CVE-2026-105291

The software feelec-yishu feelcrm-os 1.0.0 contains a cross-site scripting (XSS) vulnerability in the Department Search Endpoint component. The root cause is located in the GroupController::index function within the file App/Feelcrm/Index/Controller/GroupController.class.php, where the manipulati...

CVE-2025-64459-Poc

CVE-2025-64459: Django ORM SQL Injection PoC Vulnerability: SQL Injection via QuerySet and Q keyword argument unpacking. CVE ID: CVE-2025-64459 Discovered By: Me Cyberstan Disclosure Date: November 5, 2025 🚨 Executive Summary This repository contains a Dockerized Proof of Concept PoC demonstratin...

CVE-2026-105291: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController::index of the file App/Feelcrm/Index/Controller/GroupController.class.php of the component Department Search Endpoint. The manipulation of the argument keyword leads to cross...

PT-2026-104799

A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController::index of the file App/Feelcrm/Index/Controller/GroupController.class.php of the component Department Search Endpoint. The manipulation of the argument keyword leads to cross...

CVE-2023-51504

CVE-2023-51504 MotoCMS SQL 인젝션익스플로잇 DB 참조의 도커화된 재현입니다. 설명 MotoCMS 버전 3.4.3 SQL 인젝션: 링크 https://template189526.motopreview.com/store/category/search/?keyword=1 에서 keyword 파라미터를 통해 발생 취약점 재현은 Dockerfile에서 칼리 리눅스 머신을 재현하고 sqlmap을 실행하여 취약점 결과를 탐지 및 표시하는 데 필요한 명령어나 지침을 정의하는 과정을 포함했습니다. 결과를 얻으려면 다음 명령어...

Teamsniper

Teamsniper Teamsniper は、Microsoft Teams 内のキーワード（パスワード、メール、データベースなど）を取得するためのツールです。 使用方法 ヘルプオプション usage: Teamsniper.py -h -d DATABASE -a AUTHTOKEN -s SEARCH Teamsniper is a tool for fetching the given keywords in Microsoft Teams. options: -h, --help show this help message and exit -d DATABASE,...

awsScrape

AWSScrape AWSScrapeは、すべてのAWS IPレンジからSSL証明書をスクレイピングし、証明書のCommon Name（CN）、Organization（O）、Organizational Unit（OU）フィールド内で特定のキーワードを検索するように設計されたツールです。 インストール 1. このリポジトリをクローンします: git clone https://github.com/jhaddix/awsscrape.git cd awsscrape 使用方法 スクリプトを次のように実行します: go run awsscrape.go -keyword= 引数| 説明...

ThreatHunting-Keywords

ThreatHunting-Keywords 🎯 ThreatHuntingセッションのためのキーワードリスト Table of Contents Threat Huntingとは Threat Huntingの利点 Threat Huntingと中核サービスの連携 検出成熟度レベル インテリジェンス収集の主要フォーカス領域 ターゲット型Threat Huntingプロセス ファイル ブルーチーム向けThreatHunting-Keywords レッドチーム向けThreatHunting-Keywords ルックアップの内容 SIEMを使ったハント rawログ 特定フィールド 速度...

Rocky Linux 9.6 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc (ALMALINUX9.6:CLSA-2026:1788887546)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788887546 advisory. - In sshd in OpenSSH before 10.5, the restrict keyword in authorizedkeys was supposed to be applicable to tunnel forwarding but was not...

AlmaLinux 9.6 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc (ALMALINUX9.6:CLSA-2026:1788887546)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788887546 advisory. - In sshd in OpenSSH before 10.5, the restrict keyword in authorizedkeys was supposed to be applicable to tunnel forwarding but was not...

CVE-2026-85644

A flaw was found in perl-XS-Parse-Keyword. This vulnerability allows an attacker to cause a Denial of Service DoS or potentially execute arbitrary code by supplying crafted input to an affected application. The issue occurs because the module improperly validates arguments for list-associative...

OPENSUSE-SU-2026:11863-1 perl-XS-Parse-Keyword-0.500.0-1.1 on GA media

These are all security issues fixed in the perl-XS-Parse-Keyword-0.500.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-61851 Chartbrew: Incomplete Read-Only Keyword Blocklist in AI runQuery Tool

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.2, Chartbrew's runQuery implementation in server/modules/ai/orchestrator/tools/runQuery.js attempts to enforce read-only database access with a blocklist...

WordPress Pochipp plugin <= 1.20.2 - Reflected Cross-Site Scripting via 'keyword' Parameter vulnerability

Reflected Cross-Site Scripting via 'keyword' Parameter vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin Pochipp versions = 1.20.2...

openssh: OpenSSH: Tunnel forwarding restriction bypass

A flaw was found in OpenSSH's sshd component. The restrict keyword, designed to limit tunnel forwarding within the authorizedkeys file, was not correctly enforced for tunnel forwarding. This issue could allow a local attacker to bypass intended security restrictions, potentially leading to...

OESA-2026-3926 openssh security update

An open source implementation of SSH protocol version 2 Security Fixes: In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.CVE-2026-73282 In sshd in OpenSSH before 10.5, the restrict keyword in authorizedkeys...

CVE-2026-92967

The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'keyword' parameter in versions up to, and including, 1.20.2. This is due to insufficient output escaping , which reads $GET'keyword', applies only sanitizetextfield which strips tags but leaves double quotes...

EUVD-2026-83479

The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'keyword' parameter in versions up to, and including, 1.20.2. This is due to insufficient output escaping , which reads $GET'keyword', applies only sanitizetextfield which strips tags but leaves double quotes...

CVE-2026-92967 Pochipp <= 1.20.2 - Reflected Cross-Site Scripting via 'keyword' Parameter

The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'keyword' parameter in versions up to, and including, 1.20.2. This is due to insufficient output escaping , which reads $GET'keyword', applies only sanitizetextfield which strips tags but leaves double quotes...

CVE-2026-92967

CVE-2026-92967 affects the Pochipp WordPress plugin in versions up to and including 1.20.2 . The vulnerability is a Reflected Cross-Site Scripting flaw in the keyword parameter. The root cause is insufficient output escaping: the code reads $_GET['keyword'], applies only sanitize_text_field() (wh...