CVE-2026-105844 Payload: Prototype pollution in Payload Import Export plugin

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...

EUVD-2026-93470

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...

CVE-2026-105844

Payload , a headless content management system, contains a prototype pollution vulnerability in the @payloadcms/plugin-import-export plugin. An unauthenticated user can submit prototype-sensitive field paths, leading to unintended application behavior and potential remote code execution (RCE) . T...

CVE-2026-105844 Payload: Prototype pollution in Payload Import Export plugin

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...

samsung-bixby-command-execution-cve-2026-21055-improper-component-export

CVE-2026-21055 PoC — 삼성 빅스비 부적절한 컴포넌트 내보내기 CVE-2026-21055 에 대한 개념 증명: 삼성 빅스비 버전 4.0.70.8 미만에서 Android 애플리케이션 컴포넌트의 부적절한 내보내기로 인해 로컬 공격자가 빅스비 권한으로 임의 명령을 실행할 수 있습니다. 개요 이 저장소에는 두 개의 Python 스크립트가 포함되어 있습니다: 1. analyzecomponents.py — 디컴파일된 AndroidManifest.xml을 분석하여 내보내진 활동, 서비스, 수신자 및 제공자를 열거합니다. 권한...

CVE-2026-104757

Editor Privilege Escalation in Import and export users and customers = 2.5.5 versions...

CVE-2026-104757 WordPress Import and export users and customers plugin <= 2.5.5 - Privilege Escalation vulnerability

Editor Privilege Escalation in Import and export users and customers = 2.5.5 versions...

CVE-2026-104757

The WordPress Import and export users and customers plugin (versions

CVE-2026-104757 WordPress Import and export users and customers plugin <= 2.5.5 - Privilege Escalation vulnerability

Editor Privilege Escalation in Import and export users and customers = 2.5.5 versions...

PT-2026-106776

Name of the Vulnerable Software and Affected Versions Payload versions 3.0.0 through 3.87.9 Payload versions 4.0.0-canary.0 through 4.0.0-canary.26 Description An unauthenticated user can cause unintended application behavior when the @payloadcms/plugin-import-export plugin is enabled. By...

PT-2026-106381

Editor Privilege Escalation in Import and export users and customers = 2.5.5 versions...

PT-2026-107180

A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates a buffer using a 32-bit width height and bytes-per-pixel product that can overflow. GEGL then writes the full uncompressed extent into th...

WP < 7.1.3 - Author+ SQLi via WXR Export

Description WordPress does not properly validate some post meta values before using them in a database query when exporting content in some cases, which could allow users with Author-level access and above to store a crafted value that results in SQL injection executed when an administrator later...

vt-py-scanner

Escáner de VirusTotal Script de Python para analizar TODOS los archivos con la API de VirusTotal, escaneando carpetas y subcarpetas de forma recursiva. Optimizado para Windows. Características Escanea TODOS los archivos de una carpeta y sus subcarpetas Configuración mediante archivo .env - Guarda...

PwnedCheck

PwnedCheck PwnedCheck es una herramienta de línea de comandos para verificar si las contraseñas han aparecido en filtraciones de datos conocidas utilizando la API deHave I Been Pwned y admite exportaciones cifradas de bóvedas de Bitwarden. Características Verificar contraseñas individuales desde ...

CVE-2026-90318

A flaw was found in the Linux kernel's FAT File Allocation Table filesystem, specifically within the Network File System NFS export path. The fatrebuildparent function fails to release a buffer head after successfully scanning a directory entry. This oversight can lead to a resource leak,...

CVE-2026-90236

A flaw was found in the Network File System Daemon NFSD of the Linux kernel. This vulnerability occurs due to an improper handling of export references when reaping open state IDs. An unreleased reference can pin an export, preventing the file system from being unmounted. This could allow a local...

CVE-2026-88393

WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export. The data parameter is base64-decoded and passed directly into the string2array function in app/Module/Base.php, which executes eval"$array = $data;" whenever the decoded string starts...

CVE-2023-36250

CVE-2023-36250 CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record. Vulnerability Type CSV Injection Discoverer Bruno Teixeira Reference http://gnome.com Affected Product Code Base GNOME...

CVE-2020-25398

CVE-2020-25398 Existe una inyección CSV en InterMind iMind Server hasta la versión 3.13.65 a través de la funcionalidad de exportación CSV. Información Descripción: Un atacante puede configurar datos específicos, que podrían exportarse a un archivo csv malicioso con una carga útil de ejecución de...