CVE-2026-105124 W (wcms) through 3.18.0 Unauthenticated Stored XSS via Login Username and Comments

W vincent-peugnet/wcms through 3.18.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the login user field and visitor comment website field. Attackers can submit failed logins rendered unescaped in the adminlog.php log viewer, or...

CVE-2026-105124

The W (vincent-peugnet/wcms) content management system, versions through 3.18.0 , is vulnerable to unauthenticated stored XSS . The root cause is the lack of input sanitization in the login user field and the visitor comment website field . Attackers can inject scripts via failed login attempts, ...

multicast_bytecopy

multicastbytecopy Este código se publica para investigadores de seguridad, no utilices este código para ningún propósito a menos que sepas lo que estás haciendo. multicastbytecopy es un exploit de lectura/escritura del kernel para iOS 15.0 - 15.1.1 por @jaakerblom y el sucesor espiritual de...

PT-2026-104589

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-103764: Untrusted Pointer Dereference

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

Rocky Linux 8 [CIQ] Security Update: libiscsi / libiscsi-debuginfo / libiscsi-debugsource / etc Multiple Vulnerabilities (crlsa-2020_4059)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20204059 advisory. QEMU: usb: out-of-bounds r/w access issue while processing usb packets CVE-2020-14364 QEMU: slirp: networking out-of-bounds read information disclosure...

Rocky Linux 8 [CIQ] Security Update: edk2-aarch64 / edk2-ovmf Multiple Vulnerabilities (crlsa-2024_3017)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243017 advisory. edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message CVE-2023-45235 EDK2: heap buffer overflow in Tcg2MeasureGptTable...

RelapseEx

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

My-relapse-exploit-ps5

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

exploit

FORK OF ntfargo last commit PS5 Relapse Exploit Supported f...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

ps5

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...

exploit

PS5 Relapse Exploit — by Muhammad Yaser Supported firmware: 7...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60...