CVE-2026-85015: Improper Limitation of a Pathname to a Restricted Directory

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise file paths inside uploaded archives before extracting them, allowing authenticated users with access to its asset-management feature Administrators by default, or Editors when a non-default Unlimited Elements fo...

EUVD-2026-91790

UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQueryBuilder that allows authenticated attackers to inject arbitrary SQL by supplying malicious assetType and groupName values that are inserted unsanitized into a native PostgreSQL query via String.forma...

Hexestra

Orchestrate your pentest. An AI-native penetration testing workbench where you and AI agents work together to accelerate your pentest workflow. Download · Watch the demo · Get started · Discord English · 简体中文 Why Hexestra? Hexestra aims to make penetration testing smoother for you and your agent...

CVE-2026-69083_exploit

CVE-2026-69083 — Неаутентифицированная SQL-инъекция в SiYuan Неаутентифицированная SQL-инъекция в SiYuan приложении для создания базы знаний на Go через конечную точку поиска по содержимому ресурсов. POST /api/search/fullTextSearchAssetContent формирует необработанный SQL-запрос, конкатенируя...

LambdaGuard

LambdaGuard AWS Lambda est une plateforme de calcul sans serveur, pilotée par les événements, fournie par Amazon Web Services. Il s'agit d'un service de calcul qui exécute du code en réponse à des événements et gère automatiquement les ressources de calcul nécessaires à ce code. LambdaGuard est u...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-64317)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505984; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-23399)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505977; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-53268)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505992; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-64411)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid506005; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-43089)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505973; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-53275)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505963; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-64423)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505988; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

w12scan-client

w12scan-client Движок поиска и обнаружения сетевых активов, масштабная идентификация активов, дипломный проект, клиентская программа w12scan Идея дизайна Идея клиента заключается в том, что он обрабатывает только те данные url, ip, которые получил, не выполняя автоматических переходов по...

CVE-2020-4463

IBM Maximo Asset Management уязвим к раскрытию информации через XXE-уязвимость CVE-2020-4463 IBM Maximo Asset Management уязвим к атаке с внедрением внешних XML-сущностей XXE при обработке XML-данных. Удаленный злоумышленник может использовать эту уязвимость для раскрытия конфиденциальной...

Treck20-Related

Treck20-Related PoC pour CVE-2020-11896 Pile TCP/IP Treck et investigation d'actifs de périphériques Inspection de la pile protocolaire Comme de nombreux fabricants adoptent la pile protocolaire Treck, certains y font référence via des IP cores matériels. Il ne suffit pas d'identifier les...

NetAlertX v26.10.0

NetAlertX - Network Visibility & Asset Intelligence Framework !mainmain 📷 Click for more screenshots !Main screenmain| !devicedetails 1devicedetails| !Screen networknetwork ---|---|--- !presencepresence| !maintenancemaintenance| !settingssettings !synchubsynchub| !report1report1|...

ThreatSentry-AI

ThreatSentry AI : Outil de chasse aux menaces piloté par IA Automatisez la découverte d'actifs externes, enrichissez intelligemment avec des données multi-sources et exploitez l'apprentissage automatique d'ensemble pour prédire et prioriser les risques. Transformez la fatigue liée aux alertes en...

CVE-2026-102630

UnoPim versions before 2.0.1 and 2.1.1 trust all connecting clients as proxies and honor the X-Forwarded-Host header without validation, allowing unauthenticated attackers to inject arbitrary origins into admin layout pages. Attackers can set X-Forwarded-Host to redirect JavaScript asset loading ...

local-gov-sqli-poc-and-remediation

Penetration Testing PoC and Portfolio — Luqman Hadi Autho...

CVE-2026-7395

Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to information disclosure and integrity compromise. The HTTPPublishAdapterTestServlet is specifically meant for testing purposes to be used in a non-production...