3, Mendix SAML Mendix 9.24 compatible All versions V3.6.27. Affected versions of the module do not properly validate the SAML response signature. This...

CVE-2026-80465

CVE-2026-80465 affects the Mendix SAML module across multiple compatibility lines: Mendix 10 (all versions < V4.2.3), Mendix 11 (all versions < V4.2.3), and Mendix 9.24 (all versions

CVE-2026-85159

AVideo (through commit c91b5975d) contains a reflected cross-site scripting vulnerability in userLogin.php . The root cause lies in the isSafeRedirectURL function, which validates only the URL protocol but does not sanitize HTML characters in the cancelUri parameter. Because this parameter is ech...

EUVD-2026-70394

AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in userLogin.php where the cancelUri parameter is echoed in an href attribute after isSafeRedirectURL checks protocol only, not HTML characters. Unauthenticated attackers can inject event handlers via relative...

CVE-2026-85159 AVideo Reflected XSS via cancelUri in userLogin.php

AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in userLogin.php where the cancelUri parameter is echoed in an href attribute after isSafeRedirectURL checks protocol only, not HTML characters. Unauthenticated attackers can inject event handlers via relative...

EUVD-2026-70392

WWBN AVideo contains a broken access control vulnerability in the unauthenticated feed/index.php endpoint that disables per-video visibility checks when a programid parameter is supplied. Attackers can enumerate playlist identifiers and retrieve unlisted and group-restricted videos by requesting...

CVE-2026-85157

WWBN AVideo is affected by a broken access control vulnerability in the unauthenticated feed/index.php (RSS feed) endpoint. When a program_id parameter is supplied, per-video visibility checks are disabled, allowing unauthenticated attackers to enumerate playlist identifiers and retrieve unlisted...

CVE-2026-85157 WWBN AVideo Broken Access Control via feed/index.php program_id

WWBN AVideo contains a broken access control vulnerability in the unauthenticated feed/index.php endpoint that disables per-video visibility checks when a programid parameter is supplied. Attackers can enumerate playlist identifiers and retrieve unlisted and group-restricted videos by requesting...

CVE-2026-85157 WWBN AVideo Broken Access Control via feed/index.php program_id

WWBN AVideo contains a broken access control vulnerability in the unauthenticated feed/index.php endpoint that disables per-video visibility checks when a programid parameter is supplied. Attackers can enumerate playlist identifiers and retrieve unlisted and group-restricted videos by requesting...

CVE-2026-85156

WWBN AVideo has a broken access control vulnerability on its public channel page. The root cause involves hardcoded visibility flags and an undefined property that fail to properly validate access controls, allowing unauthenticated visitors to view unlisted and group-restricted videos—including f...

CVE-2026-85156 WWBN AVideo Broken Access Control via Channel Page

WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthenticated visitors to view unlisted and group-restricted videos through hardcoded visibility flags and an undefined property. Attackers can access the channel endpoint to retrieve sensitive video...

EUVD-2026-70391

WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthenticated visitors to view unlisted and group-restricted videos through hardcoded visibility flags and an undefined property. Attackers can access the channel endpoint to retrieve sensitive video...

CVE-2026-85155

WWBN AVideo is vulnerable to SQL injection in the sort column parameter of the get.json.php endpoint when APIName=channels. An unauthenticated attacker can order results by arbitrary database columns such as users.password and users.recoverPass, enabling an ordering oracle to infer password hash ...