CVE-2026-61702 OpenPrinting CUPS: root-side banner file disclosure

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copybanner in scheduler/ipp.c uses the attacker-controlled IPP attributes-natural-language value as a directory component beneath DataDir/banners when processing a job-sheets...

EUVD-2026-102208

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copybanner in scheduler/ipp.c uses the attacker-controlled IPP attributes-natural-language value as a directory component beneath DataDir/banners when processing a job-sheets...

WordPress Complianz GDPR/CCPA Cookie Consent Banner plugin <= 7.5.5 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin Complianz versions = 7.5.5...

Complianz GDPR/CCPA Cookie Consent Banner Cross-site Script Vulnerability

The Complianz GDPR/CCPA Cookie Consent Banner versions 7.5.5 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from insufficient input sanitization and output escaping. It involves stored cross-site scripting, enabled by the yotu-wp Cookie-Blocker filter. Unverifi...

Cisco Secure Firewall ASA 9.16 FTD Check

Nuclei templates perform unauthenticated version-banner checks for potentially affected Cisco Secure Firewall ASA and FTD installations covered by the September 2026 hardening advisory...

PT-2026-115188

Netgate pfSense CE 2.7.0 through 2.9.0 contains a configuration injection vulnerability that allows authenticated users with IPsec Mobile privileges to execute commands as root via the login banner field. Attackers can submit a single-line banner containing '' to escape the unquoted strongswan.co...

CVE-2026-103522

In Thelia v2.6.0, the store banner upload feature performs insufficient filetype validation that relies exclusively on client‑supplied MIME types. An attacker with administrative access can upload a PHP file disguised as an image to bypass validation and achieve remote code execution on the...

CVE-2026-103522 CVE-2026-103522

In Thelia v2.6.0, the store banner upload feature performs insufficient filetype validation that relies exclusively on client‑supplied MIME types. An attacker with administrative access can upload a PHP file disguised as an image to bypass validation and achieve remote code execution on the...

CVE-2026-103522 CVE-2026-103522

In Thelia v2.6.0, the store banner upload feature performs insufficient filetype validation that relies exclusively on client‑supplied MIME types. An attacker with administrative access can upload a PHP file disguised as an image to bypass validation and achieve remote code execution on the...

EUVD-2026-97475

In Thelia v2.6.0, the store banner upload feature performs insufficient filetype validation that relies exclusively on client‑supplied MIME types. An attacker with administrative access can upload a PHP file disguised as an image to bypass validation and achieve remote code execution on the...

CVE-2026-103522

Thelia v2.6.0 is vulnerable to remote code execution due to insufficient filetype validation in the store banner upload feature. The system relies exclusively on client-supplied MIME types, allowing an attacker with administrative access to bypass validation by uploading a PHP file disguised as a...

PT-2026-110602

Name of the Vulnerable Software and Affected Versions Thelia version 2.6.0 Description The store banner upload feature performs insufficient filetype validation by relying exclusively on client-supplied MIME types. This allows an attacker with administrative access to upload a PHP file disguised ...

CVE-2026-103522: Unrestricted Upload of File with Dangerous Type

In Thelia v2.6.0, the store banner upload feature performs insufficient filetype validation that relies exclusively on client‑supplied MIME types. An attacker with administrative access can upload a PHP file disguised as an image to bypass validation and achieve remote code execution on the...

sshprank

Descripción Una herramienta rápida de escáner masivo SSH, cracker de inicios de sesión, capturador de banners y verificador de autenticación por contraseña que utiliza los módulos python-masscan y shodan. Uso hacker@blackarch $ sshprank -H / / / / / / / / / / / / /// | / / / // / / / // / / / /...

nuubi

Nuubi Tools Scanner, Recon. Detalles Opciones: -h/--help | Muestra el mensaje de ayuda y sale Argumentos: -b/--banner | Captura de banner de la dirección IP objetivo -s/--subnet | Búsqueda de subred del objetivo -c/--cms | Detección de CMS mediante cabeceras -d/--dns | Consulta DNS del dominio...

pbscan

RESUMEN polarbearscan es un intento de realizar un escaneo de puertos y captura de banners más rápido y eficiente. Combina dos ideas diferentes que, con suerte, lo harán merecedor de su atención y tiempo. La primera de estas ideas es utilizar escaneo SYN sin estado usando cookies criptográficamen...

xray

XRay ha sido reimplementado en Rust y ampliado con más funcionalidades, este repositorio es código LEGADO. Usehttps://github.com/evilsocket/legba XRAY XRay es una herramienta para la recopilación de OSINT de red, su objetivo es automatizar algunas de las tareas iniciales de recopilación de...

erl_mouse

erlmouse Version 1.1 Okay, ich habe einige Dinge verbessert, um die Chancen zu erhöhen, ein anfälliges Gerät oder Netzwerk zu finden. Die meisten sind nicht öffentlich erreichbar, wurden gepatcht oder sind so obskur, dass es schwierig sein kann, ein Ziel zu finden. Trotzdem bleiben wir dran. Sie...

PT-2026-115070

Name of the Vulnerable Software and Affected Versions OpenPrinting CUPS versions prior to 2.4.20 Description In the copy banner function within scheduler/ipp.c, the system improperly handles the attributes-natural-language value provided by a user when processing a job-sheets banner. An attacker...

CVE-2026-92977

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...