7875 matches found
Exploit for CVE-2026-57829
Helix Ultimate Framework — Unauthenticated Stored XSS comaja...
Malicious code in note-utilities (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f093c8536c89f9d6c524ae212051fc45a5244d910afd8ee3abe30698f15b75d The package masquerades as a pino-style logger keywords fast/logger/stream/json; lib/ contents copied from pinojs/pino but ships an additional loader...
MAL-2026-10330 Malicious code in ishowfeet9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248f82bac5fecfd3cc8e27d3c4cc6f48f310aef9c069e64cc33a407cd79369bb The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
BIT-JOOMLA-2026-48955 Joomla! Core - [20260709] - Incorrect Access Control in com_workflow
An improper access check allows unauthorized users to access workflow stage and transition information...
BIT-JOOMLA-2026-48952 Joomla! Core - [20260706] - XSS in com_installer
Lack of escaping leads to an XSS vulnerability in the update list view of cominstaller...
BIT-JOOMLA-2026-48948 Joomla! Core - [20260702] - Incorrect Access Control in com_contact vcf download
An improper access check allows user to download vcard exports of comcontact contacts that are inaccessible...
CVE-2026-55780
NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's .NET single-file bundle handler in NanaZip.Codecs.Archive.DotNetSingleFile.cpp sizes its extraction buffer from the bundle entry Size field, which is only checked for sign and is not validat...
EUVD-2026-42956
NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's .NET single-file bundle handler in NanaZip.Codecs.Archive.DotNetSingleFile.cpp sizes its extraction buffer from the bundle entry Size field, which is only checked for sign and is not validat...
Windows UAC Bypass — CMSTPLUA COM
UAC bypass via CMSTPLUA COM object ShellExecute runas — CLSID 3E5FC7F9-9A51-4367-9063-A120244FBEC7. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.post.windows.uacbypass import UACAGENT, UacBypassMixin class ModulePost, UacBypassMixin: info = "name": "Windows UAC Bypas...
org.webjars.npm:draft-js (>=0.9.0, <=0.11.7), org.webjars.npm:github-com-marmelab-restful-js (0.9.6) +2 more potentially affected by CVE-2026-59879 via org.webjars.npm:immutable (3.7.6)
org.webjars.npm:immutable MAVEN version 3.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:immutable and may be impacted: - org.webjars.npm:draft-js =0.9.0, =0.5.5, =0.8.10 - org.webjars.npm:rc-editor-plugin-image 0.0.3 Source cves:...
org.webjars.npm:draft-js (>=0.9.0, <=0.11.7), org.webjars.npm:github-com-marmelab-restful-js (0.9.6) +2 more potentially affected by CVE-2026-59880 via org.webjars.npm:immutable (3.7.6)
org.webjars.npm:immutable MAVEN version 3.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:immutable and may be impacted: - org.webjars.npm:draft-js =0.9.0, =0.5.5, =0.8.10 - org.webjars.npm:rc-editor-plugin-image 0.0.3 Source cves:...
CVE-2026-48957
An improper access check allows unauthorized users to access comprivacy datasets...
CVE-2026-48950
Lack of escaping leads to an XSS vulnerability in the file management view of comtemplates...
CVE-2026-48950
Lack of escaping leads to an XSS vulnerability in the file management view of comtemplates...
EUVD-2026-42070
Lack of escaping leads to an XSS vulnerability in the update list view of cominstaller...
CVE-2026-48952
CVE-2026-48952 affects Joomla core, specifically the com_installer update list view. Root cause is lack of escaping, resulting in an XSS vulnerability. CVSS 4.0 base score 8.4 ( HIGH ) with network attack vector, low attack complexity, high impact to confidentiality and integrity, and low impact ...
CVE-2026-48952 Joomla! Core - [20260706] - XSS in com_installer
Lack of escaping leads to an XSS vulnerability in the update list view of cominstaller...
CVE-2026-48947 Joomla! Core - [20260701] - Incorrect Access Control in com_media webservice endpoints
An improper access check allows privileged users to overwrite media files without editing permissions...