943 matches found
CVE-2026-118057
The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUESTURI' parameter in all versions up to, and including, 22.3.2 due to insufficient input sanitization and output escaping. This mak...
CVE-2026-118057 Shield Security <= 22.3.2 - Unauthenticated Stored Cross-Site Scripting via Request Path (REQUEST_URI) in Traffic Log
The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUESTURI' parameter in all versions up to, and including, 22.3.2 due to insufficient input sanitization and output escaping. This mak...
CVE-2026-118057
The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 22.3.2 . The root cause is insufficient input sanitization and output escaping of the 'REQUEST_URI' parame...
EUVD-2026-114648
The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUESTURI' parameter in all versions up to, and including, 22.3.2 due to insufficient input sanitization and output escaping. This mak...
Shield Security <= 21.0.8 - Unauthenticated Reflected XSS
Shield Security WordPress plugin = 21.0.8 contains a reflected cross-site scripting caused by insufficient input sanitization and output escaping in the 'message' parameter, letting unauthenticated attackers inject scripts, exploit requires user interaction. id: CVE-2026-0561 info: name: Shield...
Shield Security WP Plugin <= 18.5.9 - Local File Inclusion
The Shield Security Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the renderactiontemplate parameter. This makes it possible for unauthenticated attacker to include and execute PHP fil...
Shield Security Plugin < 20.0.6 - Cross-Site Scripting
The Shield Security WordPress plugin before 20.0.6 contains a reflected cross-site scripting vulnerability. The plugin does not properly sanitize and escape the 'navsub' parameter in the admin dashboard, allowing authenticated users to execute arbitrary JavaScript in the context of other...
NodeSecurityShield
Node Security Shield Node Security Shield NSS is an Open source Runtime Application Self-Protection RASP tool which aims at bridging the gap for comprehensive NodeJS security by enabling Developer and Security Engineer to declare what resources an application can access. Inspired by the Log4Shell...
HydraLINCAN
HydraLINCAN shield for HydraBus CAN and LIN Bus shield for Hydrabus http://hydrabus.com/ Refer to Hydrabus Wiki for more information on usage. https://github.com/hydrabus/hydrafw/wiki/HydraFW-CAN-guide I sell on Tindie New version with cleaner and easier to read silkscreen. Here is the wiring...
CVE-2026-118057: paultgoodchild: The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is…
The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUESTURI' parameter in all versions up to, and including, 22.3.2 due to insufficient input sanitization and output escaping. This mak...
pii-shield
PII-Shield 🛡️ Zero-code log sanitization sidecar for Kubernetes. Prevents data leaks GDPR/SOC2 by redacting PII from logs before they leave the pod. PII-Shield runs in-process — CLI, sidecar, or WASM. There is no hosted API and no server your data is sent to. Same name, different projects. This is...
log4jshield
Demo • Features • Requirements • Installation • Usage • Contributing • Contact Log4j Shield - fast ⚡, scalable and easy to use finder and patcher No Log4j vulnerability left behind You can use this tool to scan for all JAR files affected by Apache Log4J vulnerability CVE-2021-44228 and patch them...
Shield
README For installation and usage instructions please refer to my blogpost: https://theevilbit.github.io/shield/...
WordPress Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin <= 22.3.2 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Kevin Whelan in WordPress Plugin Shield Security versions = 22.3.2...
GhostLock-NVIDIA-Shield-9.2.4
GhostLock for NVIDIA Shield TV Pro 9.2.4 Validated arm64 port of the GhostLock futex PI use-after-free CVE-2026-43499 for the 2019 NVIDIA Shield TV Pro mdarcy running Shield Experience 9.2.4. The payload changes the credentials of the live ADB daemon, so new ADB shells are UID 0 without a...
CVE-2024-7313
Shield Security Plugin Vulnerability Exploit CVE-2024-7313 Overview This repository contains a Python PoC script designed to exploit a reflected XSS vulnerability in the Shield Security Plugin for WordPress, affecting versions below 20.0.6. The vulnerability CVE-2024-7313 allows an attacker to...
PoW-Shield
Description PoW Shield provides DDoS protection on OSI application layer by acting as a proxy that utilizes proof of work between the backend service and the end user. This project aims to provide an alternative to general anti-DDoS methods such as Google's ReCaptcha that has always been a pain t...
cobol-shield
cobol-shield Security auditing toolkit for COBOL legacy systems Part of VTR Research Methodology | DOI: 10.5281/zenodo.22063208 Status: Reproducible | License: MIT | Track: Critical Infrastructure What it does Detects compilation context divergences, invisible Unicode attacks, and unsafe COBOL...
net-Shield
net-Shield An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices based on iptables/ipsets Requirements Linux System with golang, iptables/ipsets Nginx Quickstart Run the bash script install.sh to install all the required dependencies. bash install.sh You will be prompted...