57303 matches found
CVE-2026-88963
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via the 'redirecturl' parameter in versions up to, and including, 4.0.8 This is due to insufficient input validation in the Topbar component's back button handler. This makes ...
CVE-2026-88963
The Tutor LMS plugin for WordPress (versions up to and including 4.0.8 ) is vulnerable to DOM-Based Cross-Site Scripting (XSS) . The root cause is insufficient input validation within the Topbar component's back button handler specifically involving the 'redirect_url' parameter. This flaw allows ...
CVE-2023-37190
CVE-2023-37190 — Issabel-PBX 4.0.0-6: Stored Cross-Site Scripting XSS 📋 Overview Field| Details ---|--- CVE ID| CVE-2023-37190 Vulnerability| Stored Cross-Site Scripting XSS Affected Product| Issabel-PBX Affected Version| 4.0.0-6 Severity| Medium CVSS v3.1 Score: 5.4 Discovered By| Sahil Ojha...
purpleteam-orchestrator
purpleteam orchestrator Orchestrator component of purpleteam - Currently in alpha Clone this repository. cd to the repository root directory and run: npm install Configuration Copy the config/config.example.json to config/config.local.json. Use the config/config.js for documentation and further...
CVE-2018-6574
This repository does not have a README...
purpleteam-tls-checker
purpleteam-tls-checker TLS checking component of purpleteam...
purpleteam-server-scanner
purpleteam-server-scanner Server scanning component of purpleteam...
Issabel Authenticated - Remote Code Execution
A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...
Joomla! Component JInventory 1.23.02 - Local File Inclusion
A directory traversal vulnerability in jinventory.php in the JInventory comjinventory component 1.23.02 and possibly other versions before 1.26.03, a module for Joomla!, allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1305...
framework_base_AOSP10_r33_CVE-2021-0339
This repository does not have a README...
framework_base_AOSP10_r33_CVE-2021-39704
This repository does not have a README...
framework_base_AOSP10_r33_CVE-2021-0314
This repository does not have a README...
CVE-2014-6271
CVE-2014-6271...
CVE-2026-75898
CVE-2026-75898 — RAGFlow Invoke component SSRF Server-Side Request Forgery CWE-918 in RAGFlow's agent workflow "Invoke" component, before 0.26.3. | ---|--- CVE| CVE-2026-75898 CVSS| 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Fixed in| v0.26.3 Fix commits| c4fe68e, e16d1a0 Issue refs|...
CVE-2026-31431
Ubuntu 24.04.3 LTS Kernel: Linux 6.6.87.1-microsoft-standard-WSL2 Kali GNU/Linux Rolling Kernel: Linux 6.6.87.1-microsoft-standard-WSL2...
CVE-2026-31431
CVE-2026-31431 - Proof-of-Concept Linux algifaead page-cache write to root - Local Privilege Escalation Exploit Writeup https://websec.net/blog/cve-2026-31431-linux-algifaead-page-cache-write-to-root-69f38a4ccddd2db1f520f170 Notes We haven't fully tested yet the PoC, its based on public reference...
CVE-2025-24893
CVE-2025-24893...
CVE-2026-33017-Lab
CVE-2026-33017 — Langflow Unauthenticated RCE Lab Executive Summary CVE-2026-33017 is an Unauthenticated Remote Code Execution RCE vulnerability in Langflow where a public build endpoint accepts attacker-controlled flow data, allowing custom component code to be executed on the server. In this la...
CVE-2026-25769
CVE-2026-25769 what is CVE-2026-25769 ? CVE-2026-25769 is a critical Remote Code Execution RCE vulnerability in Wazuh, the open-source security platform used for threat prevention, detection, and response. what is wazuh ? Wazuh is a free and open-source security platform used for threat preventio...