CVE-2026-96578 GSpeech TTS <= 3.22.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content

The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.22.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-96578 GSpeech TTS <= 3.22.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content

The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.22.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

EchoDrv

EchoDrv ECHOACアンチチートドライバ echodriver.sys のカーネル読み取り/書き込み脆弱性を悪用することを可能にするツールです。 使用方法 使用例 スポンサー 私は POST Luxembourg で働いており、このプロジェクトの開発と維持に時間を割いていただいていることに感謝しています！ POSTのウェブサイト https://www.post.lu/business/produits-et-services/cyberforce をご覧ください。 クレジット Kite03 による echodriver.sys の脆弱性発見...

LdrLibraryEx

LdrLibraryEx DLL をメモリにロードするための小さな x64 ライブラリです。 特徴 依存関係と使用関数が少ない ntdll.dll のみを使用 位置独立コード 軽量かつ最小限 使いやすい メモリからモジュールをロード ディスクからモジュールをロード API セットのサポート イメージロードコールバックのバイパス プライベートメモリを使用 遅延インポート、TLS、SEH などを含むイメージのサポート ドキュメント ライブラリフラグ フラグは組み合わせることができます LIBRARYEXNONE: ディスクからモジュールをメモリにマップし、エントリポイントを実行します。...

CVE-2026-81740 Paytm Payment Gateway < 2.8.9 - Unauthenticated Order Status Manipulation via Payment Callback

The Paytm Payment Gateway WordPress plugin before 2.8.9 does not verify that payment callbacks genuinely originate from the payment provider when its secret key has not been configured, which is its state immediately after activation, allowing unauthenticated attackers to change the status of...

CVE-2026-81740

The Paytm Payment Gateway WordPress plugin in versions before 2.8.9 is vulnerable to unauthenticated order status manipulation. The root cause is a failure to verify that payment callbacks genuinely originate from the payment provider when the secret key has not been configured, which is the defa...

CVE-2026-81740 Paytm Payment Gateway < 2.8.9 - Unauthenticated Order Status Manipulation via Payment Callback

The Paytm Payment Gateway WordPress plugin before 2.8.9 does not verify that payment callbacks genuinely originate from the payment provider when its secret key has not been configured, which is its state immediately after activation, allowing unauthenticated attackers to change the status of...

CVE-2024-9593-Exploit

CVE-2024-9593-Exploit WordPress용 Time Clock 플러그인 및 Time Clock Pro 플러그인은 'etimeclockwploadfunctioncallback' 함수를 통해 Time Clock의 경우 1.2.2까지, Time Clock Pro의 경우 1.1.4까지의 버전에서 원격 코드 실행에 취약합니다. 이를 통해 인증되지 않은 공격자가 서버에서 코드를 실행할 수 있습니다. 호출되는 함수의 매개변수는 지정할 수 없습니다. 사용법: usage: CVE-2024-9593.py -h -u URL -p...

learning-management-system

learning-management-system Masteriyo - WordPress용 LMS = 1.6.7 - 민감한 정보 노출 플러그인 정보 Software Type Plugin Software Slug learning-management-system view on wordpress.org Patched? Yes Remediation Update to version 1.6.8, or a newer patched version Affected Version 1.6.8 Patched Version 1.6.8 CVS...

kemon

Kemon macOS 커널 모니터링을 위한 오픈 소스 사전 및 사후 콜백 기반 프레임워크. 속보 - 08/28/2019 macOS Catalina 10.15 Beta 7 릴리스 노트 https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes 엔드포인트 보안 kauth API가 제거되었습니다. 50419013 / 테스트 결과, 이러한 Kauth 인터페이스는 실제로 제거되지 않았으며 Kemon이 여전히 작동합니다. 하지만...

CLEANSTART-2026-CT85138 SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate

Security vulnerability affects the consul package. SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate...

CLEANSTART-2026-DB21450 When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as fo...

Security vulnerability affects the consul package. When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded...

CLEANSTART-2026-MT59352 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

CVE-2026-56854 affects multiple packages. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for individual vulnerability...

PT-2026-104258

YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the ajaxdeletepage handler, which permanently deletes a page on any GET request carrying a jsonp callback parameter without checking a CSRF token. Attackers can lure a logged-in administrator or page owner to a crafted li...

CVE-2026-96578: Improper Neutralization of Input During Web Page Generation

The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.22.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

PT-2026-104145

The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.22.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

nse-log4shell

nse-log4shell log4shell 또는 LogJam 취약점CVE-2021-44228을 확인하기 위한 Nmap NSE 스크립트입니다. NSE 스크립트는 인터넷에 노출된 가장 인기 있는 서비스를 확인합니다. 페이로드를 사용자 지정할 수 있는 기본 스크립트입니다. 예제 NSE 스크립트는 서비스에 요청만 보냅니다. Nmap은 취약한 호스트를 보고하지 않으므로 DNS 로그를 확인하여 취약 여부를 판단해야 합니다. 페이로드를 수동으로 지정하지 않으면 NSE 스크립트는 기본적으로 dnslog.cn을 사용합니다. 즉, 요청이...

SneeitScanner-CVE-2025-6389

SneeitScanner-CVE-2025-6389 SneeitScanner - Sneeit Framework의 비인증 RCE를 위한 PoC 및 스캐너 CVE-2025-6389 ⚡ SneeitScanner ⚡ Sneeit Framework 비인증 RCE를 위한 개념 증명PoC 및 자동화 스캐너 CVE-2025-6389 이 강력한 Python 스크립트는 Sneeit Framework = 8.3에 영향을 미치는 치명적인 비인증 원격 코드 실행RCE 취약점CVSS 9.8인 CVE-2025-6389 에 대한 기능적 PoC이자 스캐너...

GadgetProbe

설명 방금 Java 역직렬화 버그를 발견했고, 모든 ysoserial 페이로드를 실행했는데.... 아무것도 나오지 않았나요? 이제 어떻게 해야 할까요? 완전히 눈이 먼 상태에서 가젯 체인을 디버깅하거나 어떻게 구축할 수 있을까요? 원격 클래스패스에 빛을 비추고 모든 이들의 버그 심각도를 높여주는 도구, GadgetProbe를 소개합니다! GadgetProbe는 Java 클래스 워드리스트를 받아 직렬화된 DNS 콜백 객체를 출력하고, 원격 클래스패스에 숨어 있는 것이 무엇인지 보고합니다. Burp 확장 프로그램 사용법 Burp ...

Common-Registry-Jmp-RCX

Common-Registry-Jmp-RCX https://www.unknowncheats.me/forum/anti-cheat-bypass/501925-undetected-kernel-communication-method.html https://github.com/EBalloon/Common-Registry NTSTATUS stdcall DriverEntryPDRIVEROBJECT DriverObject, PUNICODESTRING RegistryPath char nvraidbase; // rax char...