CVE-2026-104313: Improper Neutralization of Input During Web Page Generation

The WPC Estimated Delivery Date for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ruledata' parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

Azure-AD-Password-Checker

Azure AD Password Checker 在 Azure AD 环境中，无需任何特殊权限即可确定用户是否已禁用多重身份验证 MFA。这可以通过分析账户的创建日期和上次密码更改日期来实现。 如果账户的创建日期和时间与其上次密码更改日期和时间一致，则可能表明自账户创建以来未发生任何人机交互，且用户无法启用多重身份验证 MFA 或更改其密码。此外还有其他“异常”，例如密码更改日期早于创建日期。这也表明，由于用户尚未创建，因此无法启用多重身份验证 MFA！ 2023 年 10 月 16 日更新： 两个用户在同一时间更改密码的可能性有多大？这可以视为另一种 MFA...

WordPress WPC Estimated Delivery Date for WooCommerce plugin <= 4.0.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os in WordPress Plugin WPC Estimated Delivery Date for WooCommerce versions = 4.0.1...

CVE-2026-102626 LimeSurvey Community Edition 7.4.0 - Stored XSS through the Date/Time date_min question attribute

An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-breaking value in the datemin attribute of a Date/Time question. When another user renders the affected question, LimeSurvey inserts the stored value into a single-quoted...

CVE-2026-102626 LimeSurvey Community Edition 7.4.0 - Stored XSS through the Date/Time date_min question attribute

An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-breaking value in the datemin attribute of a Date/Time question. When another user renders the affected question, LimeSurvey inserts the stored value into a single-quoted...

CVE-2026-102626 LimeSurvey Community Edition 7.4.0 - Stored XSS through the Date/Time date_min question attribute

An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-breaking value in the datemin attribute of a Date/Time question. When another user renders the affected question, LimeSurvey inserts the stored value into a single-quoted...

CVE-2023-3519

CVE-2023-3519 Escáner de NetScaler Citrix ADC CVE-2023-3519 Un escáner simple para encontrar netscalers y ver la fecha de última modificación en el encabezado de la respuesta HTTP este proyecto es un escáner hecho por mí en C usando el código fuente de mrr3b00t en powershell...

CVE-1999-0524

CVE-1999-0524 一个 Bash 脚本，用于检查系统是否存在 ICMP 时间戳请求远程日期泄露（CVE-1999-0524）漏洞。 使用方法 1. 确保 hping3 已安装并在你的 PATH 中。 2. 创建一个包含目标地址的文件，使用 IPv4 格式，每个目标占一行。 3. 赋予脚本可执行权限 4. 运行 targets.txt 示例文件 cat targets.txt 127.0.0.1 127.0.1.1 10.10.10.10 运行脚本 sudo ./CVE-1999-0524.sh targets.txt...

Rocky Linux 10.0 [CIQ] Security Update: libsoup3 / libsoup3-debuginfo / libsoup3-debugsource / etc (crlsa-2025_18183)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202518183 advisory. libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library CVE-2025-11021 Tenable has extracted the preceding description block directly from t...

Rocky Linux 8 [CIQ] Security Update: libsoup / libsoup-debuginfo / libsoup-debugsource / libsoup-devel Multiple Vulnerabilities (crlsa-2025_19714)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202519714 advisory. libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup CVE-2025-4945 libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP...

Rocky Linux 10.1 [CIQ] Security Update: libsoup3 / libsoup3-debuginfo / libsoup3-debugsource / etc Multiple Vulnerabilities (crlsa-2025_21032)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202521032 advisory. libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup CVE-2025-4945 libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HT...

CVE-2026-96836

Unauthenticated Cross Site Scripting XSS in Parsi Date = 6.3 versions...

EUVD-2026-89888

Unauthenticated Cross Site Scripting XSS in Parsi Date = 6.3 versions...

CVE-2026-96836

The Parsi Date WordPress plugin versions

CVE-2026-96836 WordPress Parsi Date plugin <= 6.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Parsi Date = 6.3 versions...

CVE-2026-96836 WordPress Parsi Date plugin <= 6.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Parsi Date = 6.3 versions...

CVE-2026-96836: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Parsi Date = 6.3 versions...

AlmaLinux 9.6 [TuxCare] Security Update: perl-Date-Manip (ALMALINUX9.6:CLSA-2026:1788263623)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788263623 advisory. - Date::Manip versions through 7.00 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substitution in parsetime...

Rocky Linux 9.6 [TuxCare] Security Update: perl-Date-Manip (ALMALINUX9.6:CLSA-2026:1788263623)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788263623 advisory. - Date::Manip versions through 7.00 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substitution in...

Malicious Package

Overview uuid-date is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...