decidim-elections: Election question titles allow stored script execution

Description A low-privilege process-scoped admin who can manage elections can store arbitrary HTML in the question statement/body without sanitization, and the public elections UI renders that value unsafely. Technical description This stored XSS appears because election question titles are...

GHSA-9MVP-W4RR-5C6X decidim-elections: Election question titles allow stored script execution

Description A low-privilege process-scoped admin who can manage elections can store arbitrary HTML in the question statement/body without sanitization, and the public elections UI renders that value unsafely. Technical description This stored XSS appears because election question titles are...

GHSA-G8RH-FJM6-H2H9 LF Edge eKuiper: Self-XSS in External Service Creation

Summary A Cross-Site Scripting XSS vulnerability in external service creation allows an authenticated attacker to inject HTML/script payloads into external service names, which may execute in a user's browser when rendered by administrative web interfaces. Details Prior to v2.4.0, external servic...

LF Edge eKuiper: Self-XSS in External Service Creation

Summary A Cross-Site Scripting XSS vulnerability in external service creation allows an authenticated attacker to inject HTML/script payloads into external service names, which may execute in a user's browser when rendered by administrative web interfaces. Details Prior to v2.4.0, external servic...

MAL-2026-16097 Malicious code in twilio-hackerone-poc-b8f21a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b67e9bd1be2e2e13aae83616afffcbfdc3fb888b304dc7210be0ee39832aac On npm install, postinstall.js automatically executes and performs host reconnaissance and exfiltration to a hardcoded ephemeral Cloudflare Quick...

Malicious code in twilio-hackerone-poc-b8f21a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b67e9bd1be2e2e13aae83616afffcbfdc3fb888b304dc7210be0ee39832aac On npm install, postinstall.js automatically executes and performs host reconnaissance and exfiltration to a hardcoded ephemeral Cloudflare Quick...

Malicious code in soltinel-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f489c47a35cb393c976988c8f12eb9b47cddac13ae4112b019adad4eefb646 postinstall.cjs is declared as the package.json postinstall script and runs automatically on npm install. The script walks parent directories for.env...

MAL-2026-16096 Malicious code in soltinel-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f489c47a35cb393c976988c8f12eb9b47cddac13ae4112b019adad4eefb646 postinstall.cjs is declared as the package.json postinstall script and runs automatically on npm install. The script walks parent directories for.env...

firmware-analysis-toolkit v2.0.0-alpha.1

FAT — Firmware Analysis Toolkit Firmware Analysis Toolkit is a security research toolkit for investigating firmware security for IoT, Physical AI, Mobile Devices & Robotics. It is primarily built for the "Offensive IoT Exploitation" training conducted by Attify. It has been built based on actual...

DEBIAN-CVE-2026-80920

In the Linux kernel, the following vulnerability has been resolved: iouring: defer eventfd signaling when queued from a wakeup handler ioreqlocalworkadd signals the CQ ring eventfd inline when it is the one to push the first entry onto -worklist. For DEFERTASKRUN rings that add is frequently done...

CVE-2026-80920

In the Linux kernel, the following vulnerability has been resolved: iouring: defer eventfd signaling when queued from a wakeup handler ioreqlocalworkadd signals the CQ ring eventfd inline when it is the one to push the first entry onto -worklist. For DEFERTASKRUN rings that add is frequently done...

AZL-99963 CVE-2026-80920 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: iouring: defer eventfd signaling when queued from a wakeup handler ioreqlocalworkadd signals the CQ ring eventfd inline when it is the one to push the first entry onto -worklist. For DEFERTASKRUN rings that add is frequently done...

cifswitch-check

cifswitch-check Скрипт для оболочки, проверяющий, подвержена ли система Linux уязвимости CIFSwitch CVE-2026-46243 — локальной уязвимости повышения привилегий в клиенте CIFS/SMB ядра Linux, присутствующей с 2007 года. Работает на физических хостах, виртуальных машинах и внутри контейнеров...

Popcorn-TJNULL-OSCP-

HackTheBox: Popcorn 라이트업 날짜: 2026년 6월 5일 난이도: 쉬움 플랫폼: HackTheBox 주요 기술: 포트 및 서비스 열거, 디렉터리 퍼징 Gobuster, 파일 업로드 우회, HTTP 요청 조작 Burp Suite, 원격 코드 실행 RCE, 고급 TTY 셸 안정화 Python, 로컬 커널/PAM 익스플로잇 MOTD 파일 변조. 1. 정찰 및 열거 포트 스캔 빠른 정찰 모든 65,535개 포트에 대해 빠른 TCP 포트 스캔-p-을 수행하여 열린 진입점을 찾습니다. 감사 환경에서 프로세스를 간소화하기...

Microsoft-Defender-for-Endpoint-Deployment-on-Windows-10-11-device

このリポジトリでは、Windows 11 デバイスへの Microsoft Defender for Endpoint の展開について文書化しています。ローカルスクリプトによるオンボーディング、デバイス検出の有効化、Log4j2 検出（CVE-2021-44228）の構成、インシデント対応ワークフローの検証を含みます。 主な機能 ✅ Windows 10/11 向けローカルスクリプトによるオンボーディング 🔍 標準デバイス検出のセットアップ 🧨 Log4j2 の脆弱性検出 📈 アラート検証とインシデント対応 📋 Defender ツールを使用した修復ワークフロー プロジェクトの目的 ✔️...

iron-proxy

iron-proxy The problem CI jobs, AI coding agents, and sandboxed containers can make arbitrary outbound requests. A compromised dependency, a prompt injection, or a malicious build step can exfiltrate secrets, phone home, or open a reverse shell. Most teams have zero visibility into what's leaving...

apache-auth-bypass-poc

CVE-2026-1337 - Apache WebPortal SQL Injection PoC Proof of C...

ghostlock-a17

GhostLock — CVE-2026-43499 on Samsung Galaxy A17 Full user-to-root exploit chain for CVE-2026-43499 "GhostLock" on the Samsung Galaxy A17 SM-A175F , running Android 16 / GKI 6.12. The chain starts from the public GhostLock primitives and ends with a usermode helper executing as: root@kitploit:...

halo-cve-2026-67919

URL을 통한 halo 플러그인 RCE halo 콘솔을 사용하면 관리자가 URL을 붙여넣어 플러그인을 설치하거나 업그레이드할 수 있습니다. 임의의 URL을 가져와 jar를 설치하며, jar의 코드가 서버에서 실행됩니다. 스킴 검사도, 호스트 검사도 없고 리디렉션을 따라가며, 플러그인 관리자는 jar에서 확장 클래스를 직접 로드합니다. 이것은 cve-2026-67919install-from-uri / upgrade-from-uri, cve-2026-67920migration restore, cve-2026-67921csrf/co...

CVE-2026-3891-Linux

root@kitploit: ███████╗██████╗ ██╗███████╗███╗ ██╗██████╗ ███████╗ ██╔════╝██╔══██╗██║██╔════╝████╗ ██║██╔══██╗██╔════╝ █████╗ ██████╔╝██║█████╗ ██╔██╗ ██║██║ ██║███████╗ ██╔══╝ ██╔══██╗██║██╔══╝ ██║╚██╗██║██║ ██║╚════██║ ██║ ██║ ██║██║███████╗██║ ╚████║██████╔╝███████║ ╚═╝ ╚═╝ ╚═╝╚═╝╚══════╝╚═╝...