DeeCLIP

DeeCLIP: A Robust and Generalizable Transformer-Based Framework for Detecting AI-Generated Images ☀️ If you find this work useful for your research, please kindly star our repo and cite our paper! ☀️ TODO We are working hard on the following items: Release ArXiv paper Release training scripts...

fubucker

Fubucker | CVE-2022-1386 - Fusion Builder Automatic Mass Tool for checking vulnerability in CVE-2022-1386 - Fusion Builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh Install JQ Linux : command apt-get install jq -y Windows : For WSL just d...

CVE-2022-1386

CVE-2022-1386 - Fusion Builder 3.6.2 - Unauthenticated SSRF Description Fusion Builder is a WordPress plugin that allows users to create and edit pages using a drag-and-drop interface. It is vulnerable to an unauthenticated SSRF that allows an attacker to read any file on the server. Proof of...

CVE-2022-1386-FusionBuilder-SSRF

CVE-2022-1386 – Fusion Builder Example: python3 exploitcve20221386.py https://vulnerable.site https://abc123.oast.fun Use Interact.sh or Burp Collaborator to receive the callback. 📋 Sample Output Fetching nonce from target... Sending SSRF payload to https://abc123.oast.fun... + SSRF confirmed:...

Oracle WebLogic Server - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services is susceptible to a remote code execution vulnerability that is easily exploitable and could allow unauthenticated attackers with network access via HTTP to compromise the server. Supported versions...

PHP-Fusion 9.03.50 - Remote Code Execution

PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user not admin to send a crafted request to the server and perform remote command execution. id: CVE-2020-24949 info: name: PHP-Fusion 9.03.50 - Remote Code Execution author: geeknik severity: high description: PHP-Fusion 9.03.50...

Oracle Fusion Middleware WebCenter Sites - Cross-Site Scripting

The Oracle WebCenter Sites component of Oracle Fusion Middleware is susceptible to multiple instances of cross-site scripting that could allow unauthenticated attackers with network access via HTTP to compromise Oracle WebCenter Sites. Impacted versions that are affected are 11.1.1.8.0, 12.2.1.2....

Oracle Business Intelligence - Path Traversal

Oracle Business Intelligence versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0 are vulnerable to path traversal in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. id: CVE-2019-2588 info: name: Oracle Business Intelligence - Path...

PT-2026-104080

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'lang' parameter in all versions up to, and including, 7.16.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

Security Bulletin: Vulnerability in bcprov-jdk18on bundled with IBM Fusion and IBM Fusion HCI.

Summary IBM Fusion and IBM Fusion HCI include the bcprov-jdk18on library, which is affected by multiple vulnerabilities, including improper certificate validation, improper validation of integrity check value, and denial of service vulnerabilities. CVE-2026-12185, CVE-2026-12803, CVE-2026-12816,...

signalops

Signal OPS A full-spectrum, all-source signal intelligence fusion platform for security research and training. Signal OPS pulls dozens of open collection sources — WiFi/Bluetooth/cell-tower databases, internet-exposure scanners, camera indexes, ADS-B flight feeds, satellite TLE tracking, and...

security-research

Security Research A collection of files related to my personal security research. Additional content will be posted on my blog https://blog.mirch.io. Tools Tool| Description ---|--- openssldircheck| Windows utility to check for potential insecure paths used by the OPENSSLDIR build parameter in...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM FileNet Content Manager(FNCM) 5.6.0-IF009 and 5.7.0-IF006 for September 2026

Summary IBM FileNet Content ManagerFNCM 5.6.0-IF009 and 5.7.0-IF006 addresses CVEs across components including CPE, GraphQL, External share and Content Based Search Vulnerability Details CVEID:CVE-2026-60412 DESCRIPTION: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion...

CVE-2026-90974

The WP Fusion Lite WordPress plugin before 3.48.0 does not require authentication on a settings handler that runs during admin initialization, allowing unauthenticated users to overwrite the site's CRM integration endpoint and credentials, after which synced user data is delivered to an...

CVE-2026-90972

The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers, allowing any authenticated subscriber to read other users' email addresses and to trigger a cross-user CRM re-sync...

EUVD-2026-90515

The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers, allowing any authenticated subscriber to read other users' email addresses and to trigger a cross-user CRM re-sync...

CVE-2026-90974 WP Fusion Lite 3.37.14 - 3.47.14 - Unauthenticated CRM Integration Settings Update

The WP Fusion Lite WordPress plugin before 3.48.0 does not require authentication on a settings handler that runs during admin initialization, allowing unauthenticated users to overwrite the site's CRM integration endpoint and credentials, after which synced user data is delivered to an...

CVE-2026-90972 WP Fusion Lite < 3.48.0 - Subscriber+ User Email Disclosure and Cross-User CRM Data Deletion

The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers, allowing any authenticated subscriber to read other users' email addresses and to trigger a cross-user CRM re-sync...

WordPress WP Fusion Lite plugin < 3.48.0 - Unauthenticated CRM Integration Settings Update vulnerability

Unauthenticated CRM Integration Settings Update vulnerability discovered by Naoki Kawahigashi in WordPress Plugin WP Fusion Lite versions 3.48.0...

CVE-2026-90972

The WP Fusion Lite WordPress plugin, in versions prior to 3.48.0 , contains a vulnerability where it fails to perform a capability check on two of its admin AJAX handlers . This security oversight allows any authenticated subscriber to access sensitive information, specifically enabling them to r...