CVE-2026-104722

The Listdom: AI-powered Business Directory with Classifieds Ads Listings WordPress plugin is vulnerable to arbitrary file deletion in versions up to and including 6.1.2 . The root cause is insufficient file path validation within the LSD_Menus_IX_CSV::import function, specifically involving the i...

CVE-2026-104722 Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 6.1.2 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'ix[file]' Parameter

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the LSDMenusIXCSV::import function in all versions up to, and including, 6.1.2 This makes it possible for authenticate...

EUVD-2026-96299

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the LSDMenusIXCSV::import function in all versions up to, and including, 6.1.2 This makes it possible for authenticate...

SuperDiagnosticTool

SuperDiagnosticTool Outil de diagnostic et d'auto-réparation Windows alimenté par l'IA SuperDiagnosticTool est un utilitaire de diagnostic système intelligent qui combine la télémétrie matérielle en temps réel avec Google Gemini AI pour analyser, diagnostiquer et corriger automatiquement les...

pentx-vapt-skill

🔥 Pentx — Advanced VAPT Skill AI-Powered Penetration Testing Agent for Pi Coding Agent Pentx is an advanced 5-phase VAPT Vulnerability Assessment & Penetration Testing skill that executes full penetration testing and generates detailed Proof-of-Concept for every finding. 📸 Screenshots Tool Check|...

LDAPRecon-AI

LDAPRecon-AI Auditeur de sécurité LDAP Active Directory avec analyse basée sur l'IA Énumérez, évaluez et notez la posture de sécurité de votre environnement AD Anglais | Français | | | \ / \ | | \ / \ | | | | | | | |/ \ | | | | / / / | ' \ / \ | | | || || / | /| AVERTISSEMENT / DISCLAIMER Cet...

Mahoraga-Webapp-Defender

Mahoraga Webapp Defender Système de défense d'application Web réactif alimenté par l'IA, conçu pour résister aux piratages par IA en temps réel. Table des matières Mahoraga Webapp Defender Table des matières Introduction Site Web cible Architecture du défenseur Mahoraga Double environnement...

robin

Robin: AI 기반 다크웹 OSINT 도구 Robin은 다크웹 OSINT 조사를 수행하기 위한 AI 기반 도구입니다. LLM을 활용하여 쿼리를 정제하고, 다크웹 검색 엔진의 검색 결과를 필터링하며, 조사 요약을 제공합니다. 설치 • MCP로서의 Robin • 문제 해결 • 기여 • 감사의 글 아키텍처 기능 🤖 다중 모델 지원 – OpenAI, Claude, Gemini, Mistral, OpenRouter, Ollama 또는 모든 OpenAI 호환 APILM Studio, llama.cpp, Groq 등. 🌐 웹 UI –...

Agentic-Bug-Hunter

Охота за баг-баунти на базе ИИ — от разведки до отчёта, прямо в вашем терминале. Что это такое · Нам доверяют · Бесплатная настройка · Быстрый старт · Команды · Что он находит · AXguard · Поддержка · FAQ Создано и поддерживается AwareXone · Сайт · X · GitHub Единый шлюз к ведущим мировым ИИ-модел...

Nebula AI-Powered Penetration Testing 0.1.0

Nebula is an advanced, AI-powered penetration testing open-source tool that revolutionizes penetration testing by integrating state-of-the-art AI models into your command-line interface. Designed for cybersecurity professionals, ethical hackers, and developers, Nebula automates vulnerability...

CVE-2026-96647

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsdremark' Parameter in all versions up to, and including, 6.1.1 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-96647 Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 6.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lsd[remark]' Parameter

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsdremark' Parameter in all versions up to, and including, 6.1.1 due to insufficient input sanitization and output escaping. This makes it possible for...

EUVD-2026-91255

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsdremark' Parameter in all versions up to, and including, 6.1.1 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-96647

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 6.1.1 . The root cause is insufficient input sanitization and output escaping of the 'lsd[remark]' parameter. This a...

CVE-2026-96647 Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 6.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lsd[remark]' Parameter

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsdremark' Parameter in all versions up to, and including, 6.1.1 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2026-104146

Name of the Vulnerable Software and Affected Versions Listdom: AI-powered Business Directory with Classifieds Ads Listings versions prior to 6.1.2 Description Stored Cross-Site Scripting XSS occurs due to insufficient input sanitization and output escaping. Authenticated attackers with...

CVE-2026-96647: Improper Neutralization of Input During Web Page Generation

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsdremark' Parameter in all versions up to, and including, 6.1.1 due to insufficient input sanitization and output escaping. This makes it possible for...

Microsoft Disrupts AI-Powered EvilTokens Service Linked to 12,000 Hacked Inboxes

Microsoft disrupted EvilTokens after the AI-powered phishing service compromised 12,000 inboxes across 10,000 organisations and enabled complex financial fraud...

CVE-2026-84098

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not properly verify a listing's ownership before deleting it, allowing authenticated attackers with Subscriber-level access and above to delete arbitrary listings, including ones belonging...

CVE-2026-84150

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not verify that the target user of a REST route matches the authenticated caller before reading and modifying that user's saved favorites, allowing any authenticated user with...