CVE-2021-3030

CVE-2021-3030 — Cute Editor 6.4 ثغرة البرمجة النصية عبر المواقع XSS المنعكسة معرف CVE: CVE-2021-3030 الحالة: محجوز من قبل برنامج CVE MITRE في 2021-01-06. لم يُنشر أي سجل عام لهذا المعرّف على الإطلاق — هذه الوثيقة هي المرجع العام المطلوب لإكمال هذا النشر. نوع الثغرة: البرمجة النصية عبر المواقع XSS...

CVE-2026-105220

A flaw was found in Twine. The application fails to properly sanitize markup during story import, allowing embedded malicious scripts to execute within the editor interface. By convincing a user to import a specially crafted story file, an attacker can leverage an internal inter-process...

CVE-2020-13654

CVE-2020-13654 - XWiki Platform Découvert et signalé par : Astaruf Article complet : https://nstsec.com/en/posts/xwiki-xss-cve-2020-13654/ Entrée NVD : https://nvd.nist.gov/vuln/detail/CVE-2020-13654 Vulnérabilité XWiki Platform avant la version 12.8 n'applique pas d'encodage HTML aux champs...

CVE-2025-66849

CVE-2025-66849 Preuve de concept d'escalade de privilèges Ghost CMS Résumé Dans Ghost Foundation Ghost CMS jusqu'à la version 6.4.0, le bloc HTML dans l'éditeur de brouillon d'article ne nettoie ni n'encode correctement le contenu fourni par l'utilisateur, ce qui entraîne une vulnérabilité de...

CVE-2018-7422

CVE-2018-12613 خلل تضمين ملف محلي بسبب عدم تطهير إدخال المستخدم. البرامج المتأثرة 1. إضافة ووردبريس: محرر الموقع الإصدار 1.1.1؛ كيفية الاستخدام يتطلب هذا السكربت بلغة باورشيل معلمتين لصياغة طلب HTTP استغلالي: 1. نقطة نهاية URL لووردبريس 2. مسار كامل لملف ليتم استرجاعه من الخادم البعيد مثال قم...

CVE-2018-7422

CVE-2018-7422 استغلال لـ CVE-2018-7422: تضمين الملفات المحلية في إضافة ووردبريس Site Editor 1.1.1 T1574.008 الصيغة ruby بيئة المختبر OffSec Proving Grounds - Readys الاستخدام...

engagement-mgr

مدير المهام مدير المهام هو تطبيق ويب لتتبع مهام الأمن الهجومي. يتميز بواجهة مستخدم حديثة، مبنية باستخدام Next.js وPrisma وPostgreSQL. يتضمن التطبيق تقويمًا، ومهامًا، وعملاء، وجهات اتصال، ونتائج، ومشغلين. Lee Baird @discoverscripts Jay "L1ghtn1ng" Townsend @jaytownsend1 لقطات الشاشة جدول المحتويات...

XPEViewer

عارض/محرر ملفات PE لأنظمة التشغيل Windows وLinux وMacOS. التحميل: https://github.com/horsicq/XPEViewer/releases كيفية التشغيل: https://github.com/horsicq/XPEViewer/blob/master/docs/RUN.md كيفية البناء: https://github.com/horsicq/XPEViewer/blob/master/docs/BUILD.md سجل التغييرات:...

Risk-Analysis-Editor

Risk Analysis Editor RAE English · Français Standalone tool for building and visualizing risk matrices — inherent gross risk and residual net risk — with an open, documented file format, .rae.json. ▶️ Open the app · 📖 User guide · 🎬 Video tutorials · ⬇️ Download No installation: the tool runs...

wordpress-rce-theme-editor-webshell-injection

WordPress RCE - Inyeccion de Webshell via Editor de Temas...

CVE-2026-103293 MPG < 4.2.3 - Editor+ Arbitrary File Read via Project Import

The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and copying that file into a publicly accessible uploads folder. This makes it possible for users with the Editor role an...

CVE-2026-103293

The MPG WordPress plugin before version 4.2.3 is vulnerable to an arbitrary file read flaw. The root cause is a failure to validate that a dataset source supplied during project import is a remote URL; instead, the system treats it as a local filesystem path and copies the content into a publicly...

CVE-2026-103293 MPG < 4.2.3 - Editor+ Arbitrary File Read via Project Import

The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and copying that file into a publicly accessible uploads folder. This makes it possible for users with the Editor role an...

EUVD-2026-91933

The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and copying that file into a publicly accessible uploads folder. This makes it possible for users with the Editor role an...

[SECURITY] Fedora 45 Update: xed-3.9.0-2.fc45

Xed is a small, but powerful text editor. It has most standard text editor functions and fully supports international text in Unicode. Advanced features include syntax highlighting and automatic indentation of source code, printing and editing of multiple documents in one window. Xed is extensibl...

[SECURITY] Fedora 45 Update: subtitleeditor-0.56.2-7.fc45

Subtitle Editor is a GTK+3 tool to edit subtitles for GNU/Linux/BSD. It can be used for new subtitles or as a tool to transform, edit, correct and refine existing subtitle. This program also shows sound waves, which makes it easier to synchronize subtitles to voices...

[SECURITY] Fedora 45 Update: pluma-1.28.1-4.fc45

pluma is a small, but powerful text editor designed specifically for the MATE desktop. It has most standard text editor functions and fully supports international text in Unicode. Advanced features include syntax highlighting and automatic indentation of source code, printing and editing of...

[SECURITY] Fedora 45 Update: obconf-qt-0.16.6-4.fc45

A configuration editor for the OpenBox window manager...

CVE-2026-103293: Improper Limitation of a Pathname to a Restricted Directory

The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and copying that file into a publicly accessible uploads folder. This makes it possible for users with the Editor role an...

PT-2026-104528

Name of the Vulnerable Software and Affected Versions Kubio AI Page Builder WordPress plugin versions prior to 2.9.3 Description The plugin fails to restrict the expansion of allowed HTML elements to the editor context. Consequently, this expanded set of allowed elements is applied to content...