290057 matches found
CVE-2026-105651
The Ghost Node.js content management system (versions 5.94.0 through 6.64.0 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. When creating a bookmark card, the system could fetch and store non-image files from external websites as icons or thumbnails. This allowed staff users, includi...
CVE-2026-105651 Ghost: Stored XSS via Bookmark Card Images
Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's...
CVE-2026-105649 Ghost: Stored XSS via SVG Uploads Bypassing Sanitization
Ghost is a Node.js content management system. From 4.22.0 until 6.65.0, SVG media thumbnails and SVG images uploaded with a non-SVG file extension were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in...
CVE-2026-105649 Ghost: Stored XSS via SVG Uploads Bypassing Sanitization
Ghost is a Node.js content management system. From 4.22.0 until 6.65.0, SVG media thumbnails and SVG images uploaded with a non-SVG file extension were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in...
CVE-2024-1512
CVE-2024-1512 개념 증명 취약점 개요 CVE-2024-1512는 MasterStudy LMS WordPress 플러그인, 특히 /lms/stm-lms/order/items REST 경로의 구현에서 중요한 취약점을 노출합니다. 이 문제는 플러그인이 'user' 매개변수를 적절히 이스케이프하지 못하고 SQL 쿼리를 부적절하게 준비한 데서 발생합니다. 결과적으로 공격자는 'user' 매개변수를 조작하여 쿼리에 악성 SQL 코드를 삽입할 수 있습니다. 이 취약점은 UNION 기반 SQL 인젝션 공격을 용이하게 하며, 공격자...
CVE-2026-105643 Ghost: Stored XSS via Embed Card Previews
Ghost is a Node.js content management system. From version 6.34.0 until 6.67.0, embed cards in the Ghost editor could bypass protections against stored cross-site scripting. Any staff user, including Contributors, could store scripts in post content that ran when another staff user opened the pos...
OverlayFS---CVE-2021-3493
한 줄 요약 OverlayFS의 취약점으로 인해 Ubuntu의 로컬 사용자가 루트 권한을 획득할 수 있는 방법을 알아보십시오. 취약점 요약 Linux 커널의 overlayfs 파일 시스템에서, 사용자 네임스페이스에 대한 파일 시스템 캐퍼빌리티 적용을 제대로 검증하지 못하는 Ubuntu 특유의 문제가 있었습니다. Ubuntu에서 권한 없는 overlayfs 마운트를 허용하기 위해 포함된 패치로 인해, 로컬 공격자가 이를 이용해 상승된 권한을 얻을 수 있었습니다. CVE-2021-3493 신고자 독립적인 보안 연구원이 이 취약점을...
CVE-2026-105642 Ghost: Remote Code Execution via Bookmark Card Images
Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...
CVE-2026-105642 Ghost: Remote Code Execution via Bookmark Card Images
Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...
CVE-2026-34213
CVE-2026-34213 Низкопривилегированный пользователь Docmost мог указать чужой attachmentId в общем эндпоинте загрузки и перезаписать сохранённое вложение другой страницы в том же рабочем пространстве. Введение Я выявил, ответственно раскрыл и воспроизвёл высокосерьёзную ошибку авторизации в Docmos...
EUVD-2026-92616
In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-92613
In cfg2prop of btifstorage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2021-43408
CVE-2021-43408: WordpressプラグインDuplicate Postバージョン1.1.9 - SQLインジェクション I. 概要 1. WordPressとは WordPressは、オープンソースのCMS（コンテンツ管理システム）ソフトウェアです。HTMLコーディング言語を使用する代わりに、WordPressはPHPプログラミング言語で記述され、MySQLデータベースプラットフォームを使用しています。WordPressはプログラマーのMatt Mullenweg氏とMike...
CVE-2025-64446-FortiWeb-CGI-Bypass-PoC
CVE-2025-64446 익스플로잇 도구 FortiWeb 기기에서 CVE-2025-64446 취약점 확인 및 익스플로잇을 위한 도구입니다. 설명 이 도구는 FortiWeb 웹 애플리케이션 방화벽의 경로 탐색path traversal 취약점CVE-2025-64446을 테스트하고 익스플로잇합니다. 취약점 상태를 확인하거나 CGI 엔드포인트를 익스플로잇하여 사용자 계정을 생성/수정하는 데 사용할 수 있습니다. 설치 pip install -r requirements.txt 사용법 취약점 확인 읽기 전용 python3 exploit....
CVE-2026-97070 WordPress Cozy Blocks plugin <= 2.2.23 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in CozyThemes Cozy Blocks cozy-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cozy Blocks: from n/a through 2.2.23...
CVE-2026-97305 WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...
EUVD-2026-92586
Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...
CVE-2026-103085
The WP User Manager plugin for WordPress (versions
CVE-2026-103085 WordPress WP User Manager plugin <= 2.9.20 - Privilege Escalation vulnerability
Improper Access Control vulnerability in WP User Manager WP User Manager wp-user-manager allows Privilege Abuse.This issue affects WP User Manager: from n/a through 2.9.20...