CVE-2026-47678

The GLPI asset and IT management software package contains a blind time-based SQL injection vulnerability in its dropdown values fetching endpoint. Affected versions range from 9.4.0 up to, but not including, 10.0.26 and 11.0.8 . An authenticated user can submit crafted values that are improperly...

CVE-2026-121632

Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML without escaping. processattrs writes each attribute value into the markup as is. The select, radio group and checkbox group renderers pass each option to it, so an option's value becomes an unescaped...

EUVD-2026-116928

SQL::Abstract::Tree versions before 2.00000104 for Perl allow cross-site scripting via unescaped SQL text and bind values in the html profile. The html profile wraps keywords and placeholders in span elements and breaks lines with br elements, so its output is meant to go into a page as is. The...

CVE-2026-121007

The SQL::Abstract Perl module (versions 1.90_01 to 2.000001_04 ) is vulnerable to SQL injection . The root cause is that nested statements (e.g., { -select => ... }) placed in positions where plain scalars are treated as identifiers—such as the select list , ORDER BY , GROUP BY , RETURNING , a...

EUVD-2026-116927

SQL::Abstract versions from 1.9001 before 2.00000104 for Perl allow SQL injection via the where values of a nested statement in an identifier position. A nested statement such as -select = ... in a position where plain scalars are identifiers treats its own plain scalars as identifiers too. These...

CVE-2026-121632 Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML without escaping

Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML without escaping. processattrs writes each attribute value into the markup as is. The select, radio group and checkbox group renderers pass each option to it, so an option's value becomes an unescaped...

EUVD-2026-116916

Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML without escaping. processattrs writes each attribute value into the markup as is. The select, radio group and checkbox group renderers pass each option to it, so an option's value becomes an unescaped...

http-protocol-exfil

http-protocol-exfil Use the HTTP protocol version to send a file bit by bit "HTTP/1.0" is a 0 and "HTTP/1.1" is a 1. It uses GET requests so the Blue Team would only see the requests to your IP address. However, it takes a long time to send bigger files, for example it needs 1 hour to send 200 KB...

CVE-2026-120642

CGI versions before 5.00 for Perl return request-derived values untainted under taint mode. The upload filename, uploadInfo values, some pathinfo and scriptname values, Accept results, and the name lists from urlparam and cookie are returned without the taint flag, as is a cookie named expires fr...

wordlistgen

wordlistgen What and why? wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists are much more effective when you take the application's context into consideration. wordlistgen pulls out URL components, such as subdomain names, paths, quer...

CVE-2026-105413

The Form Maker by 10Web WordPress plugin, in versions before 1.15.51 , is vulnerable to Unauthenticated Stored XSS . The root cause is the inconsistent escaping of user-submitted field values before they are rendered on the plugin's submissions admin page. An unauthenticated attacker can store a ...

CVE-2026-105413 Form Maker by 10Web < 1.15.51 - Unauthenticated Stored XSS via Submission Field Values

The Form Maker by 10Web WordPress plugin before 1.15.51 does not consistently escape user-submitted field values before rendering them on its submissions admin page, allowing unauthenticated users to store a payload that executes as arbitrary web scripts in the session of an administrator who vie...

W3 Total Cache < 2.8.2 - Log File Exposure

The plugin is vulnerable to Information Exposure through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For example, the log file may contain nonce values that can be used in further CSRF...

CVE-2026-120642

CGI versions before 5.00 for Perl return request-derived values untainted under taint mode. The upload filename, uploadInfo values, some pathinfo and scriptname values, Accept results, and the name lists from urlparam and cookie are returned without the taint flag, as is a cookie named expires fr...

PT-2026-136980

SQL::Abstract::Tree versions before 2.000001 04 for Perl allow cross-site scripting via unescaped SQL text and bind values in the html profile. The html profile wraps keywords and placeholders in span elements and breaks lines with br elements, so its output is meant to go into a page as is. The...

CVE-2026-121008: Cross-site Scripting (XSS)

SQL::Abstract::Tree versions before 2.00000104 for Perl allow cross-site scripting via unescaped SQL text and bind values in the html profile. The html profile wraps keywords and placeholders in span elements and breaks lines with br elements, so its output is meant to go into a page as is. The...

CVE-2026-121007: SQL Injection

SQL::Abstract versions from 1.9001 before 2.00000104 for Perl allow SQL injection via the where values of a nested statement in an identifier position. A nested statement such as -select = ... in a position where plain scalars are identifiers treats its own plain scalars as identifiers too. These...

PT-2026-136979

SQL::Abstract versions from 1.90 01 before 2.000001 04 for Perl allow SQL injection via the where values of a nested statement in an identifier position. A nested statement such as -select = ... in a position where plain scalars are identifiers treats its own plain scalars as identifiers too. The...

CVE-2026-114627: Cross-site Scripting (XSS)

Web::Simple versions before 0.036 for Perl do not escape values interpolated into double-quoted strings in HTML::Tags output. Under use HTML::Tags or use XML::Tags, a double-quoted string literal becomes a StringThing object that holds each interpolated value as a separate part. The escaping step...

CVE-2026-120642

A security flaw exists in perl-cgi (CGI versions before 5.00) where request-derived values are returned without the taint flag when running under Perl's taint mode. Specifically, values such as the upload filename , uploadInfo , certain path_info and script_name values, Accept results, and name l...