CVE-2026-78333

The 12 Step Meeting List WordPress plugin before 3.19.17 does not sanitise and escape a value submitted by unauthenticated users before storing it in its activity log and outputting it back in an admin area page, leading to a Stored Cross-Site Scripting issue which could be used against high...

m33tfinder

M33tfinder - это инструмент для обнаружения активных диапазонов идентификаторов конференций на сервере Cisco Meeting Server. M33tbreak - это инструмент для проверки слабых кодов доступа к конференциям на сервере Cisco Meeting Server. Pins.txt содержит, например, четырёхзначные коды доступа. Эти...

CVE-2026-78333 12 Step Meeting List 3.17 - 3.19.16 - Unauthenticated Stored XSS via Geocode Event Log

The 12 Step Meeting List WordPress plugin before 3.19.17 does not sanitise and escape a value submitted by unauthenticated users before storing it in its activity log and outputting it back in an admin area page, leading to a Stored Cross-Site Scripting issue which could be used against high...

EUVD-2026-66885

The 12 Step Meeting List WordPress plugin before 3.19.17 does not sanitise and escape a value submitted by unauthenticated users before storing it in its activity log and outputting it back in an admin area page, leading to a Stored Cross-Site Scripting issue which could be used against high...

CVE-2026-78333

The 12 Step Meeting List WordPress plugin (versions 3.17 through 3.19.16 ) contains a Stored Cross-Site Scripting (XSS) vulnerability. An unauthenticated user can inject a malicious payload via the Geocode Event Log , which is stored unsanitised in the plugin's activity log and later rendered in ...

WordPress 12 Step Meeting List Plugin <= 3.14.33 - Cross-Site Scripting

Code for Recovery 12 Step Meeting List versions up to 3.14.33 contain a reflected cross-site scripting caused by improper input neutralization during web page generation, letting attackers execute malicious scripts in users' browsers, exploit requires attacker to craft a malicious URL. id:...

cve-2023-23397

CVE-2023-23397 此脚本允许创建 TNEF 编码的 Outlook 电子邮件，其中包含 CVE-2023-23397 漏洞利用载荷，并通过纯 SMTP 发送——无需 COM 对象或 EWS。 我未能让 IPM.Schedule.Meeting.Request 消息类正常工作（它同时生成了会议和提醒，但出于某种原因不遵守 PidLidReminderOverride 属性），因此该脚本滥用了 IPM.TaskRequest 类。这会产生一个恶意的会议提醒弹出窗口，就像原始漏洞利用一样，但收件人无法查看消息正文或会议详情。而在 OWA 中，该电子邮件看起来就像一封没有约会的普通消...

Tangled

Tangled Tangled è una piattaforma di phishing progettata da una prospettiva di sicurezza offensiva. Automatizza molti aspetti della consegna di campagne di ingegneria sociale e arma le funzionalità di rendering iCalendar in Microsoft Outlook e Gmail Google Workspace per fornire inviti di riunione...

CVE-2023-23397-POC-Powershell

CVE-2023-23397-POC-Powershell Skriptfunktionen zum Senden oder Speichern von Kalender-NTLM-Leckagen mithilfe der Option ReminderSoundFile. Führen Sie das Skript aus, um die Funktionen in Powershell zu laden. Anschließend können Sie die folgenden Beispiele als Ausgangspunkt für die Verwendung der...

tangalanga

Tangalanga Escaneador de conferências Zoom. Este escaneador verificará um ID de reunião aleatório e retornará informações se disponível. Instalação Primeiro, tente verificar se há alguma versão pré-compilada para a data: https://github.com/elcuervo/tangalanga/releases. Estas versões já possuem um...

tangalanga

Tangalanga Zoom Conference scanner. This scanner will check for a random meeting id and return information if available. Install First try to see if there's any prebaked version for the date: https://github.com/elcuervo/tangalanga/releases. This versions already have a token ready to use. Either...

CVE-2026-66584

Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...

CVE-2026-66584

An unauthenticated Cross-Site Scripting (XSS) vulnerability affects the WordPress plugin 12 Step Meeting List in versions 3.19.16 and earlier , as reported by researcher V1T via PatchStack. The CVSS 3.1 base score is 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, indicating a ne...

EUVD-2026-64830

Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...

CVE-2026-66584 WordPress 12 Step Meeting List plugin <= 3.19.16 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...

12 Step Meeting List < 3.19.17 - Unauthenticated Stored Cross-Site Scripting

Description The 12 Step Meeting List plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.19.16. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

Zoom-dll-hijacking

Zoom-dll-hijacking Una vulnerabilità di DLL hijacking in Zoom Meeting 5.1.3 Versioni di Windows interessate Windows 7 o precedenti Windows Server 2008 Qualsiasi altro sistema Windows che non ha SHCore.dll presente. Utilizzo Copia dbghelper.dll e SHCore.dll nella seguente posizione...

CVE-2026-55489

BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton presenters could submit a presentationId through /api/graphql that identified a presentation belonging to another meeting...

EUVD-2026-63683

BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton presenters could submit a presentationId through /api/graphql that identified a presentation belonging to another meeting...

CVE-2026-55491 BigBlueButton: Stored XSS in Screenshare Recording Playback via Unescaped Meeting Name

BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton failed to escape meetingName in record-and-playback/screenshare/playback/index.html.erb when generating the screenshare playback format. A low-privileged user could store a crafted meeting name that embedded script...