RTF-Cleaner

RTF-Cleaner RTF Cleaner, tries to extract URL from malicious RTF samples using CVE-2017-0199 & CVE-2017-8759...

freedomfighting

Freedom Fighting scripts This repository contains scripts which may come in handy during your freedom fighting activities. It will be updated occasionally, when I find myself in need of something I can't find online. Everything here is distributed under the terms of the GPL v3 License...

RTF-Cleaner

RTF-Cleaner RTF de-obfuscator for CVE-2017-0199 documents to find URLs statically. Use this tool to statically find URLs in obfuscated RTF documents. Usage: .\rtfCleanerUniversal.ps1 path-to-file Example: .\rtfCleanerUniversal.ps1 'C:\Users\yams\Downloads\invoiceForYams.doc' If the built in...

RHLW-2026-66F17E66F457E38B Lightwell Security Advisory: jsoup 1.16.1.rhlw-00004

Red Hat Lightwell has released org.jsoup:jsoup 1.16.1.rhlw-00004 with backported fixes for CVE-2026-71497 and CVE-2026-75140. CVE-2026-71497: jsoup: Cleaner may expose markup with custom raw-text elements CVE-2026-75140: jsoup Uncontrolled Resource Consumption in XmlTreeBuilder This patched...

RHLW-2026-1AF9ECF859C7DFB4 Lightwell Security Advisory: jsoup 1.17.1.rhlw-00007

Red Hat Lightwell has released org.jsoup:jsoup 1.17.1.rhlw-00007 with backported fixes for CVE-2026-71497 and CVE-2026-75140. CVE-2026-71497: jsoup: Cleaner may expose markup with custom raw-text elements CVE-2026-75140: jsoup Uncontrolled Resource Consumption in XmlTreeBuilder This patched...

cpanel-malware-cleaner-cve-2026

cPanel malware, CVE-2026-41940, virus removal 🚨 cPanel Malware Cleaner – CVE-2026-41940 Fix Tool A lightweight and powerful security tool to detect, remove, and prevent malware infections caused by recent cPanel vulnerabilities including CVE-2026-41940. 🔥 Features Detects and removes malware,...

RHLW-2026-DC6BB5CBBFC647ED Lightwell Security Advisory: jsoup 1.22.1.rhlw-00002

Red Hat Lightwell has released org.jsoup:jsoup 1.22.1.rhlw-00002 with backported fixes for CVE-2026-71497 and CVE-2026-75140. CVE-2026-71497: jsoup: Cleaner may expose markup with custom raw-text elements CVE-2026-75140: jsoup Uncontrolled Resource Consumption in XmlTreeBuilder This patched...

CVE-2025-8574

The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including, 1.4.7. This is due to a lack of restriction on database tables that can be deleted. This makes it possible for authenticated attackers, with Administrator-level access and...

EUVD-2025-211228

The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including, 1.4.7. This is due to a lack of restriction on database tables that can be deleted. This makes it possible for authenticated attackers, with Administrator-level access and...

CVE-2025-8574 Database Cleaner <= 1.4.7 - Authenticated (Administrator+) Arbitrary Table Deletion

The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including, 1.4.7. This is due to a lack of restriction on database tables that can be deleted. This makes it possible for authenticated attackers, with Administrator-level access and...

CVE-2025-8574

The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to and including 1.4.7 . The root cause is a lack of restriction on which database tables can be deleted. This allows authenticated attackers with Administrator-level access and above to delete ...

Best Practical Solutions RT for Incident Response Cross-site Scripting Vulnerability

Versions 5.0.0 through 5.0.11 and 6.0.0 through 6.0.4 of Best Practical Solutions RT contain a cross-site scripting vulnerability. This vulnerability arises because the HTML cleaner in the RT extension for RT allows internal link placeholders without filtering links that contain only such...

WordPress Database Cleaner: Cleanup, Optimization & Repair plugin <= 1.4.7 - Authenticated (Administrator+) Arbitrary Table Deletion vulnerability

Authenticated Administrator+ Arbitrary Table Deletion vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Database Cleaner versions = 1.4.7...

CVE-2025-8574: tigroumeow: The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and…

The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including, 1.4.7. This is due to a lack of restriction on database tables that can be deleted. This makes it possible for authenticated attackers, with Administrator-level access and...

PT-2026-133687

The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including, 1.4.7. This is due to a lack of restriction on database tables that can be deleted. This makes it possible for authenticated attackers, with Administrator-level access and...

SUSE CVE-2026-114349

When a broker decodes a compressed record batch, the per-record decoder reads a declared body size from the decompressed stream and allocates a buffer of that size before validating it against the bytes available or any configured limit. The size is attacker-controlled, and the batch CRC does not...

RHEL 6 : python-lxml (RHSA-2026:90336)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:90336 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

UBUNTU-CVE-2026-114349

When a broker decodes a compressed record batch, the per-record decoder reads a declared body size from the decompressed stream and allocates a buffer of that size before validating it against the bytes available or any configured limit. The size is attacker-controlled, and the batch CRC does not...

CVE-2026-114349

Apache Kafka is vulnerable to a Denial of Service (DoS) via unbounded memory allocation when decoding compressed record batches. An authenticated attacker with Write permissions can send a small, CRC-valid compressed request that declares a massive body size (up to 2 GiB ). The broker allocates a...

CVE-2026-114349 Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches

When a broker decodes a compressed record batch, the per-record decoder reads a declared body size from the decompressed stream and allocates a buffer of that size before validating it against the bytes available or any configured limit. The size is attacker-controlled, and the batch CRC does not...