Log4j_CVE-2021-45046

Log4j 2.15.0 Privilege Escalation -- CVE-2021-45046 Attack Discription It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map MDC input data when the logging...

CVE-2014-4378

CoreGraphics Information Disclosure - CVE-2014-4378 This article explores the exploitability of MobileSafari on IOS 7.1.x. Using a crafted PDF file as an HTML image makes it possible to leak information about the memory layout to the browser Javascript interpreter. Apple CoreGraphics library fail...

CVE-2026-2441-PoC

CVE-2026-2441-PoC CVE-2026-2441 PoC Chrome CSS Use-After-Free PoC Blink CSSFontFeatureValuesMap PoC triggering UAF in CSS processing → renderer RCE inside sandbox on Chrome =144.0.x all platforms. Trigger: @font-feature-values + container-query + forced layout recalc via offsetWidth in rAF loop →...

in-toto

in-toto in-toto provides a framework to protect the integrity of the software supply chain. It does so by verifying that each task in the chain is carried out as planned, by authorized personnel only, and that the product is not tampered with in transit. in-toto requires a project owner to create...

CVE-2026-128052

OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains an incorrect authorization vulnerability in the template filter's layout directive, which renders arbitrary layout handles without enforcing the admin/block whitelist that the block directive applies. Administrators...

CVE-2026-126491

OpenEMR before 8.5.0 contains a stored SQL injection vulnerability in getByPatientDemographics where layoutoptions fieldid values are concatenated into the patient search WHERE clause. Attackers with Layout Editor access can plant a malicious fieldid, allowing any authenticated low-privilege user...

EUVD-2026-125133

OpenEMR before 8.5.0 contains a stored SQL injection vulnerability in getByPatientDemographics where layoutoptions fieldid values are concatenated into the patient search WHERE clause. Attackers with Layout Editor access can plant a malicious fieldid, allowing any authenticated low-privilege user...

CVE-2026-128052

OpenMage magento-lts versions before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 are affected by an incorrect authorization vulnerability in the template filter's {{layout}} directive. The flaw allows the directive to render arbitrary layout handles without enforcing the admin/block whitelist ty...

CVE-2026-128052 OpenMage magento-lts before 20.19.0 Block Whitelist Bypass via {{layout}} Directive

OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains an incorrect authorization vulnerability in the template filter's layout directive, which renders arbitrary layout handles without enforcing the admin/block whitelist that the block directive applies. Administrators...

EUVD-2026-125057

OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains an incorrect authorization vulnerability in the template filter's layout directive, which renders arbitrary layout handles without enforcing the admin/block whitelist that the block directive applies. Administrators...

CVE-2025-55780

CVE-2025-55780 Null Pointer De-reference in MuPDF 1.26.4 EPUB Rendering Function CVE Reference - CVE-2025-55780 Affected Versions : 1.26.7 and before are affected Found and tested on : 1.26.4 Severity CVSSv3 score : 7.5 High Fixed in commit :...

kasld

KASLD recovers the Linux kernel's virtual and physical memory layout — primarily the kernel text base — from a local process. What it can recover is a function of that process's vantage: its privileges and capabilities, the system's configuration, and any container confinement. It recovers the ba...

PcapViz

PcapViz PcapViz draws networks as device topologies and as information flows using the packet information in pcap files captured from a network device using tcpcap or other capture software. It filters and optionally displays the captured packets at any one of 3 "layers". These are: device level...

drupal-htmx-attr

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · drupal-htmx-attr Write-up: https://abraxaslabs.tech/research/drupal-htmx-attr drupal-htmx-attr Class: Stored XSS Reach: Remote Drupal core 11.4.8 61044508 - Drupal SA-CORE-2026-011 closed HTMX attrs in Xss::attributes...

WordPress Page Layout builder v1.9.3 - Cross-Site Scripting

WordPress plugin Page-layout-builder v1.9.3 contains a cross-site scripting vulnerability. id: CVE-2016-1000141 info: name: WordPress Page Layout builder v1.9.3 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress plugin Page-layout-builder v1.9.3 contains a cross-site...

allthingsida

Operating system MS Windows PEB/LDRDATATABLEENTRY enumeration scripts PEB/TEB structures x64 PEB/TEB structures x86...

firefox: Frame poisoning in the Layout component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Frame poisoning in the Layout component...

firefox: Integer overflow in the Layout: Text and Fonts component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Layout: Text and Fonts component...

firefox: Incorrect boundary conditions in the Layout component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Layout component...

Xibo-CMS-Zip-Slip-RCE-Exploit-CVE-2023-33177

Xibo CMS Zip Slip RCE Exploit CVE-2023-33177 This exploit demonstrates a path traversal vulnerability in Xibo CMS CVE-2023-33177 that allows remote code execution through malicious layout imports. Vulnerability Details CVE/Advisory: CVE-2023-33177 Affected Versions: Xibo CMS 1.8.0 - 2.3.16 Xibo C...