CVE-2026-9833

CVE-2026-9833 CVE ID: CVE-2026-9833 脆弱性タイプ： クロスサイトスクリプティング（XSS）– 反射型 XSS CWE: CWE-79 – Web ページ生成時の入力の不適切な無害化（'クロスサイトスクリプティング'） 深刻度： 高（CISA ADP CVSS v3.1: 7.1） 概要 CVE-2026-9833 は、WordPress プラグイン「Tag Groups – Advanced Way to Display Your Taxonomy Terms」のバージョン 2.2.0 より前のバージョンに影響します。 この脆弱性は、プラグインの AJ...

CVE-2021-24959

CVE-2021-24959 설명 WP Email Users WordPress 플러그인 버전 1.7.6까지는 weuselectedusers1 AJAX 액션에서 dataraw 매개변수를 이스케이프 처리하지 않아, 인증된 사용자가 SQL 인젝션 공격을 수행할 수 있습니다. root@kitploit: CVE CVE-2021-24959 CVSS 8.8 높음 공개일 2022년 1월 31일 최종 업데이트 2024년 1월 22일 연구자 Krzysztof Zając - CERT PL 이 도구는 wpusers와 wpoptions를 덤프합니다. ...

CVE-2026-38192

pluck-CMS-4.7.20-code-injection-vulnerability admin.php内のmoduleaddtosite関数は、$POST配列全体を反復処理し、ユーザーが制御可能なパラメータ名をexplode'|',...

CVE-2026-94106

getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames in command strings. Attackers can craft malicious filenames containing shell metacharacters to inject arbitrary commands executed with the privileges of the process embedding...

HW-Pyton-10

CVE-2020-11022 概要 CVE-2020-11022 は、エスケープされずに HTML レスポンスに反映されるユーザー入力の不適切な処理に関連する、Reflected XSSクロスサイトスクリプティングタイプの脆弱性です。 攻撃者は、ユーザーのブラウザで実行される JavaScript コードを注入できます。...

CVE-2026-94106 getID3 before 1.9.26 OS Command Injection via Unescaped Filenames

getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames in command strings. Attackers can craft malicious filenames containing shell metacharacters to inject arbitrary commands executed with the privileges of the process embedding...

CVE-2026-94106

getID3 before 1.9.26 is affected by an OS command injection vulnerability in its shell-out handlers, which fail to escape filenames when constructing command strings. An attacker can craft a malicious filename containing shell metacharacters to inject arbitrary commands that execute with the priv...

CVE-2026-48732-poc

CVE-2026-48732: Warp Remote SSH cwd 명령 인젝션 PoC 영어 버전 개요 이 저장소는 Warp 의 기존 SSH 백그라운드 명령 처리에 존재하는, 높은 심각도의 OS 명령 인젝션 취약점 CVE-2026-48732 의 Proof of Concept PoC입니다. 영향을 받는 Warp 버전에서는 SSH 세션에서 보고된 원격 작업 디렉토리cwd를 사용하여 헬퍼 명령을 구성했습니다. 이 경로에 포함된 작은따옴표가 이스케이프되지 않았기 때문에, 공격자가 제어하는 원격 호스트, 저장소 또는 디렉토리 이름에 의해...

CVE-2018-20162-digi-lr54-restricted-shell-escape

layout: post title: "CVE-2018-20162: Digi TransPort LR54 제한된 쉘 탈출" author: sgo category: 보안 Digi TransPort LR54는 산업, 인프라, 소매 및 대중교통에서 일반적으로 사용되는 고속 LTE 라우터입니다. 이 장치는 제한된 샌드박스에서 파이썬 스크립트를 실행할 수 있도록 지원하며, SSH를 통해 접근 가능한 맞춤형 쉘도 동일한 제한을 받습니다. 따라서 관리자는 기본 OS에 접근할 수 없습니다. 저는 샌드박스를 탈출하여 루트 쉘을 획득하는 방법을...

CVE-2026-88824

The Master Blocks WordPress plugin before 1.5.0 does not have authorisation on one of its REST routes, allowing unauthenticated users to update its settings, including a value that is output unescaped in the admin area, leading to Stored XSS that executes in the session of any administrator...

CVE-2026-61552

Icinga 2 is an open source monitoring system. From 2.4 until 2.14.9, 2.15.4, and 2.16.2, the /v1/objects API writes attacker-controlled template names into generated configuration without escaping them. An authenticated ApiUser with an objects/create/ permission can inject Icinga 2 DSL...

CVE-2026-85122

The Easy Form Builder by WhiteStudio WordPress plugin before 4.2.0 does not validate a submitted value against the stored configuration for some of its form types, allowing unauthenticated users to store arbitrary content which is then rendered unescaped in an admin page, leading to Stored XSS...

EUVD-2026-82665

The Easy Form Builder by WhiteStudio WordPress plugin before 4.2.0 does not validate a submitted value against the stored configuration for some of its form types, allowing unauthenticated users to store arbitrary content which is then rendered unescaped in an admin page, leading to Stored XSS...

CVE-2026-54646

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/maintenance.index.inc.php places administrator-controlled tablename values into ALTER TABLE, CHECK TABLE, and ANALYZE TABLE statements without validating the identifiers or escaping embedded backticks. An authenticated...

CVE-2026-47252

Anyquery (a Go-based SQL query engine on SQLite) prior to 0.4.5 is vulnerable to AppleScript/JXA code injection in its macOS browser plugins. The chrome_tabs plugin (and equivalent Brave, Edge, and Safari variants) interpolates a SQL-controlled URL directly into AppleScript or JXA source via fmt....

CVE-2026-79752

CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuilder.php accept user-controlled dataType, part, or unit valu...

CVE-2026-79752

CakePHP , a rapid development framework for PHP, is affected by an SQL injection vulnerability in src/Database/FunctionsBuilder.php. The methods FunctionsBuilder::cast , ::extract , ::datePart , and ::dateAdd accept user-controlled dataType, part, or unit values and incorporate them into generate...

CVE-2026-79752 CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection

CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuilder.php accept user-controlled dataType, part, or unit valu...

CVE-2026-91011

The EWWW Image Optimizer WordPress plugin before 8.7.7 does not properly escape image attribute values when it rewrites page output, allowing authenticated users with author-level access and above to inject arbitrary JavaScript that is stored in published content and executes in the browser of an...

CVE-2025-15697

The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against anyone they can induce to submit a crafted request...