CVE-2025-9103 ZenCart CKEditor cross site scripting

A vulnerability was detected in ZenCart 2.1.0. Affected by this vulnerability is an unknown functionality of the component CKEditor. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The real existenc...

h1-ctf: Grinch Networks compromised!

Grinch Networks compromised! For fast triage/validation and inspired by @manoelt in other CTF, I made a bash script to find and print all the 12 flags of this CTF. The script uses curl, wget, google-chrome headless for flag 2, unzip, grep and sed. If any of these commands is missing, the script...

PT-2020-2733

Name of the Vulnerable Software and Affected Versions Zulip Server affected versions not specified Description The issue is related to the implementation of the "invite by admins only" feature in the Zulip Server group chat application, which is associated with access control weaknesses...

PT-2017-10697

Name of the Vulnerable Software and Affected Versions Zulip Server versions 1.5.1 and below Description The issue arises from an error in the implementation of the invite by admins only setting in the Zulip group chat application server. This error allows an authenticated user to invite other use...