EUVD-2026-80189

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the specific post they request schema generation for, allowing users with the contributor role and above to obtain the content of other users' draft, pending, private and password...

CVE-2026-5920

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'shortcodecontent' parameter of the btbbshortcode shortcode in all versions up to, and including, 5.9.6. This is due to a bypassable security filter btbbsavepre that can be circumvented via null byte...

changedetection.io

自动检测网站变化 — 实时监控网页变化 监控网站更新 — 通过 Discord、电子邮件、Slack、Telegram、Webhook 等多种方式获取通知。 检测网页内容变化并即时获取警报。 非常适合监控价格变化、内容编辑、条件变化等。 立即开始监控网页变化。没有时间？试试我们每月 $8.99 的订阅，使用我们的代理并获得支持！ , 价格只有其他网站变更监控服务的一半！ 内置 Chrome 浏览器。 无需安装任何东西，注册后通过浏览器登录即可访问。 超级快速，无需注册即可完成设置。 立即开始监控并接收网站变更通知。 查看我们的教程和操作指南页面，获取更多灵感 AI 驱动的网站变更检测 —...

EUVD-2026-80070

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/aguistrands/utils.py of the component Multimodal Content. The manipulation of the argument Value results in server-side request forger...

EUVD-2026-80048

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7 content management pages that use eval sinks, affecting the call board text and policy group handling components. Attackers can inject persistent script payloads through these pages to have malicious cod...

strutsy

Strutsy Strutsy - Apache Struts（CVE-2017-5638）漏洞的大规模利用工具。包含盲注 和基于时间的代码注入 技术，可显著减少漏报。其他功能包括大量 URL 导入，可一次扫描多个目标。 使用方法： python strutsy.py urls.txt windows/linux/default ip-address 所有参数均为必填项。 1. urls.txt - 包含待测试 URL 的文件。 2. platform - 应包含 windows/linux/default 三者之一。如果不确定是 windows 还是 linux 环境，请使用...

CVE-2026-92184

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/aguistrands/utils.py of the component Multimodal Content. The manipulation of the argument Value results in server-side request forger...

CVE-2025-56379

CVE-2025-56379 — ERPNext 15.67.0 / Frappe 15.72.4 中的存储型跨站脚本（XSS）漏洞 📌 摘要 ERPNext（v15.67.0）/ Frappe（v15.72.4）的博客模块中存在一个存储型跨站脚本（XSS）漏洞。可以创建或编辑博客文章的身份验证用户可以在 content 字段中注入精心构造的 HTML/JavaScript。该负载会被存储，并在任何查看博客文章页面的用户的浏览器中执行，从而允许任意脚本执行、信息泄露、拒绝服务和其他客户端攻击。管理员权限并非 严格要求——任何有权创建/编辑博客文章的用户均可利用该漏洞。 🛠 技术细节...

Linux Distros Unpatched Vulnerability : CVE-2026-92042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92042

Race condition in the DOM: Content Processes component. This vulnerabi...

Linux Distros Unpatched Vulnerability : CVE-2026-64753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, vision...

GitLab 19.0 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-19619)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an...

Linux Distros Unpatched Vulnerability : CVE-2026-84635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27,...

UBUNTU-CVE-2026-92042

Race condition in the DOM: Content Processes component. This vulnerabi...

Linux Distros Unpatched Vulnerability : CVE-2023-54397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content- Length headers accepting non-standard characters...

CVE-2026-92184

A server-side request forgery (SSRF) vulnerability exists in ag-ui-protocol ag-ui 0.3.0 , affecting the function urllib.request.urlopen in the file integrations/aws-strands/python/src/ag_ui_strands/utils.py within the Multimodal Content component. Manipulation of the argument Value enables the fl...

CVE-2026-92184 ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/aguistrands/utils.py of the component Multimodal Content. The manipulation of the argument Value results in server-side request forger...

CVE-2026-92184 ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/aguistrands/utils.py of the component Multimodal Content. The manipulation of the argument Value results in server-side request forger...

CVE-2026-92257

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7 content management pages that use eval sinks, affecting the call board text and policy group handling components. Attackers can inject persistent script payloads through these pages to have malicious cod...

CVE-2026-92257 Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting in L7 Content Management via eval() Sinks

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7 content management pages that use eval sinks, affecting the call board text and policy group handling components. Attackers can inject persistent script payloads through these pages to have malicious cod...