CVE-2026-32571

Subscriber Cross Site Scripting XSS in Ohio Extra = 3.6.8 versions...

CVE-2026-32571 WordPress Ohio Extra plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Ohio Extra = 3.6.8 versions...

CVE-2026-32571

The WordPress Ohio Extra plugin, specifically versions

EUVD-2026-93234

Subscriber Cross Site Scripting XSS in Ohio Extra = 3.6.8 versions...

CVE-2022-28346

CVE-2022-28346 PoC Impacto: Posible inyección SQL en QuerySet.annotate, aggregate y extra. Instalación poetry install python manage.py makemigrations python manage.py migrate python manage.py loaddata data.json python manage.py runserver PoC ?field=poc.title" FROM "pocblog" union SELECT...

Ocean Extra <= 2.4.6 - Unauthenticated Shortcode Execution

The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.6. This is due to the software allowing users to supply arbitrary shortcodes in the contentrechdata parameter that is then executed. This makes it possible for...

WordPress Ocean Extra <1.9.5 - Cross-Site Scripting

WordPress Ocean Extra plugin before 1.9.5 contains a cross-site scripting vulnerability. The plugin does not escape generated links which are then used when the OceanWP theme is active. id: CVE-2021-25104 info: name: WordPress Ocean Extra 1.9.5 - Cross-Site Scripting author: Akincibor severity:...

puppeteer-extra

puppeteer-extra Este es el monorepo de puppeteer-extra, un framework de plugins modular para puppeteer. :- 🌟 Para la documentación principal, dirígete al paquetepuppeteer-extra. También hemos introducido recientemente soporte para Playwright; si te interesa, dirígete a playwright-extra. Monorepo...

CVE-2022-28346

CVE-2022-28346 Inyección SQL en QuerySet.annotate, aggregate y extra Configuración: Ejecuta ./setup.sh para la configuración inicial Abre la imagen de Docker para iniciar la base de datos: docker exec -it containerid /bin/bash Y ejecuta los siguientes comandos: python manage.py makemigrations...

nishang

Nishang Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. By Nikhil Mittal Founder of Altered Security - Hands-on red team and...

CVE-2022-28346

CVE-2022-28346 Inyección SQL en Django QuerySet.annotate, aggregate, extra Inicialización del entorno 1.python manage.py makemigrations 2.python manage.py migrate 3.访问http://x.x.x.x:8000/ 插入初始化数据 Reproducción de la vulnerabilidad 访问http://x.x.x.x:8000/demo POC:...

CVE-2023-43353-CMSmadesimple-Stored-XSS---News---Extra

CMSmadesimple XSS Almacenado v2.2.18 Autor: Sergio Descripción: La vulnerabilidad de Cross Site Scripting en CMSmadesimple v.2.2.18 permite a un atacante local ejecutar código arbitrario mediante un script manipulado en el campo Extra del menú Content - News. Vectores de ataque: Una vulnerabilida...

CVE-2023-44766_ConcreteCMS-Stored-XSS---SEO

ConcreteCMS XSS Almacenado v.9.2.1 Autor: Sergio Descripción: La vulnerabilidad de Cross Site Scripting en ConcreteCMS v.9.2.1 permite a un atacante local ejecutar código arbitrario mediante un script manipulado en el campo SEO - Extra de Page Settings. Vectores de ataque: Scripting. Una...

CVE-2026-20516

CVE-2026-20516: MiracastService confused deputy on Android TV Research and disclosure by Davide Di Matteo @Dingo97. This is my first credited CVE. I found an improperly exported, system-privileged Miracast service while researching a PEAQ Android TV. A caller can supply an intent extra that makes...

WordPress Ohio Extra plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Ohio Extra versions = 3.6.8...

Emerson Dixell XWEB-500 - Arbitrary File Write

Emerson Dixell XWEB-500 contains an arbitrary file write caused by unauthenticated access to /cgi-bin/logoextraupload.cgi, /cgi-bin/calsave.cgi, and /cgi-bin/loutils.cgi, letting attackers write any file on the system, exploit requires no authentication. id: CVE-2021-45420 info: name: Emerson...

[SECURITY] Fedora 45 Update: compiz-plugins-extra-0.8.18-18.fc45

The Compiz Fusion Project brings 3D desktop visual effects that improve usability of the X Window System and provide increased productivity though plugins and themes contributed by the community giving a rich desktop experience. This package contains additional plugins from the Compiz Fusion Proj...

CVE-2023-3519

CVE-2023-3519 Porque puedes ejecutar powershell en el PC de tu mamá sin tener que instalar NMAP ni PYTHON ni contarle a nadie que usas ARCH! ; x...

CVE-2026-102392

Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...

CVE-2026-102392 WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...