CVE-2026-96814

The WooCommerce Product Table Lite WordPress plugin (versions

CVE-2026-96814 WordPress WooCommerce Product Table Lite plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WooCommerce Product Table Lite = 5.6.7 versions...

IAT-Hook

Hooking - IAT Hooking El hooking es una técnica que permite a un usuario redirigir el flujo de ejecución de un programa. La mayoría de las veces utilizamos el hooking de funciones. Reemplazamos o redirigimos una función hacia la nuestra propia; esto es muy útil y tiene múltiples casos de uso...

CVE-2024-8465-PoC

CVE-2024-8465 – Prueba de Concepto de Inyección SQL Información del Equipo Nombre del Equipo: The Misfits Miembros del Equipo: Muhammad Tayyab Nisar Oluwasola SAMUEL Abubakar Mohamed Melek Balghouthi Resumen Este repositorio contiene una aplicación web vulnerable creada como una Prueba de Concept...

EUVD-2026-89666

The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Data Table 'displayoptions' Setting in all versions up to, and including, 3.1.1 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-103049

A flaw was found in the MediaWiki Cargo extension. This vulnerability allows a remote attacker to conduct a reflected Cross-Site Scripting XSS attack due to improper input sanitization of table headers on the Special:CargoQuery page. By enticing a user to follow a specially crafted link, an...

SUSE CVE-2026-97943

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm write lock on collapse to avoid UAF x86 implements page attribute modification using its Change Page Attributes CPA mechanism. This tracks properties of ranges such as cache mode through x86 page...

CVE-2026-103049 XSS in Cargo's Special:CargoQuery page due to unsanitized table headers

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: before 1.46.1...

CVE-2026-103049 XSS in Cargo's Special:CargoQuery page due to unsanitized table headers

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: before 1.46.1...

CVE-2026-103049

The MediaWiki Cargo extension (versions before 1.46.1 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The root cause is the improper sanitization of table headers on the Special:CargoQuery page. A remote attacker can exploit this by enticing a user to click a specially crafted lin...

CVE-2026-71379 Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request...

EUVD-2026-89189

NULL Pointer Dereference on MSRP Attribute Table Exhaustion...

CVE-2026-102723

NULL Pointer Dereference on MSRP Attribute Table Exhaustion...

CVE-2026-102723

A NULL Pointer Dereference vulnerability exists in the software (related to Eclipse ThreadX/netxduo based on provided references) caused by MSRP Attribute Table Exhaustion . The vulnerability results in a high availability impact according to the CVSS 4.0 metric. No specific affected versions, ro...

CVE-2026-102723

NULL Pointer Dereference on MSRP Attribute Table Exhaustion...

iovy_root_research

Inspirado por dosomder/iovyroot https://github.com/dosomder/iovyroot Una herramienta root basada en la vulnerabilidad CVE-2015-1805 Es compatible con 32 y 64 bits, obtiene la dirección de la tabla de llamadas al sistema mediante swi. Referencia a Obteniendo syscalltable en Android...

Byepervisor

Byepervisor Resumen Exploit del hipervisor de PS5 para firmware = 2.xx. El repositorio contiene dos vulnerabilidades y cadenas de exploit independientes entre sí; cualquiera de ellas puede usarse. Un exploit se incluye principalmente con fines de preservación /oldjumptableexploit; solo es necesar...

CVE-2026-97395

Apache Polaris allows an authenticated principal with permission to create or update Iceberg table properties to set FileIO client settings such as s3.endpoint in table metadata. In versions 1.8.0, when Polaris performs server-side Iceberg operations, including commits and purges, it may use thos...

CVE-2026-97598

A flaw was found in the Linux kernel's IPv4 routing subsystem. This vulnerability allows a local user with network configuration privileges to cause a Denial of Service DoS. When automatic routing table identifier allocation is requested, the kernel searches through table identifiers without an...

Insertion of Sensitive Information into Log File

Overview apache-airflow-providers-teradata is a Provider package apache-airflow-providers-teradata for Apache Airflow Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the execute method in azureblobtoteradata.py and s3toteradata.py, when no...