CVE-2022-46638

CVE-2022-46638 Se trata de una vulnerabilidad de AppLock Ver.5.6.2, una popular aplicación android en la que confían más de 100 millones de usuarios en más de 150 países. PoC Desbloquear la aplicación protegida por AppLock simplemente pulsando el botón de retroceso varias veces. 1. Abre la...

BestWebSoft's Twitter < 2.55 - Cross-Site Scripting

The twitter-plugin plugin before 2.55 for WordPress has XSS. id: CVE-2017-18505 info: name: BestWebSoft's Twitter 2.55 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The twitter-plugin plugin before 2.55 for WordPress has XSS. impact: | Authenticated attackers can...

CVE-2020-27603-bbb-libreoffice-poc

CVE-2020-27603-bbb-libreoffice-poc Proof of Concept of Libreoffice file exfiltration vulnerability in Big Blue Button These ODT files show how to exploit a file exfiltration vulnerability that can happen with server-side Libreoffice rendering, e.g. BigBlueButton. Background:...

CVE-2026-76982

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.form.Button clears the escape-model-strings flag in its constructor, so that the value attribute it writes is not encoded twice — ComponentTag already encodes attribute values when it write...

CVE-2026-76982

Apache Wicket is vulnerable to a cross-site scripting (XSS) issue in the Button component (and its subclasses AjaxButton, AjaxFallbackButton, and WizardButton). The root cause: the Button constructor clears the escape-model-strings flag to prevent double-encoding of the value attribute on elemen...

CVE-2026-76982 Apache Wicket: XSS in Button via its model object

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.form.Button clears the escape-model-strings flag in its constructor, so that the value attribute it writes is not encoded twice — ComponentTag already encodes attribute values when it write...

EUVD-2026-68489

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.form.Button clears the escape-model-strings flag in its constructor, so that the value attribute it writes is not encoded twice — ComponentTag already encodes attribute values when it write...

CVE-2024-25293

PoC de Ejecución de Código Local en MJML Una Prueba de Concepto para la vulnerabilidad CVE-2024-25293. Se descubrió que mjml-app v3.0.4 y 3.1.0-beta contienen una vulnerabilidad de ejecución remota de código RCE. En este repositorio hay una aplicación vulnerable de ejemplo y un exploit de prueba ...

CVE-2025-69581

CVE-2025-69581 An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personaldata endpoint exposes full sensitive user information even after logout because proper cache-control is missing. Using the browser back button restores all personal data, allowing unauthorized users on the...

TaskManager-Button-Disabler

TaskManager-Button-Disabler Modo semplice per disabilitare/rinominare i pulsanti dal task manager. Installazione root@kitploit: git clone https://github.com/Mrakovic-ORG/TaskManager-Button-Disabler cd TaskManager-Button-Disabler\TaskManager Button Disabler dotnet build Funzionalità Rinomina il...

CVE-2026-78285

Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...

CVE-2026-78285

WordPress Like Button Rating plugin (versions

CVE-2026-78285 WordPress Like Button Rating plugin <= 2.6.61 - SQL Injection vulnerability

Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...

EUVD-2026-66942

Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...

Centry

Centry चेतावनी: यह प्रायोगिक सॉफ्टवेयर है। इसमें बग होने की संभावना है। अपडेट्स यदि आपने पहले ही Centry स्थापित कर लिया है, तो नवीनतम संस्करण में अपडेट करने के लिए कृपया git pull चलाएँ। नवीनतम अपडेट इसे रीप्ले हमलों replay attacks के विरुद्ध अधिक सुरक्षित बनाते हैं। परिचय Centry एक पैनिक बटन है...

Bolt-CMS-3.6.2---Cross-Site-Scripting

Bolt CMS 3.6.2 - Vulnerabilità Cross-Site Scripting Bolt CMS 3.6.2 - Vulnerabilità Cross-Site Scripting CVE-2018-19933 https://vulners.com/cve/CVE-2018-19933 Prova di concetto Per sfruttare la vulnerabilità, Bolt CMS 3.6.2 consente XSS tramite l'input di testo facendo clic sul pulsante di...

WordPress Like Button Rating plugin <= 2.6.61 - SQL Injection vulnerability

SQL Injection vulnerability discovered by daroo in WordPress Plugin Like Button Rating versions = 2.6.61...

EUVD-2026-64891

RansomLook contains a stored cross-site scripting XSS vulnerability in the cryptocurrency wallet detail view. Cryptocurrency addresses and blockchain names originating from external sources, including the public crowd-sourced ransomwhe.re feed, were stored without sufficient validation and later...

Astra Linux – Vulnerability in Systemd

A issue was discovered in buttonopen in the login/logind-button.c file in systemd before version 243. When executing the udevadm trigger command, a memory leak may occur...

CVE-2026-18756 HumHub Community Edition 1.18.4-pl1 - Reflected XSS in Space membership request button rendering

HumHub Community Edition 1.18.4 contains a reflected cross-site scripting vulnerability in the Space membership-request workflow. An attacker can place attacker-controlled button configuration in the options query-string parameter of space/membership/request-membership-form, lure an authenticated...