log4j2burpscanner

SOLO PER TEST, NON ATTACCARE NESSUNO SOLO PER TEST, NON ATTACCARE NESSUNO SOLO PER TEST, NON ATTACCARE NESSUNO Gruppo di discussione Se il QR code non è più valido, aggiungi su WeChat f-f0ng, con nota log4j2burpscanner comunicazione Segui l'account ufficiale della pagina principale only security,...

ghidra-mtk-loader

Loader md1img di MediaTek per Ghidra Loader Ghidra per il formato immagine firmware modem md1img di MediaTek. Attualmente è supportato solo il firmware basato su nanoMIPS, ma le funzionalità di base potrebbero comunque funzionare se si sceglie manualmente un'architettura diversa ad es. MIPS duran...

CVE-2026-107657

The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '' parameter in all versions up to, and including, 1.7.31 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-workhorse-ee-fips, ingress-nginx-controller, tigera-operator, commercial-grafana, commercial-spilo-fips, reports-server, aactl, loki, telegraf, spire-server, kube-conformance, commercial-chainloop-cli, nemo-gym, frankenphp-8.4, nemo, consul-k8s,...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, rancher-agent, opencost, flux, step, k6, grafana-alloy, openbao, gitlab-pages, gitness, zarf, hubble-ui, external-dns, cert-manager, ingress-nginx-controller, cloudprober, juicefs, karpenter, mesosphere-vsphere-csi, rancher,...

GO-2026-6604 vulnerabilities

Vulnerabilities for packages: falco-no-driver, ingress-nginx-controller, karpenter, kubernetes, loki, flux, cert-manager, aactl, spire-server, k8s-device-plugin, external-dns...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, rancher-agent, opencost, flux, step, k6, grafana-alloy, openbao, gitlab-pages, gitness, zarf, hubble-ui, external-dns, cert-manager, ingress-nginx-controller, cloudprober, juicefs, karpenter, mesosphere-vsphere-csi, rancher,...

GHSA-C3Q7-M35P-9QQ7 vulnerabilities

Vulnerabilities for packages: falco-no-driver, ingress-nginx-controller, karpenter, kubernetes, loki, flux, cert-manager, aactl, spire-server, k8s-device-plugin, external-dns...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: falco-no-driver, ingress-nginx-controller, karpenter, kubernetes, loki, flux, cert-manager, aactl, spire-server, k8s-device-plugin, external-dns...

nowafpls

nowafpls Indice nowafpls Limitazioni documentate dei WAF Installazione di nowafpls Uso di nowafpls Autori Licenza nowafpls La maggior parte dei firewall per applicazioni web WAF ha limitazioni sulla quantità di dati che può elaborare quando viene inviato un corpo della richiesta. Ciò significa ch...

CVE-2026-96662

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'bookingserviceid' Parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2026-96563

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stmfs' parameter in all versions up to, and including, 1.4.123 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2026-104728

The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This...

CVE-2026-100178

The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'advertslocation' parameter in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

EUVD-2026-96282

The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'advertslocation' parameter in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-100178

The WPAdverts – Classifieds Plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.3.4 . The root cause is insufficient input sanitization and output escaping specifically involving the 'adverts_location' parameter. This flaw allows unauthent...

EUVD-2026-96276

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'bookingserviceid' Parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2026-96662 Appointment Booking Plugin <= 5.7.2 - Unauthenticated SQL Injection via 'booking[service_id]' Parameter

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'bookingserviceid' Parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2026-96662

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress is vulnerable to unauthenticated SQL Injection in all versions up to and including 5.7.2 . The root cause is insufficient escaping on the booking[service_id] parameter combined with a lack of sufficient preparation o...

CVE-2026-96563

The Motors – Car Dealership & Classified Listings plugin for WordPress (versions up to and including 1.4.123 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping involving the 'stm_f_s' parameter. This flaw allows authenticat...