Shopware < 5.5.8 - Cross-Site Scripting

Shopware before 5.5.8 contains a reflected cross-site scripting XSS caused by unsanitized query string parameters in the backend/Login or backend/Login/load/ URI, letting attackers execute arbitrary scripts in the context of the victim's browser, exploit requires sending crafted URL to the victim...

pgAdminOpendoor

pgAdminOpendoor CVE-2025-2945 概要 これは、CVE-2025-2945に関する私の調査です。このリポジトリには、postgressと脆弱性のあるpgAdminを含むテストスタンド、およびエクスプロイトが含まれています。 CVE 参考リンク： NVD Details WIZ Analyze Metasploit 詳細 Pythonで書かれたpgAdminバックエンドには、適切なサニタイズが欠如している2つのエンドポイントがあります。エンドポイントは以下の通りです： /sqleditor/querytool/download - querycommited...

CVE-2025-49132-PoC

CVE-2025-49132-PoC CVE-2025-49132 の概念実証。Pterodactyl Panel -m check Do something funny python3 poc.py -u -m exploit -p -t 技術的詳細 LocaleController.php における v1.11.10 から v1.11.11 への git diff を分析すると リンク、コントローラが locale と namespace パラメータを検証やサニタイズなしで受け付けていることがわかります。 これがなぜ危険なのかを理解するために、panel/routes/base.ph...

ServiceNow-CVE-2025-11449-CVE-2025-11450-Mitigation-Script

ServiceNow CVE-2025-11449 & CVE-2025-11450 緩和スクリプト 概要 このスクリプトは、ServiceNow UI Macros における CVE-2025-11449 および CVE-2025-11450 のセキュリティ脆弱性を自動的に検出し、修復します。これらの脆弱性は、ユーザー制御の sysparm パラメータが適切にサニタイズされていない場合、特別に細工されたリンクを通じてユーザーのブラウザで任意のコード実行を引き起こす可能性があります。 影響を受ける UI Macros $pwdverifyemail...

CVE-2023-39062

CVE-2023-39062 Spipu Html2Pdf alertdocument.domain HTTP/1.1 Host: example.afine.com Cookie: PHPSESSID=oiqo2oopiqt88teqgfb0a23vk0 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:109.0 Gecko/20100101 Firefox/113.0 Accept-Language: pl,en-US;q=0.7,en;q=0.3 Accept-Encoding: gzip, deflate...

CVE-2024-43018

CVE-2024-43018 IDを割り当て CVE - Mitre に正式に登録される 目次 説明 使用技術 ソースとシンク 実行方法 修正方法 作者 説明 論文 https://hdl.handle.net/10316/118126 および https://hdl.handle.net/10316/118059 の調査中に、Piwigo アプリケーションに新たな脆弱性が発見されました。この脆弱性は、次の地点からのフィルタリング検索における一部パラメータのサニタイズ不足に起因します: HOST/admin.php?page=userlist。 具体的には、Piwigo 13.8.0...

The vulnerability of the action_set_net_settings() function (gpon.lua) in the Setting Handler component of the GPON-terminal software Tenda G103 allows a intruder to execute arbitrary commands.

The vulnerability of the actionsetnetsettings function gpon.lua in the Setting Handler component of the GPON-terminal software Tenda G103 is related to the lack of measures to sanitize input data during the processing of parameters...

CVE-2026-57130 PraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, src/praisonai-agents/praisonaiagents/tools/emailtools.py interpolates LLM-controlled fromaddr, subject, and query values directly into quoted IMAP SEARCH criteria. Embedded quote, backslash, newline, or null characters can...

CVE-2026-7848 SQL Injection in Alior Bank raty PrestaShop module

Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the "hookActionObjectProductUpdateBefore", "hookActionObjectCategoryUpdateBefore", and "hookActionObjectCategoryAddAfter" hook methods. The module inserts values of the POST parameters...

PT-2026-91223

Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the "hookActionObjectProductUpdateBefore", "hookActionObjectCategoryUpdateBefore", and "hookActionObjectCategoryAddAfter" hook methods. The module inserts values of the POST parameters "alior product...

CVE-2026-74236 GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnostic File Deletion Handler

GFI Exinda AI and ClearView before 7.6.5 contains a path traversal vulnerability in the diagnostic file deletion handler. The unlinkoremailfile function accepts parameters prefixed with vfilerow and appends their values directly to a base directory path without sanitizing for directory traversal...

PT-2026-85519

GFI Exinda AI before 7.6.5 contains an argument injection vulnerability in the Tools Iperf Client functionality. The web tools cmd function constructs an iperf command using the server and options parameters without sanitization, permitting injection of arbitrary iperf flags. An authenticated...

CVE-2026-56126 pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.php

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Status: Monitoring privilege to inject arbitrary JavaScript via graph configuration parameters in /statusmonitoring.php. Multiple POST parameters including graph-left, graph-right, time-period, resolution, start-date...

CVE-2026-56126 pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via status_monitoring.php

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Status: Monitoring privilege to inject arbitrary JavaScript via graph configuration parameters in /statusmonitoring.php. Multiple POST parameters including graph-left, graph-right, time-period, resolution, start-date...

CVE-2026-59111

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Digitální a informační agentura DIA eObčanka-Identifikace on MacOS enables an attacker to register a custom URL scheme czeeopauth:// for parameterized application execution. Prior to version...

EUVD-2026-68596

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Digitální a informační agentura DIA eObčanka-Identifikace on MacOS enables an attacker to register a custom URL scheme czeeopauth:// for parameterized application execution. Prior to version...

CVE-2026-75333

yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are directly passed to new File for file system operations without any path sanitization or whitelist validation...

CVE-2026-75333

yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are directly passed to new File for file system operations without any path sanitization or whitelist validation...

CVE-2026-75333

yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are directly passed to new File for file system operations without any path sanitization or whitelist validation...

CVE-2026-19055 ProSolution WP Client < 2.0.11 - Reflected XSS via Multiple Parameters

The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its public pages, leading to reflected Cross-Site Scripting that can be triggered against any visitor, including a logged-in administrator...