TChopper

TChopper New technique I have discovered recently and give it a nickname Chop chop to perform lateral movement using windows services display name and WMI by smuggling the malicious binary as base64 chunks and automate the process using the TChopper tool. image How it works the tool will get the...

PT-2026-145131

The Author Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display name' parameter in all versions up to, and including, 4.9.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2026-123539

OpenAM before 16.1.4 contains a stored cross-site scripting vulnerability that allows privileged attackers to inject script by placing markup in a user's display name. When the victim reaches the OAuth 2.0 / OpenID Connect consent page, the unencoded name executes script that can steal the OpenAM...

EUVD-2026-119424

OpenAM before 16.1.4 contains a stored cross-site scripting vulnerability that allows privileged attackers to inject script by placing markup in a user's display name. When the victim reaches the OAuth 2.0 / OpenID Connect consent page, the unencoded name executes script that can steal the OpenAM...

CVE-2026-123539

OpenAM before 16.1.4 contains a stored cross-site scripting vulnerability that allows privileged attackers to inject script by placing markup in a user's display name. When the victim reaches the OAuth 2.0 / OpenID Connect consent page, the unencoded name executes script that can steal the OpenAM...

CVE-2026-123539 OpenAM before 16.1.4 Stored XSS via OAuth 2.0 Consent Page Display Name

OpenAM before 16.1.4 contains a stored cross-site scripting vulnerability that allows privileged attackers to inject script by placing markup in a user's display name. When the victim reaches the OAuth 2.0 / OpenID Connect consent page, the unencoded name executes script that can steal the OpenAM...

PT-2026-139820

Name of the Vulnerable Software and Affected Versions OpenAM versions prior to 16.1.4 Description A stored cross-site scripting issue exists where privileged attackers can inject scripts by placing markup in a user's display name. The script executes when a victim accesses the OAuth 2.0 / OpenID...

CVE-2026-123539: OpenIdentityPlatform OpenAM: OpenAM before 16.1.4 contains a stored cross-site scripting vulnerability that allows privileged attackers to inject…

OpenAM before 16.1.4 contains a stored cross-site scripting vulnerability that allows privileged attackers to inject script by placing markup in a user's display name. When the victim reaches the OAuth 2.0 / OpenID Connect consent page, the unencoded name executes script that can steal the OpenAM...

CVE-2026-115541

HumHub Community Edition 1.19.0 contains a stored cross-site scripting vulnerability in the friendship confirmation dialog. An authenticated low-privileged member can save HTML in their first and last name. When another authenticated user clicks Friends for that profile, HumHub places the decoded...

CVE-2026-115541

HumHub Community Edition 1.19.0 is vulnerable to a stored cross-site scripting (XSS) vulnerability in the friendship confirmation dialog. An authenticated low-privileged member can save malicious HTML in their first and last name fields. When another authenticated user clicks "Friends" on that pr...

EUVD-2026-116535

HumHub Community Edition 1.19.0 contains a stored cross-site scripting vulnerability in the friendship confirmation dialog. An authenticated low-privileged member can save HTML in their first and last name. When another authenticated user clicks Friends for that profile, HumHub places the decoded...

EUVD-2026-114779

The MapPress WordPress plugin before 2.97.15 does not restrict which user's data its front-end map embed handler renders, allowing unauthenticated visitors to retrieve the email address and display name of any user on the site by enumerating user IDs...

CVE-2026-118168 MapPress Maps for WordPress < 2.97.15 - Unauthenticated Email Address Disclosure

The MapPress WordPress plugin before 2.97.15 does not restrict which user's data its front-end map embed handler renders, allowing unauthenticated visitors to retrieve the email address and display name of any user on the site by enumerating user IDs...

PT-2026-134833

The MapPress WordPress plugin before 2.97.15 does not restrict which user's data its front-end map embed handler renders, allowing unauthenticated visitors to retrieve the email address and display name of any user on the site by enumerating user IDs...

CVE-2026-118168: Unknown MapPress: The MapPress WordPress plugin before 2.97.15 does not restrict which user's data its front-end map embed handler…

The MapPress WordPress plugin before 2.97.15 does not restrict which user's data its front-end map embed handler renders, allowing unauthenticated visitors to retrieve the email address and display name of any user on the site by enumerating user IDs...

PT-2026-134419

The The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.15.5 This is due to the software allowing users to execute an action that does not properl...

PT-2026-134490

Name of the Vulnerable Software and Affected Versions The Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News versions prior to 4.1.0 Description Insufficient input sanitization and output escaping allow authenticated attackers with subscriber-level access and abov...

PT-2026-134476

Name of the Vulnerable Software and Affected Versions SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress versions prior to 10.4 Description Insufficient input sanitization and output escaping allow authenticated attackers with subscriber-level access and above to perform Stored Cross-Sit...

CVE-2026-119761

The Axigen Mail Server WebMail (versions before 10.6.39 and 10.7.1 ) is vulnerable to a stored cross-site scripting (XSS) vulnerability. The root cause is the improper neutralization of unescaped sender display names within the conversation view. An unauthenticated remote attacker can send an ema...

CVE-2026-119761 Axigen Mail Server before 10.6.39 and 10.7.1 Stored XSS via Sender Display Name

Axigen Mail Server WebMail before 10.6.39 and 10.7.1 contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to inject script via unescaped sender display names in the conversation view. Attackers can send an email with HTML and script in the From display...