724 matches found
CVE-2021-45745
CVE-2021-45745 Exploit Title: Bludit 3.13.1 - About Plugin Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MEDIUM References: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45745...
Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS
CVE-2021-45745 Exploit Title: Bludit 3.13.1 - About Plugin Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MEDIUM References: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45745...
Exploit for CVE-2026-87772
CVE-2026-87772 — Pardus About Local Privilege Escalation A pa...
CVE-2026-87772
Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation. This issue affects Pardus About: before 1.2.5...
CVE-2026-87772
Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation. This issue affects Pardus About: before 1.2.5...
CVE-2026-87772
The Pardus About software developed by TÜBİTAK BİLGEM Software Technologies Research Institute is vulnerable to an Incorrect Authorization vulnerability (CWE-863). This flaw allows for Privilege Escalation , specifically described in some records as an Unauthenticated Polkit Privilege Escalation ...
EUVD-2026-124294
Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation. This issue affects Pardus About: before 1.2.5...
CVE-2026-87772 Unauthenticated Polkit Privilege Escalation in TÜBİTAK BİLGEM's Pardus About
Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation. This issue affects Pardus About: before 1.2.5...
PT-2026-145726
Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation. This issue affects Pardus About: before 1.2.5...
CVE-2026-87772: TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About: Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows…
Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation. This issue affects Pardus About: before 1.2.5...
CVE-2026-126810
WWBN AVideo 29.1.0 through 29.7.1 contains a stored cross-site scripting vulnerability that allows registered users to inject markup through the channel About field rendered in feed/index.php. Attackers can store an unquoted event-handler payload that bypasses feedHtmlDescription filtering and...
EUVD-2026-124025
WWBN AVideo 29.1.0 through 29.7.1 contains a stored cross-site scripting vulnerability that allows registered users to inject markup through the channel About field rendered in feed/index.php. Attackers can store an unquoted event-handler payload that bypasses feedHtmlDescription filtering and...
CVE-2026-126810
WWBN AVideo versions 29.1.0 through 29.7.1 are vulnerable to a stored cross-site scripting (XSS) vulnerability. The issue resides in the channel About field rendered in feed/index.php . Registered users can inject markup that bypasses the feedHtmlDescription() filtering by using an unquoted event...
CVE-2026-126810 WWBN AVideo 29.1.0 through 29.7.1 Stored XSS via Channel RSS Feed
WWBN AVideo 29.1.0 through 29.7.1 contains a stored cross-site scripting vulnerability that allows registered users to inject markup through the channel About field rendered in feed/index.php. Attackers can store an unquoted event-handler payload that bypasses feedHtmlDescription filtering and...
CVE-2026-126810 WWBN AVideo 29.1.0 through 29.7.1 Stored XSS via Channel RSS Feed
WWBN AVideo 29.1.0 through 29.7.1 contains a stored cross-site scripting vulnerability that allows registered users to inject markup through the channel About field rendered in feed/index.php. Attackers can store an unquoted event-handler payload that bypasses feedHtmlDescription filtering and...
CVE-2026-126810
WWBN AVideo 29.1.0 through 29.7.1 contains a stored cross-site scripting vulnerability that allows registered users to inject markup through the channel About field rendered in feed/index.php. Attackers can store an unquoted event-handler payload that bypasses feedHtmlDescription filtering and...
PT-2026-145467
WWBN AVideo 29.1.0 through 29.7.1 contains a stored cross-site scripting vulnerability that allows registered users to inject markup through the channel About field rendered in feed/index.php. Attackers can store an unquoted event-handler payload that bypasses feedHtmlDescription filtering and...
CVE-2026-126810: WWBN AVideo: WWBN AVideo 29.1.0 through 29.7.1 contains a stored cross-site scripting vulnerability that allows registered users to…
WWBN AVideo 29.1.0 through 29.7.1 contains a stored cross-site scripting vulnerability that allows registered users to inject markup through the channel About field rendered in feed/index.php. Attackers can store an unquoted event-handler payload that bypasses feedHtmlDescription filtering and...
Malware in a-lbum-do-wnload-avai-lable-file-10635-about-to-choke-pzt0k-onnsvp
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2026-17953 Malicious code in a-lbum-do-wnload-avai-lable-file-10635-about-to-choke-pzt0k-onnsvp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fea9dc3511b8a42a624a4257e69fc68933bef239240dc0af0d030f3dc72421b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...