505 matches found
BiblioRCE
An oversight within BiblioCraft which allows restricted server-side file manipulation. This method only requires BiblioCraft! Not too much trickery and no other mods are required to achieve code execution! CoreTweaks The original writeup focused on CoreTweaks can be found here. I recommend you re...
CVE-2025-43537
CVE-2025-43537 Apple Security Credit Researcher: Al Sadman Awal Officially credited by Apple Product Security for the responsible disclosure of CVE-2025-43537. Overview CVE-2025-43537 is a security vulnerability identified during independent security research and responsibly disclosed to Apple...
Cybersecurity-Books
Cybersecurity-Books Here you will get awesome collection of mostly all well-known and usefull cybersecurity books from beginner level to expert for all cybersecurity positions 1. CyberSecRoadmap 1.pdf 2. 21 days free CCNA complete videos.pdf 3. 101 Labs - CompTIA Linux+.pdf 4. 7839+ Awesome Deep...
CVE-2026-101110
CVE-2026-101110 — OrdaSoft Book Library Free unauthenticated SQL injection Python 3 PoC for CVE-2026-101110 — OrdaSoft Book Library Free for Joomla ≤ 6.4.6. Upgrade to 6.4.7+. | ---|--- PoCbit| https://pocbit.org/pocs/cve-2026-101110 Catalog| https://pocbit.org/pocs/ Component| combooklibrary Fil...
R00tLib-Catalog
📚 Open Tech Books Index A Community-Curated Knowledge Hub for Computer Science, Cybersecurity & Software Engineering 📖 About This repository is an open, community-driven catalog of premier technical books across computer science, cybersecurity, systems engineering, artificial intelligence, and...
CVE-2026-116017 Xiaozhi-esp32-server before 0.9.8 IDOR via device address-book endpoint
Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the manager-api DeviceController.getAddressBook handler that allows authenticated users to read other users' device address books. Attackers with a normal or self-registered account can request...
EUVD-2026-102504
MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that allows authenticated users to read documents from unauthorized books. Attackers holding a non-observer role on any book can name that book and iterate sequential document ids to...
CVE-2026-111364
The software MinDoc (versions through 2.2-beta.2 ) contains an Insecure Direct Object Reference (IDOR) vulnerability in the DocumentController.Content component. This flaw allows authenticated users with a non-observer role on any book to access and read markdown and HTML content from unauthorize...
CVE-2026-111364 MinDoc through 2.2-beta.2 IDOR via /api/:key/content/:id GET Branch
MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that allows authenticated users to read documents from unauthorized books. Attackers holding a non-observer role on any book can name that book and iterate sequential document ids to...
CVE-2026-111364 MinDoc through 2.2-beta.2 IDOR via /api/:key/content/:id GET Branch
MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that allows authenticated users to read documents from unauthorized books. Attackers holding a non-observer role on any book can name that book and iterate sequential document ids to...
CVE-2026-111364 MinDoc through 2.2-beta.2 IDOR via /api/:key/content/:id GET Branch
MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that allows authenticated users to read documents from unauthorized books. Attackers holding a non-observer role on any book can name that book and iterate sequential document ids to...
CVE-2026-108487
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hossni Mubarak Books Gallery wp-books-gallery allows Stored XSS.This issue affects Books Gallery: from n/a through 4.8.4...
CVE-2026-108487 WordPress Books Gallery plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hossni Mubarak Books Gallery wp-books-gallery allows Stored XSS.This issue affects Books Gallery: from n/a through 4.8.4...
EUVD-2026-98373
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hossni Mubarak Books Gallery wp-books-gallery allows Stored XSS.This issue affects Books Gallery: from n/a through 4.8.4...
CVE-2026-108487 WordPress Books Gallery plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hossni Mubarak Books Gallery wp-books-gallery allows Stored XSS.This issue affects Books Gallery: from n/a through 4.8.4...
CVE-2026-108487
The Hossni Mubarak Books Gallery (wp-books-gallery) WordPress plugin, versions up to and including 4.8.4 , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation. This vulnerability allows an attacker to inject ...
WordPress Books Gallery plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Books Gallery versions = 4.8.4...
PT-2026-111362
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hossni Mubarak Books Gallery wp-books-gallery allows Stored XSS.This issue affects Books Gallery: from n/a through 4.8.4...
CVE-2026-108487: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hossni Mubarak Books Gallery wp-books-gallery allows Stored XSS.This issue affects Books Gallery: from n/a through 4.8.4...