CVE-2026-101018

A vulnerability was determined in dayrui XunruiCMS up to 4.7.2. This issue affects the function groupalledit of the file dayrui/App/Member/Controllers/Admin/Home.php of the component Group Editing. This manipulation of the argument groupid causes sql injection. The attack is possible to be carrie...

CVE-2026-101018

The dayrui XunruiCMS software, version up to 4.7.2 , contains a SQL injection vulnerability within the Group Editing component. The flaw exists in the group_all_edit function of the file dayrui/App/Member/Controllers/Admin/Home.php , where insufficient sanitization of the groupid argument allows ...

EUVD-2026-88203

A vulnerability was determined in dayrui XunruiCMS up to 4.7.2. This issue affects the function groupalledit of the file dayrui/App/Member/Controllers/Admin/Home.php of the component Group Editing. This manipulation of the argument groupid causes sql injection. The attack is possible to be carrie...

CVE-2021-38602

CVE-2021-38602 Una vulnerabilidad de cross site scripting almacenado está presente en la página de edición de artículos de la versión 5.8.7 de PluXML. La entrada del usuario no se sanitiza correctamente en varios campos. Campos vulnerables: Título opcional: Contenido: Una vez insertado, el XSS...

APKLab

APKLab La experiencia definitiva de ingeniería inversa de Android directamente en tu VS Code. APKLab integra perfectamente las mejores herramientas de código abierto: Apktool, smali-lsp, Jadx, uber-apk-signer, apk-mitm y más en el excelente VS Code para que puedas centrarte en el análisis de...

filessh

FileSSH Un explorador de archivos basado en TUI para servidores SSH, que te permite navegar y gestionar archivos en un servidor remoto, editarlos en el mismo lugar y descargar directorios de forma recursiva con recorrido paralelo de directorios. También tiene la capacidad de iniciar rápidamente...

PyMemoryEditor

PyMemoryEditor A pure-Python library built on ctypes that lets you inspect, modify and search the memory of any running process in a few lines of Python — Cheat Engine workflows on Windows, Linux and macOS! Read, write and scan the memory of any process — straight from Python. One unified API...

tcpreplay

Tcpreplay Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Windows under Cygwin for editing and replaying network traffic previously captured by tools like and . It classifies traffic as client or server, rewrites Layer 2/3/4 headers, and replays it back onto the network through...

CVE-2025-25062

CVE-2025-25062 Description Usage Example Timeline Description A Stored Cross-Site-Scripting XSS vulnerability exists in the Backdrop CMS 1.29.2 post edit page. This script chains the vulnerability with a CSRF payload to achieve privilege escalation from the role of 'Editor' to 'Administrator'...

CVE-2020-29254

CVE-2020-29254 TikiWiki 21.2 permite editar plantillas sin el uso de una protección CSRF. ========================== Falsificación de Petición entre Sitios CSRF: TikiWiki 21.2 permite editar plantillas sin el uso de una protección CSRF. Esto podría permitir que un atacante remoto no autenticado...

CVE-2024-42758

CVE-2024-42758 Existe una vulnerabilidad de Cross-site Scripting XSS en la versión v2024-01-05 del plugin indexmenu cuando se utiliza y está habilitado en Dokuwiki Motor de Wiki de Código Abierto. Un atacante malintencionado puede introducir payloads XSS, por ejemplo, al crear o editar una página...

CVE-2026-93643

When OnlyOffice/Document Editing is available, an unauthenticated remote attacker with access to an existing supported public Briefcase document can abuse unsigned save fields to perform path-traversal writes and execute commands as zimbra...

EUVD-2026-87101

When OnlyOffice/Document Editing is available, an unauthenticated remote attacker with access to an existing supported public Briefcase document can abuse unsigned save fields to perform path-traversal writes and execute commands as zimbra...

IDArling

Advertencia Este proyecto ya no está en desarrollo activo y el fork más completo y actualizado probablemente sea más interesante para los recién llegados. Además, IDA ha anunciado soporte oficial para sesiones de ingeniería inversa colaborativas y también se podría esperar por esto. Resumen...

FeatMark: Feature-Level Watermark Protection against Mimicry Attacks with Diffusion Models

Text-to-image diffusion models enable data-efficient "mimicry" attacks, wherein adversaries fine-tune the model on a handful of public photos to synthesize convincing forgeries of a target individual. A common countermeasure is to embed imperceptible, low-energy watermarks, yet recent studies sho...

CVE-2026-70481

CVE-2026-70481 Open WebUI, affected 0.5.0 through 0.10.2, patched in 0.11.0. Moderate, CVSS 5.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L, CWE-284 and CWE-862. In backend/openwebui/routers/channels.py the message update and delete handlers branch on the channel type, and the two branches ask...

Stego-Lab

Stego-Lab Steganography. EXIF. Watermarks. Decode. Batch. Professional image privacy workflows for iPhone, iPad, and macOS. Website · GitLab · Project Page · Privacy Policy · Press Kit · Support · License Why Stego-Lab Stego-Lab brings together workflows that are usually scattered across multiple...

Linux Distros Unpatched Vulnerability : CVE-2026-95360

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Editing. CVE-2026-95360 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc...

CVE-2026-2586

Inyección EL Autenticada en GlassFish RCE CVE-2026-2586 Una vulnerabilidad de Inyección de Lenguaje de Expresiones en la Consola de Administración de GlassFish permite a un usuario autenticado inyectar expresiones EL maliciosas en los parámetros procesados por la interfaz web administrativa. Una...

CVE-2026-93975 code-projects Assessment Management User Editing edit-user.php cross site scripting

A vulnerability has been found in code-projects Assessment Management 1.0. This impacts an unknown function of the file admin/edit-user.php of the component User Editing. The manipulation of the argument name/sname/email/username/password/id leads to cross site scripting. The attack may be...