CVE-2026-93778

The WP Yelp Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Yelp Review Text imported via wpyelpdownloadsource in all versions up to, and including, 9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-93778

CVE-2026-93778 affects the WP Yelp Review Slider WordPress plugin in all versions up to and including 9.2 . The vulnerability is a stored cross-site scripting (XSS) flaw in the wpyelp_download_source function, caused by insufficient input sanitization and output escaping of Yelp review text. An u...

amira

AMIRA：自动化恶意软件事件响应与分析 AMIRA 是一种服务，用于自动对 OSXCollector 输出文件进行分析。自动化分析通过 OSXCollector Output Filters 执行，特别是《统御一切的过滤器》：Analyze Filter。AMIRA 负责从 S3 存储桶中检索输出文件，运行 Analyze Filter，然后将分析结果上传回 S3（当然，也可以设想将结果附加到相关的 JIRA 工单上）。 前提条件 tox 以下步骤假设您的机器上已安装 tox。 如果尚未安装，请运行： root@kitploit: $ sudo pip install tox...

linux_mint_poc

Bug de inyección de comandos en 'yelp' de Linux Mint 18.3-19.1 Causa raíz Los manejadores de URI help://, ghelp:// y man:// están definidos en el archivo /usr/share/applications/yelp.desktop, que ejecutará /usr/local/bin/yelp mediante Exec=yelp %u cada vez que se invoque uno de esos manejadores d...

osxcollector

Manual de OSXCollector OSXCollector es un conjunto de herramientas de recolección y análisis de evidencia forense para OSX. Recolección Forense El script de recolección se ejecuta en una máquina potencialmente infectada y genera un archivo JSON que describe la máquina objetivo. OSXCollector...

Ubuntu 16.04 LTS / 18.04 LTS : Yelp vulnerability (USN-8756-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8756-1 advisory. It was discovered that Yelp allowed help documents to execute arbitrary scripts. An attacker could possibly use this issue to trick a user into openin...

USN-8756-1: Yelp vulnerability

It was discovered that Yelp allowed help documents to execute arbitrary scripts. An attacker could possibly use this issue to trick a user into opening a specially crafted help document and obtain sensitive information...

USN-8756-1 yelp vulnerability

It was discovered that Yelp allowed help documents to execute arbitrary scripts. An attacker could possibly use this issue to trick a user into opening a specially crafted help document and obtain sensitive information...

PT-2026-91843

It was discovered that Yelp allowed help documents to execute arbitrary scripts. An attacker could possibly use this issue to trick a user into opening a specially crafted help document and obtain sensitive information...

Astra Linux - Vulnerability in yelp, yelp-xsl

A flaw was discovered in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability enables malicious users to input help documents, which may result in the exfiltration of user files to an external environment...

RHSA-2026:57417 Red Hat Security Advisory: yelp security update

Bulletin has no description...

yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications

A flaw was found in Yelp due to an overly permissive Content Security Policy CSP implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a structured SVG document,...

Important: Red Hat Security Advisory: yelp security update

An update for yelp is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHSA-2026:54666 Red Hat Security Advisory: yelp security update

Bulletin has no description...

RHSA-2026:54637 Red Hat Security Advisory: yelp security update

Bulletin has no description...

RHSA-2026:54624 Red Hat Security Advisory: yelp security update

Bulletin has no description...

RHSA-2026:54605 Red Hat Security Advisory: yelp security update

Bulletin has no description...

RHSA-2026:54540 Red Hat Security Advisory: yelp security update

Bulletin has no description...

RHSA-2026:54539 Red Hat Security Advisory: yelp security update

Bulletin has no description...

Important: Red Hat Security Advisory: yelp security update

An update for yelp is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...