honeybits

Honeybits A simple PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your production servers and workstations to lure the attacker toward your honeypots. Author: Adel "0x4D31" Karimi. The Windows version of this project: honeybits-win...

cosmicdb (>=0.0.32, <=0.0.33), cosmicdbsemantic (>=0.0.38, <=0.0.39) +5 more potentially affected by CVE-2026-15307 via django (3.1.1)

django PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cosmicdb =0.0.32, =0.0.38, =0.2.0, =8.6.1, =1.10.1, =1.12.4 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

Cross-site Scripting (XSS)

Silverstripe CMS is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper escaping of page titles when rendered in CMS breadcrumbs, which allows an attacker to inject malicious JavaScript that executes in the browser when the affected page list view is accessed...

CVE-2026-54717

Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed using the page list view, because page titles are rendered into the breadcrumb trail without being escaped. This issue is fixed in 6.2.1...

GHSA-W3CP-G2PF-65WH Silverstripe: XSS in breadcrumbs in page list view

Impact Page breadcrumbs in the CMS are vulnerable to XSS when viewed using the page list view Reporter Fase Rais Baradika...

Silverstripe: XSS in breadcrumbs in page list view

Impact Page breadcrumbs in the CMS are vulnerable to XSS when viewed using the page list view Reporter Fase Rais Baradika...

CVE-2026-54717 Silverstripe: XSS in breadcrumbs in page list view

Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed using the page list view, because page titles are rendered into the breadcrumb trail without being escaped. This issue is fixed in 6.2.1...

CVE-2026-54717

Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed using the page list view, because page titles are rendered into the breadcrumb trail without being escaped. This issue is fixed in 6.2.1...

EUVD-2026-54257

Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed using the page list view, because page titles are rendered into the breadcrumb trail without being escaped. This issue is fixed in 6.2.1...

CVE-2026-54717 Silverstripe: XSS in breadcrumbs in page list view

Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed using the page list view, because page titles are rendered into the breadcrumb trail without being escaped. This issue is fixed in 6.2.1...

CVE-2026-54717

CVE-2026-54717 affects Silverstripe CMS. In versions prior to 6.2.1, page breadcrumbs in the CMS page list view are vulnerable to cross-site scripting (XSS) because page titles render into the breadcrumb trail without proper escaping. The issue is resolved in 6.2.1. Connected advisories confirm t...

CVE-2026-54717 Silverstripe: XSS in breadcrumbs in page list view

Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed using the page list view, because page titles are rendered into the breadcrumb trail without being escaped. This issue is fixed in 6.2.1...

PT-2026-68987

Impact Page breadcrumbs in the CMS are vulnerable to XSS when viewed using the page list view Reporter Fase Rais Baradika...

PT-2026-68756

Name of the Vulnerable Software and Affected Versions Silverstripe CMS versions prior to 6.2.1 Description Page breadcrumbs in the CMS are susceptible to cross-site scripting XSS when accessed via the page list view. This occurs because page titles are rendered into the breadcrumb trail without...

CVE-2026-54717: Improper Neutralization of Input During Web Page Generation

Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed using the page list view, because page titles are rendered into the breadcrumb trail without being escaped. This issue is fixed in 6.2.1...

Malicious code in dolyame-ui-breadcrumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7679dd0e86411f0df5eea8392ad6f6a663ab0d911cd674b3ef4605af846cb323 On require of dolyame-ui-breadcrumbs, index.js loads bridge.js which reconstructs C2 hostnames at runtime via string-splitting/array-join resolving t...

MAL-2026-13138 Malicious code in dolyame-ui-breadcrumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7679dd0e86411f0df5eea8392ad6f6a663ab0d911cd674b3ef4605af846cb323 On require of dolyame-ui-breadcrumbs, index.js loads bridge.js which reconstructs C2 hostnames at runtime via string-splitting/array-join resolving t...

Malicious code in beaver-ui-breadcrumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d5ebbbd036f50f2c29c885260a8b513897fcae3614f714585723f45ad492cd On require of the package, index.js loads compat.js which selects a platform-specific endpoint from an obfuscated host list, downloads an opaque bina...

MAL-2026-12143 Malicious code in beaver-ui-breadcrumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d5ebbbd036f50f2c29c885260a8b513897fcae3614f714585723f45ad492cd On require of the package, index.js loads compat.js which selects a platform-specific endpoint from an obfuscated host list, downloads an opaque bina...

cosmicdb (>=0.0.32, <=0.0.33), cosmicdbsemantic (>=0.0.38, <=0.0.39) +5 more potentially affected by CVE-2026-15307 via django (3.1.1)

django PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cosmicdb =0.0.32, =0.0.38, =0.2.0, =8.6.1, =1.10.1, =1.12.4 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...