sockjs-dos-py

CVE-2020-7693: Meteor A demo Meteor app running the vulnerable sockjs has been included. To test the exploit on this demo app, install Meteor from https://www.meteor.com/install and then: cd demo/ meteor And then point the payload target to http://localhost:3000 Remediation Update SockJS to 0.3.2...

CVE-2026-119162: specialk User Submitted Posts – Enable Users to Submit Posts from the Front End: The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored…

The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'user-submitted-content' parameter in all versions up to, and including, 20260916 due to insufficient input sanitization and output...

security-onion

Security Onion Security Onion 16.04 has reached End Of Life: https://blog.securityonion.net/2021/04/security-onion-1604-has-reached-end-of.html You can find the new Security Onion 2 repo at: https://github.com/Security-Onion-Solutions/securityonion/...

unshackle

End of support ⚠ the project is now archived and will no longer be worked on because of the time that is needed to maintain this project and testing it on VMware in a not-so-good pc, Unshackle - Password Bypass Tool Unshackle is an open-source tool to bypass Windows and Linux user passwords from ...

BUI-select-xss

BUI-select-xss cve-2018-8108 During a security test, this issue was discovered by chance. BUI is a front-end framework used by many enterprises to build their own front-end applications. Typically, we prevent XSS by treating all user input as untrusted, escaping it during output, and then passing...

CVE-2025-55702

A flaw was found in Apache Traffic Server. When a client sends a POST request with an Expect header and the origin server responds before consuming the full body, Traffic Server incorrectly parses the remaining unread body as a subsequent request. A remote attacker behind a front-end proxy sharin...

EUVD-2026-111602

The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cmb43ex1grp0txt wysiwyg field inside group — field id controlled by integrator config' parameter in all versions up to, and including, 2.13.4 due to insufficient input sanitization and output escaping. This makes ...

CVE-2026-116761 CMB2 <= 2.13.4 - Unauthenticated Stored Cross-Site Scripting via Grouped WYSIWYG Field via Front-End Form

The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cmb43ex1grp0txt wysiwyg field inside group — field id controlled by integrator config' parameter in all versions up to, and including, 2.13.4 due to insufficient input sanitization and output escaping. This makes ...

CVE-2026-116761 CMB2 <= 2.13.4 - Unauthenticated Stored Cross-Site Scripting via Grouped WYSIWYG Field via Front-End Form

The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cmb43ex1grp0txt wysiwyg field inside group — field id controlled by integrator config' parameter in all versions up to, and including, 2.13.4 due to insufficient input sanitization and output escaping. This makes ...

CVE-2026-116761

The CMB2 plugin for WordPress (versions up to and including 2.13.4 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the cmb43ex1_grp[0][txt] parameter, which corresponds to a WYSIWYG field inside a repeatable group...

CVE-2026-108305

Tanium addressed a local privilege escalation vulnerability in End-User Notifications...

CVE-2026-108306

Tanium addressed a local privilege escalation vulnerability in End-User Notifications...

CVE-2026-108304

Tanium addressed a local privilege escalation vulnerability in End-User Notifications...

CVE-2026-108306 Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Tanium addressed a local privilege escalation vulnerability in End-User Notifications...

EUVD-2026-111262

Tanium addressed a local privilege escalation vulnerability in End-User Notifications...

CVE-2026-108306

Tanium addressed a local privilege escalation vulnerability in the End-User Notifications component. The underlying cause is identified as CWE-59: Improper Link Resolution Before File Access ('Link Following') . The vulnerability allows a local attacker with low privileges to potentially gain ele...

EUVD-2026-111258

Tanium addressed a local privilege escalation vulnerability in End-User Notifications...

CVE-2026-108304

Tanium addressed a local privilege escalation vulnerability within the End-User Notifications component. The issue is associated with CWE-59 (Improper Link Resolution Before File Access) and CWE-282 (Improper Ownership Management). Impact includes high levels of confidentiality, integrity, and av...

CVE-2026-108304 Tanium addressed a local privilege escalation vulnerability in End-User Notifications.

Tanium addressed a local privilege escalation vulnerability in End-User Notifications...

CVE-2026-108305

Tanium addressed a local privilege escalation vulnerability within the End-User Notifications component. The underlying cause is identified as Improper Link Resolution Before File Access (Link Following) (CWE-59). This vulnerability allows an attacker with low privileges to gain higher privileges...