57306 matches found
Security-CVE-2026-41940-cPanel-WHM-WP2
This repository does not have a README...
CVE-2026-0766
CVE-2026-0766: OpenWebUI Remote Code Execution Educational Security Research Repository This repository contains proof-of-concept exploitation code for CVE-2026-0766 , a remote code execution vulnerability in OpenWebUI discovered and published by the Zero Day Initiative ZDI. ⚠️ Disclaimer This...
CVE-2026-0770-PoC
CVE-2026-0770 - Langflow Remote Code Execution Summary Langflow contains a critical remote code execution vulnerability in the validatecode function located in src/lfx/src/lfx/custom/validate.py. The function uses exec to execute user-supplied Python code without sandboxing, allowing arbitrary...
CVE-2026-7089-XSS
home-service-system-unauth-stored-xss-admin-takeover Vulnerability Details Field| Details ---|--- Vendor| code-projects.org Product| Home Service System In PHP Version| 1.0 Vulnerability Type| Stored Cross-Site Scripting XSS CWE| CWE-79 Authentication Required| No Author| Imad Alvi Description A...
CVE-2026-28466
Affected versions: OpenClaw 2026.2.14 Official advisory: https://github.com/advisories/GHSA-gv46-4xfq-jv58...
CVE-2026-26198
CVE-2026-26198...
CVE-2026-23745-via-graphql-DEMO
This repository does not have a README...
CVE-2026-27507
CVE-2026-27507...
CVE-2025-51869
CVE-2025-51869 Vulnerability description Liner is a reliable AI search engine with over 10 million users worldwide. Liner construct a search engine based on LLM, which is vulnerable to Insecure Direct Object Reference IDOR in its chat component. An attacker can exploit this IDOR to tamper other...
audit-kernel
Linux Kernel Audit Subsystem https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git https://github.com/linux-audit/audit-kernel The Linux Audit subsystem provides a secure logging framework that is used to capture and record security relevant events. It consists of a kernel component...
hostap
This is not the development location for hostap.git. See the upstream project at https://w1.fi/...
https-nj.gov---CVE-2018-14040
https-nj.gov---CVE-2018-14040 Vulnearability Report of the New Jersey official site In Bootstrap prior to 4.1.2, XSS is possible in the main collapse data attribute. The data-target attribute and the data-parent attribute is vulnerable to Cross-Site Scripting attacks. Test RECOMMENDATION The fix...
CVE-2026-106149
In Progress® Kendo® UI for jQuery prior to v2026.3.1015, the Menu component constructs HTML attributes from bound dataSource fields by string concatenation without proper neutralization. An attacker with low privileges who can control these fields can inject JavaScript event-handler attributes th...
Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257
Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257...
CVE-2020-18324
Subrion CMS 4.2.1 – Reflected XSS vulnerability in Kickstart template Description Subrion CMS is easy to install and simple to manage. Use it as a stand-alone application or in conjunction with other applications to create entry level sites, mid-sized or large sites. The Reflected Cross-site...
CVE-2025-55998
CVE-2025-55998 Summary Vulnerability Details| CVE-2025-55998 ---|--- Type| XSS Title| Reflected XSS in Mezereon's Smart Search and Filter app for Shopify and BigCommerce Product impacted| Smart Search and Filter app Impacted version| 1.0 not fixed CVSS Score| TBD Author| Ocmenog Description A lac...
CVE-2024-34312
CVE-2024-34312 Description Virtual Programming Lab for Moodle up to v4.2.3 was discovered to contain a Cross-Site Scripting XSS vulnerability via its IDE component. Additional Details The browser connects directly to a websocket running on the jail server. Through the websocket, the jail server c...
CVE-2010-2387
CVE-2010-2387 Version: https://github.com/GNOME/gdm/tree/2799f52e01354944c0f464aa93bc5adfbc6bc0e8...
EUVD-2026-102076
In Progress® Kendo® UI for jQuery prior to v2026.3.1015, the Menu component constructs HTML attributes from bound dataSource fields by string concatenation without proper neutralization. An attacker with low privileges who can control these fields can inject JavaScript event-handler attributes th...