CVE-2026-28622

In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73969

In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28622

CVE-2026-28622 affects the Media Provider component in Android's Project Mainline, specifically in getQueryBuilderInternal of MediaProvider.java. A permissions bypass allows retrieval of location metadata , resulting in local information disclosure with no additional execution privileges or user ...

CVE-2026-28622

In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

rinhit

RinHit RinHit - macOS 生态系统侦察框架。从 Apple 生态系统中收集痕迹，构建网络活动、跨设备身份和物理位置关联的时间线。 这是开源侦察模块。闭源 Swift 载荷（rinhit-agent）由我们的红队内部使用，不属于本仓库。 功能 Wi-Fi 网络侦察 - 解析 com.apple.wifi.known-networks.plist（旧版）或使用 networksetup（macOS 15+ Data Vault） 蓝牙设备 - 来自 com.apple.Bluetooth.plist 的已配对、缓存和已连接设备 USB 设备历史 - 通过 ioreg...

cve-2026-42945-scan

cve-2026-42945-scan NGINX設定ファイル用の静的スキャナで、CVE-2026-42945に関連するrewrite/setパターンを検出します。 このスキャナはcrossplaneを使用してNGINX設定を解析し、locationブロックを走査して、影響を受けていると思われるすべてのlocationを次の形式で出力します: root@kitploit: //xxx.conf: - location XXXXX 例: root@kitploit: /path/to/nginx.conf:39 - location ^/api/.$ 参照:...

openhaystack

OpenHaystack OpenHaystack is a framework for tracking personal Bluetooth devices via Apple's massive Find My network. Use it to create your own tracking tags that you can append to physical objects keyrings, backpacks, ... or integrate it into other Bluetooth-capable devices such as notebooks...

CVE-2026-18741

CVE-2026-18741 - Worksuite SaaS における保存型XSS 概要 CVE-2026-18741 は、Worksuite SaaS のバージョン 6.0.14 未満に影響する保存型XSSの脆弱性です。 この問題は資産管理モジュールに存在します。 ユーザーが制御する入力は、以下のようなフィールドを通じて保存される可能性があります: 場所 説明 保存された入力は、影響を受ける資産が表示された際に後でレンダリングされ、攻撃者が制御するJavaScriptが、資産を表示しているユーザーのブラウザコンテキストで実行される可能性があります。 影響を受けるバージョン...

EUVD-2026-70905

The WPFunnels WordPress plugin before 3.13.0 does not restrict access to the log files it writes to a predictable location under the public uploads directory, allowing unauthenticated users to download customer order details and opt-in form submissions when logging is enabled...

CVE-2026-85207

A vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0. Impacted is an unknown function of the file /index.php?q=orderdetails. Such manipulation of the argument location leads to cross site scripting. The attack may be launched remotely. The exploit is publicly availab...

CVE-2026-49456

Waku is the minimal React framework. Prior to version 1.0.0-beta.1, the unstableredirect helper exported from waku/router/server packages/waku/src/router/define-router.tsx:156–161 accepts an arbitrary string and reflects it unchanged into the HTTP Location response header with no URL validation,...

EUVD-2026-70700

A vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0. Impacted is an unknown function of the file /index.php?q=orderdetails. Such manipulation of the argument location leads to cross site scripting. The attack may be launched remotely. The exploit is publicly availab...

CVE-2026-85207

A reflected cross-site scripting (XSS) vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0 , specifically in an unknown function of the file /index.php?q=orderdetails . Manipulation of the location argument enables an attacker to inject arbitrary scripts. The attack i...

CVE-2026-49456

Waku (the minimal React framework) prior to version 1.0.0-beta.1 is vulnerable to an open redirect via the unstable_redirect() helper in waku/router/server. The function reflects user-supplied strings unchanged into the HTTP Location header with no URL validation, scheme restriction, or path-only...

Smart Contracts Claimed Vulnerable by the CVE Database, with Labels and Source Locations

The Common Vulnerabilities and Exposures CVE database catalogs vulnerability claims in hard- and software, among them those pertaining to blockchain programs a.k.a. smart contracts. We present CVE-Smart-Contracts, a curated dataset of CVE records up to July 2026 referring to Ethereum smart...

PT-2026-84533

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.1 Description An unauthenticated SQL injection exists in the User Location plugin. The endpoints 'regions.json.php' and 'cities.json.php' fail to properly escape or bind the country and region GET parameters before...

ASB-A-484928416

In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-42990

Snipe-IT's API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation...

CVE-2026-78071

DP Calendar is a Joomla extension by digital-peak.com. Versions 7.0.0 through 10.11.2 are affected by an authenticated, privileged stored XSS . The root cause is that the location title is rendered in a data attribute without proper escaping. Exploitation requires an authenticated user with the c...

CVE-2026-78071 Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0

Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0 - Location title is rendered in data attribute without escaping leads to XSS, needs create permission in DPCalendar...