IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

Pentest-Bookmarkz

Pentest Bookmarks List Sofiane Hamlaoui Check more on Google : https://g.co/kgs/FUZgoXi Hacker Media Blogs There are a LOT of pentesting blogs, these are the ones I monitor constantly and value in the actual day to day testing work. Carnal 0wnage - atom McGrew Security GNUCITIZEN Darknet - The...

djangoappcenter (>=0.1.0, <=0.9.16), djangodjangoappcenter (0.0.11) +4 more potentially affected by CVE-2026-15307 via django (3.0.2)

django PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangoappcenter =0.1.0, =0.1.1, =0.0.2, =0.0.4 - medicine 0.1.9 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

djangoappcenter (>=0.1.0, <=0.9.16), djangodjangoappcenter (0.0.11) +4 more potentially affected by CVE-2026-15307 via django (3.0.2)

django PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangoappcenter =0.1.0, =0.1.1, =0.0.2, =0.0.4 - medicine 0.1.9 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...

djangoappcenter (>=0.1.0, <=0.9.16), djangodjangoappcenter (0.0.11) +4 more potentially affected by CVE-2026-53877 via django (3.0.2)

django PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangoappcenter =0.1.0, =0.1.1, =0.0.2, =0.0.4 - medicine 0.1.9 Source cves: CVE-2026-53877 Source advisory: OSV:GHSA-CRHF-3PFG-W68W...

djangoappcenter (>=0.1.0, <=0.9.16), djangodjangoappcenter (0.0.11) +4 more potentially affected by CVE-2026-53878 via django (3.0.2)

django PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangoappcenter =0.1.0, =0.1.1, =0.0.2, =0.0.4 - medicine 0.1.9 Source cves: CVE-2026-53878 Source advisory: OSV:GHSA-8QCX-XF44-272X...

djangoappcenter (>=0.1.0, <=0.9.16), djangodjangoappcenter (0.0.11) +4 more potentially affected by CVE-2026-48588 via django (3.0.2)

django PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangoappcenter =0.1.0, =0.1.1, =0.0.2, =0.0.4 - medicine 0.1.9 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...

alcali (>=2018.3.1, <=2019.2.1.post0), kiwitcms (7.0.0) +10 more potentially affected by CVE-2026-53878 via django (2.2.5)

django PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - alcali =2018.3.1, =0.31.14, =0.8.0, =0.3.1, =0.0.1, =0.0.1, =0.0.1, =0.0.5 Source cves: CVE-2026-53878 Source advisory: OSV:GHSA-8QCX-XF44-272X...

zfl-blogs (>=2.1.0, <=2.2.3) potentially affected by CVE-2024-2319 via django-markdownx (3.0.1)

django-markdownx PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on django-markdownx and may be impacted: - zfl-blogs =2.1.0, =2.2.3 Source cves: CVE-2024-2319 Source advisory: OSV:PYSEC-2026-1299...

zfl-blogs (>=0.0.1, <=0.0.12) potentially affected by CVE-2024-2319 via django-markdownx (2.0.28)

django-markdownx PYPI version 2.0.28 is affected by a known vulnerability. The following packages have a transitive dependency on django-markdownx and may be impacted: - zfl-blogs =0.0.1, =0.0.12 Source cves: CVE-2024-2319 Source advisory: OSV:PYSEC-2026-1299...

GHSA-X7WH-G25G-53VG CI4MS: Blogs Posts Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

Summary Vulnerability: Stored DOM XSS via Blog Post Content Persistent Payload Injection - Stored Cross-Site Scripting via Unsanitized Blog Post Content in Blog Management Description The application fails to properly sanitize user-controlled input when creating or editing blog posts. An attacker...

GHSA-R33W-C82V-X5V7 CI4MS: Blogs Posts (Categories) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

Summary Vulnerability: Blogs Posts Categories Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS - Stored Cross-Site Scripting via Unsanitized Blog Post Content in Blog Management Categories Description The application fails to properly sanitize user-controlled input wh...

CVE-2025-71179

Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting XSS vulnerabilities via the search parameter to the /academy/blogs endpoint, and the string parameter to the /academy/coursebundles/search/query endpoint. These vulnerabilities are distinct from the patch for CVE-2023-4119, whic...

CVE-2025-71179

Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting XSS vulnerabilities via the search parameter to the /academy/blogs endpoint, and the string parameter to the /academy/coursebundles/search/query endpoint. These vulnerabilities are distinct from the patch for CVE-2023-4119, whic...

CVE-2025-71179: Improper Neutralization of Input During Web Page Generation

Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting XSS vulnerabilities via the search parameter to the /academy/blogs endpoint, and the string parameter to the /academy/coursebundles/search/query endpoint. These vulnerabilities are distinct from the patch for CVE-2023-4119, whic...

CVE-2025-71179

Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting XSS vulnerabilities via the search parameter to the /academy/blogs endpoint, and the string parameter to the /academy/coursebundles/search/query endpoint. These vulnerabilities are distinct from the patch for CVE-2023-4119, whic...

CVE-2025-71179

Creativeitem Academy LMS 7.0 is susceptible to reflected Cross-Site Scripting (XSS) vulnerabilities. The root cause is the insufficient validation of input parameters at specific endpoints: the search parameter to the /academy/blogs endpoint and the string parameter to the /academy/course_bundles...

EUVD-2025-206696

Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting XSS vulnerabilities via the search parameter to the /academy/blogs endpoint, and the string parameter to the /academy/coursebundles/search/query endpoint. These vulnerabilities are distinct from the patch for CVE-2023-4119, whic...

Creativeitem Academy LMS security vulnerabilities

Creativeitem Academy LMS is an online learning management system provided by the Bangladeshi company Creativeitem. Version 7.0 of Creativeitem Academy LMS contains a security vulnerability. This vulnerability stems from insufficient validation of the string parameters in the /academy/blogs endpoi...

PT-2026-5991

Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting XSS vulnerabilities via the search parameter to the /academy/blogs endpoint, and the string parameter to the /academy/course bundles/search/query endpoint. These vulnerabilities are distinct from the patch for CVE-2023-4119, whi...