Exploit for Improper Authentication in Microsoft

CVE-2026-26119 WAC RCE - CVE-2026-26119 Windows Admin Center...

Exploit for CVE-2026-64638

🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit Behav...

Exploit for Improper Isolation or Compartmentalization in Redhat Build_Of_Keycloak

CVE-2026-4282-Scanner A non-intrusive, version-based vulnerab...

ownsite-assessor

OwnSite Assessor Authorized defensive security assessment...

Exploit for CVE-2017-8464

CVE-2017-8464 / research + PoC Tạo 1 Shortcut + 1 .DLL chứa...

CVE-2026-19343

A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may be performed from remote. The exploit...

Why Generative AI Needs a New Kind of Security

There is a moment every CISO is having right now, often without warning. A developer shows a working internal demo of an AI assistant trained on the company's own documents. The product team is already planning a customer-facing version. The board has signed off on the budget. And somewhere in th...

CVE-2026-19343

Code-projects Task Management System 1.0 contains an SQL injection in the file /admin/AdminLogin.php when manipulating the login arguments email/password. The issue is remote-exploitable and has a published exploit. Affected functionality is unknown in scope beyond AdminLogin input handling; no v...

CVE-2026-19343 code-projects Task Management System AdminLogin.php sql injection

A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may be performed from remote. The exploit...

EUVD-2026-54912

A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may be performed from remote. The exploit...

CVE-2026-19343

A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may be performed from remote. The exploit...

CVE-2026-17011

The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS through one of its REST endpoints, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide on the front end, enabling defacement, content hiding, and UI redressing...

CVE-2026-16957

The Slim SEO WordPress plugin before 4.9.11 does not restrict a post-meta preview feature to posts the user is allowed to edit, verifying only read access, allowing users with the Contributor role to read arbitrary post meta, including protected and private keys, of published posts they do not ow...

CVE-2026-17011 Nexter Blocks < 5.0.2 - Contributor+ Stored CSS Injection

The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS through one of its REST endpoints, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide on the front end, enabling defacement, content hiding, and UI redressing...

CVE-2026-17011

The vulnerability CVE-2026-17011 affects the Nexter Blocks WordPress plugin prior to version 5.0.2. The root cause is that the REST endpoint used to save global CSS does not restrict who can perform the action, allowing users with at least the Contributor role to store arbitrary CSS. This CSS is ...

CVE-2026-17011

The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS through one of its REST endpoints, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide on the front end, enabling defacement, content hiding, and UI redressing...

EUVD-2026-54892

The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS through one of its REST endpoints, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide on the front end, enabling defacement, content hiding, and UI redressing...

CVE-2026-16957

The Slim SEO WordPress plugin before 4.9.11 does not restrict a post-meta preview feature to posts the user is allowed to edit, verifying only read access, allowing users with the Contributor role to read arbitrary post meta, including protected and private keys, of published posts they do not ow...

CVE-2026-16957

CVE-2026-16957 — Slim SEO WordPress plugin (

CVE-2026-16957 Slim SEO < 4.9.11 - Contributor+ Arbitrary Post Meta Disclosure

The Slim SEO WordPress plugin before 4.9.11 does not restrict a post-meta preview feature to posts the user is allowed to edit, verifying only read access, allowing users with the Contributor role to read arbitrary post meta, including protected and private keys, of published posts they do not ow...