cicd-goat

Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. 🚩 Created by Cider Security Acquired by Palo Alto Networks. Table of Contents...

SPOILER

SPOILER：推测加载风险提升 Rowhammer 和缓存攻击 CVE-2019-0162 INTEL-SA-00238 https://www.usenix.org/system/files/sec19-islam.pdf root@kitploit: @inproceedings 236252, author = Saad Islam and Ahmad Moghimi and Ida Bruhns and Moritz Krebbel and Berk Gulmezoglu and Thomas Eisenbarth and Berk Sunar, title = SPOILER...

vulnerability-spoiler-alert

漏洞剧透预警 在 CVE 公布之前了解安全补丁。 查看在线站点 | 通过 RSS 订阅 一个监控枢纽，它观察热门开源仓库，并利用 AI 检测提交何时正在修补安全漏洞——通常早在 CVE 分配之前。发现结果发布到一个复古风格的网站，并配有 RSS 订阅源。 起源与灵感 本项目是 Eugene Lim @spaceraccoon 的 spaceraccoon/vulnerability-spoiler-alert-action 的示例用法。 原始概念和研究记录在博客文章 发现负天数：用于漏洞研究的 LLM 工作流 中，该文章探讨了使用 LLM 在 CVE...

EUVD-2025-10657

Malicious code in bioql PyPI...

EUVD-2024-35400

Malicious code in bioql PyPI...

EUVD-2025-10622

Malicious code in bioql PyPI...

EUVD-2024-49210

Malicious code in bioql PyPI...

CVE-2024-35639

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webliberty Simple Spoiler simple-spoiler.This issue affects Simple Spoiler: from n/a through = 1.2...

CVE-2025-31020

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webliberty Simple Spoiler simple-spoiler allows Stored XSS.This issue affects Simple Spoiler: from n/a through = 1.4...

CVE-2025-32497

Cross-Site Request Forgery CSRF vulnerability in squiter Spoiler Block spoiler-block allows Stored XSS.This issue affects Spoiler Block: from n/a through = 1.7...

WordPress Simple Spoiler plugin <= 1.4 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Simple Spoiler versions = 1.4...

WordPress Spoiler Block plugin <= 1.7 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by johska in WordPress Plugin Spoiler Block versions = 1.7...

CVE-2025-32497

Cross-Site Request Forgery CSRF vulnerability in squiter Spoiler Block spoiler-block allows Stored XSS.This issue affects Spoiler Block: from n/a through = 1.7...

CVE-2025-31020

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webliberty Simple Spoiler simple-spoiler allows Stored XSS.This issue affects Simple Spoiler: from n/a through = 1.4...

CVE-2025-31020 WordPress Simple Spoiler plugin <= 1.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webliberty Simple Spoiler simple-spoiler allows Stored XSS.This issue affects Simple Spoiler: from n/a through = 1.4...

CVE-2025-31020 WordPress Simple Spoiler plugin <= 1.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webliberty Simple Spoiler simple-spoiler allows Stored XSS.This issue affects Simple Spoiler: from n/a through = 1.4...

CVE-2025-31020

CVE-2025-31020 – Stored XSS in Simple Spoiler (WordPress plugin) . The vulnerability arises from improper input neutralization during web page generation, enabling stored cross-site scripting when users submit content that is rendered by the Simple Spoiler plugin. Affected software is listed as S...

CVE-2025-32497 WordPress Spoiler Block plugin <= 1.7 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in squiter Spoiler Block spoiler-block allows Stored XSS.This issue affects Spoiler Block: from n/a through = 1.7...

CVE-2025-32497 WordPress Spoiler Block plugin <= 1.7 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in squiter Spoiler Block allows Stored XSS. This issue affects Spoiler Block: from n/a through 1.7...

CVE-2025-32497

Summary (CVE-2025-32497) : The Spoiler Block WordPress plugin is affected by a Cross-Site Request Forgery (CSRF) leading to Stored XSS, documented for Spoiler Block versions up to 1.7. The initial description confirms CSRF as the trigger and stored XSS as the consequence, affecting “Spoiler Block...