CVE-2023-41436-CSZ-CMS-Stored-XSS---Pages-Content

CSZ CMS XSS Memorizzato v1.3.0 Autore: Sergio CVE: 2023-41436 Descrizione: La vulnerabilità di Cross Site Scripting in CSZCMS v.1.3.0 consente a un utente malintenzionato locale di eseguire codice arbitrario tramite uno script appositamente predisposto nel parametro Additional Meta Tag nel...

reflector

reflector Description Burp Suite extension is able to find reflected XSS on page in real-time while browsing on web-site and include some features as: Highlighting of reflection in the response tab. Test which symbols is allowed in this reflection. Analyze of reflection context. Content-Type...

BIND-9-Cache-Poisoning-PoC---CVE-2025-40778

PoC de Envenenamento de Cache no BIND 9 - CVE-2025-40778 Visão Geral Conceitual Esta vulnerabilidade permite que um atacante corrompa o cache DNS de um resolvedor BIND, forçando usuários legítimos a serem redirecionados para endereços IP maliciosos sem que eles saibam. A lógica central do ataque:...

CSZ-CMS-Stored-XSS---Site-Settings

CSZ CMS Stored XSS v1.3.0 Autore: Sergio Descrizione: La vulnerabilità di Cross Site Scripting in CSZCMS v.1.3.0 consente a un attaccante locale di eseguire codice arbitrario tramite uno script appositamente creato nel parametro Additional Meta Tag nel menu Site Settings. Vettori di attacco:...

CVE-2026-75784

creationtimestamp| type| source ---|---|--- 2026-08-18 16:11:19+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtem6rsfaf2e 2026-08-18 18:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtesbcd3x425...

CVE-2026-64760

CVE-2026-64760 is an information leakage vulnerability in iOS and iPadOS where a malicious app may be able to leak sensitive kernel state . The issue was addressed with additional validation , indicating insufficient input validation as the underlying cause. It is fixed in iOS 18.7.10 and iPadOS ...

CVE-2026-16974

creationtimestamp| type| source ---|---|--- 2026-08-13 04:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mswrvdxxxy24...

MAL-2026-12412 Malicious code in pfp-forms-independent-sme-glossary-anchor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96f28993eb59bb78a357534cf64aac001732fc4951ccb33f8eca2a3ce615f3c On require of the package, index.js loads compat.js which reconstructs mirror hostnames via string-splitting joins oob-worker.cf102-baf.workers.dev,...

GHSA-X3HF-7CJ6-3R4M Flowise RCE via SQLite Record Manager Node

============================================================================= Security Advisory elttam Topic: Flowise RCE via SQLite Record Manager Node Module: FlowiseAI/Flowise Disclosed: 24-Apr-2026 Credits: Alex Brown Affects: FlowiseAI/Flowise 3.1.2 I. Background Flowise AI is an open-source...

Flowise RCE via TypeORM DataSource

============================================================================= Security Advisory elttam Topic: Flowise RCE via TypeORM DataSource Module: FlowiseAI/Flowise Disclosed: 15-Apr-2026 Credits: Alex Brown Affects: FlowiseAI/Flowise 3.1.2 I. Background Flowise AI is an open-source, low-co...

UBUNTU-CVE-2026-12803

In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent cross-nonce AEAD forgery. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

EUVD-2026-52134

In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent cross-nonce AEAD forgery. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

CVE-2026-12803 KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)

In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent cross-nonce AEAD forgery. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

EUVD-2026-49552

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges...

CVE-2026-64744

An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to disclose kernel memory...

CVE-2026-64744

An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to disclose kernel memory...

PT-2026-65248

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description An application may be able to leak sensitive user information...

PT-2026-65273

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to read a persistent device identifier...

webkitgtk: webkitgtk: Visiting a website may leak sensitive data

A flaw was found in WebKitGTK. Visiting a website can leak sensitive data due to a permissions issue that was addressed with additional restrictions...

DEBIAN-CVE-2026-15712

A heap buffer over-read vulnerability was discovered in libsoup's versions: libsoup 3.0 to 3.7.0 HTTP/2 connection tracking framework. When the library processes an HTTP/2 GOAWAY frame, it improperly handles the "Additional Debug Data" payload by assuming the data stream is a safely NUL-terminate...