336 matches found
subcrawl
SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...
CVE-2018-10467
CVE-2018-10467 Timeline 2018-04-06: Discovered 2018-04-13: Retest on staging environment 2018-04-16: Internal communication 2018-04-27: Vendor notification 2018-04-27: Vendor feedback 2018-05-27: Technical clarifications of the product 2018-05-03: Added instructions to fix the issue from the vend...
CVE-2018-10715
CVE-2018-10715 Timeline 2018-04-06: Discovered 2018-04-13: Retest staging environment 2018-04-16: Internal communication 2018-05-03: Vendor notification 2018-05-03: Vendor feedback 2018-05-XX: Technical clarifications of the product 2018-05-XX: Added instructions to fix the issue from the vendor...
CVE-2025-12399
Alex Reservations: Smart Restaurant Booking = 2.2.3 - Authenticated Admin+ Arbitrary File Upload The WordPress Alex Reservations plugin versions 2.2.3 and prior contains an arbitrary file upload vulnerability that allows authenticated WordPress administrators to upload malicious PHP files to the...
CVE-2018-12597
CVE-2018-12597 CVE-2018-12597 Timeline ================ 2018-06-08: Discovered 2018-06-11: Retest staging environment 2018-06-12: Retest live environment 2018-06-19: Internal communication 2018-06-21: Vendor notification 2018-06-XX: Vendor feedback 2018-06-XX: Vendor feedback product will be...
@fancyliu/speclite (>=0.1.0, <=0.4.1), actual-moneymoney (>=3.0.0, <=3.6.0) +1 more potentially affected by CVE-2026-77465 via toml (>=4.1.1, <=4.1.2)
toml NPM version =4.1.1, =0.1.0, =3.0.0, =2.7.0, =2.12.4 Source cves: CVE-2026-77465 Source advisory: OSV:GHSA-82X6-Q7MM-W9CF...
@fancyliu/speclite (>=0.1.0, <=0.4.1), actual-moneymoney (>=3.0.0, <=3.6.0) +1 more potentially affected by CVE-2026-63376 via toml (4.1.1)
toml NPM version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on toml and may be impacted: - @fancyliu/speclite =0.1.0, =3.0.0, =2.7.0, =2.11.3 Source cves: CVE-2026-63376 Source advisory: OSV:GHSA-V5MP-JGW5-2X6J...
sign-alex (1.0.1) potentially affected by CVE-2026-70592 via ghost (1.26.2)
ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-70592 Source advisory: OSV:GHSA-CJ62-HVV2-2Q5H...
sign-alex (1.0.1) potentially affected by CVE-2026-70592 via ghost (1.26.2)
ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-70592 Source advisory: SNYK:JS-GHOST-18612530...
ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-70591 via ghost (>=0.11.14, <=1.26.2)
ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-70591 Source advisory: SNYK:JS-GHOST-18610058...
ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-70591 via ghost (>=0.11.14, <=1.26.2)
ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-70591 Source advisory: OSV:GHSA-GCVV-72Q8-9V76...
CVE-2025-50455: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability exists in the orderby parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments = 1.5.1. The vulnerability arises from unsanitized user input passed to the orderby method of the CodeIgniter Query Builder, enabling attackers to perform time-based...
DHS Demanded Google Surrender Data on Canadian’s Activity, Location Over Anti-ICE Posts
Using a 1930s trade law, Homeland Security targeted the man—who hasn’t entered the US in more than a decade—following posts on X condemning the killings of Renee Good and Alex Pretti...
WordPress Responsive Plus plugin < 3.4.3 - Unauthenticated Arbitrary Shortcode Execution vulnerability
Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by Alex Tselevich nos3curity in WordPress Plugin Responsive Plus versions 3.4.3...
ghost-blade (0.1.0), ohm (>=0.1.7, <=0.1.10) +1 more potentially affected by CVE-2026-29053 via ghost (>=0.11.14, <=1.26.2)
ghost NPM version =0.11.14, =0.1.7, =0.1.10 - sign-alex 1.0.1 Source cves: CVE-2026-29053 Source advisory: OSV:GHSA-CGC2-RCRH-QR5X...
The Instant Smear Campaign Against Border Patrol Shooting Victim Alex Pretti
Within minutes of the shooting, the Trump administration and right-wing influencers began disparaging the man shot by a federal immigration officer on Saturday in Minneapolis...
CVE-2026-1070
The Alex User Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.0. This is due to missing nonce validation on the alexusercounterfunction function. This makes it possible for unauthenticated attackers to update the plugin settings via...
CVE-2026-1070
The Alex User Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.0. This is due to missing nonce validation on the alexusercounterfunction function. This makes it possible for unauthenticated attackers to update the plugin settings via...
CVE-2026-1070 Alex User Counter <= 6.0 - Cross-Site Request Forgery to Settings Update
The Alex User Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.0. This is due to missing nonce validation on the alexusercounterfunction function. This makes it possible for unauthenticated attackers to update the plugin settings via...
