1099 matches found
CVE-2021-43258
CVE-2021-43258 ChurchInfo 1.2.13-1.3.0 远程代码执行漏洞利用 完整标题| ChurchInfo 1.2.13-1.3.0 远程代码执行漏洞利用 ---|--- 添加日期| 21-11-2022 类别| 远程漏洞利用 平台| php 风险| 安全风险严重 描述| 该 Metasploit 模块利用 CartView.php 页面在创建带附件的草稿邮件时的逻辑漏洞。通过为草稿邮件上传附件，附件会被放置在 ChurchInfo Web 服务器的 /tmpattach/ 文件夹中，任何用户都可以通过 Web 访问该文件夹。通过上传一个 PHP 附件，然后浏览...
IOBitUnlockerUnlocker
简介 （0 day）移动或复制任意文件。通过校验和技巧绕过之前的补丁。 Writeup：https://nathan2.com/files/iobit.pdf 总体信息：https://nathan2.com/posts/iobit/ 我是在不知道已有其他先前漏洞利用的情况下发现此漏洞的。不过，此漏洞绕过了 IObit 所做的补丁。适用于 1.3.0 版本。 用法： root@kitploit: C:\Users\nathan\source\repos\driverhandlerchecker\x64\Release\driverhandlerchecker.exe...
CVE-2026-78281
Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...
CVE-2026-78281 WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...
CVE-2026-78281
The WordPress plugin CP Media Player (versions
EUVD-2026-66940
Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...
CVE-2026-32561
Subscriber Privilege Escalation in Booking Hub = 1.3.0 versions...
CVE-2026-32561
CVE-2026-32561 is a Subscriber Privilege Escalation vulnerability in the WordPress Booking Hub plugin, affecting versions 1.3.0 and earlier . The flaw allows a low-privileged Subscriber user to escalate privileges, rated CVSS 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indica...
CVE-2026-32561 WordPress Booking Hub plugin <= 1.3.0 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Booking Hub = 1.3.0 versions...
PT-2026-81051
Name of the Vulnerable Software and Affected Versions Booking Hub versions 1.3.0 and earlier Description An issue exists that allows a user with Subscriber privileges to escalate their privileges within the system. Recommendations Update Booking Hub to a version later than 1.3.0...
CVE-2026-50577 ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter
ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration leaves requestcounter unchanged in app/vau/VAUProtokoll.py while constructing VAU messages. The frozen client request counte...
PT-2026-77220
Name of the Vulnerable Software and Affected Versions ePA 3.x Integration versions prior to 1.3.0 Description The software fails to update the request counter in the app/vau/VAUProtokoll.py file when constructing VAU messages. This results in the server reusing AES-GCM nonce and key combinations...
CVE-2026-47718
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. When secureEnabled=true, FUXA 1.3.0-2773 still allows guest and invalid-token requests to read project, alarms, and scheduler APIs. Version 1.3.1 fixes this issue...
CVE-2026-47717 FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In fuxa-server version 1.3.0, the GET /api/project endpoint exposes sensitive project configuration data to guest-context requests even when secureEnabled is enabled. Version 1.3.1 fixes the issue...
CVE-2026-19335
A vulnerability has been found in Jane-xiaoer skill-vision-control up to 1.3.0. This vulnerability affects the function getSkillVersionsDir of the file src/svc/utils/config.ts. Such manipulation of the argument skillName leads to path traversal. The attack can only be performed from a local...
CVE-2026-19335
A vulnerability has been found in Jane-xiaoer skill-vision-control up to 1.3.0. This vulnerability affects the function getSkillVersionsDir of the file src/svc/utils/config.ts. Such manipulation of the argument skillName leads to path traversal. The attack can only be performed from a local...
CVE-2026-34502
CVE-2026-34502 corresponds to a Heap-based Buffer Overflow in the Apache Portable Runtime Utility memcached client, affecting APR Utility versions 1.3.0 through 1.6.3. The entry notes a NETWORK attack vector with LOW attack complexity and NO privileges required, and an impact profile of Availabil...
CVE-2026-48121
@langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to NoSQL injection: checkpoint identifiers threadid, checkpointns, checkpointid from config.configurable are passed into MongoDB fi...
