Contact Form Entries < 1.2.4 - Cross-Site Scripting

The plugin does not sanitise and escape various parameters, such as formid, status, enddate, order, orderby and search before outputting them back in the admin page id: CVE-2021-25079 info: name: Contact Form Entries 1.2.4 - Cross-Site Scripting author: r3Y3r53 severity: medium description: | The...

Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure

The Formidable Form Builder plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.05.03 via the frmformspreview AJAX action. This makes it possible for unauthenticated attackers to export all of the form entries for a given form. id: CVE-2017-20194 info...

Set-AuditRule

Set-AuditRule Un repository di voci di controllo degli accessi ACE utili che possono essere aggiunte all'elenco di controllo degli accessi di sistema SACL del descrittore di sicurezza di un oggetto proteggibile per monitorare potenziali attività avversarie. Queste voci sono categorizzate per...

Parsero

Cos'è Parsero? =============== Parsero è uno script gratuito scritto in Python che legge il file Robots.txt di un server web e analizza le voci Disallow. Le voci Disallow indicano ai motori di ricerca quali directory o file ospitati su un server web non devono essere indicizzati. Ad esempio,...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

CVE-2025-7384

CVE-2025-7384 — Iniezione di Oggetti PHP verso RCE Plugin: Database for Contact Form 7 contact-form-entries ≤ 1.4.3 CVSS: 9.8 Critico CWE: CWE-502 — Deserializzazione di dati non attendibili Requisito di autenticazione: Nessuno non autenticato Impatto: Esecuzione di codice in remoto Sommario 1...

CVE-2026-80714

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

CVE-2026-80591

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a...

CVE-2026-80591 f2fs: fix listxattr handling of corrupted xattr entries

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a...

MAL-007

MAL-007: XML External Entity tramite voci del registro locale in WSO2 ESB Un attacco XML External Entity XXE inline è stato identificato nello strumento “Local Entities” di WSO2 ESB. Perché nessun CVE? Il fornitore ha risposto che questa vulnerabilità è stata "Fixed in WUM" e non è stata fatta...

CVE-2026-82089

The wallabag aka fr.gaulupeau.apps.InThePoche application through 2.6.0 for Android allows XSS because /api/entries data is loaded into a WebView...

rip_raw

Rip Raw Rip Raw is a small tool to analyse the memory of compromised Linux systems. It is similar in purpose to Bulk Extractor, but particularly focused on extracting system Logs from memory dumps from Linux systems. This enables you to analyse systems without needing to generate a profile. This ...

CVE-2026-82089

The wallabag aka fr.gaulupeau.apps.InThePoche application through 2.6.0 for Android allows XSS because /api/entries data is loaded into a WebView...

CVE-2026-82089

The wallabag Android application (package fr.gaulupeau.apps.InThePoche) through version 2.6.0 is affected by a Cross-Site Scripting (XSS) vulnerability. The root cause is that /api/entries data is loaded directly into a WebView , allowing injected script content to execute. The CVSS 4.0 score is ...

EUVD-2026-67402

The wallabag aka fr.gaulupeau.apps.InThePoche application through 2.6.0 for Android allows XSS because /api/entries data is loaded into a WebView...

CVE-2026-81838

A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code awsdac in versions 0.10 through 0.23 can allow a third party to write arbitrary files to the local filesystem via crafted zip entry names containing path traversal sequences. This could allow the third part...

CVE-2026-65931 LimeSurvey Community Edition 7.0.5 - Improper authorization in survey menu entry creation endpoint

LimeSurvey Community Edition 7.0.5 contains an authenticated improper authorization vulnerability in the survey menu entry creation endpoint. An authenticated user with only the global settings:read permission can directly invoke POST /index.php/admin/menuentries/sa/create and create new survey...

CVE-2026-80210 FrontAccounting through 2.4.20 Cross-Site Request Forgery on Financial Transaction Forms

FrontAccounting through 2.4.20 generates a CSRF token in endform in includes/ui/uicontrols.inc and embeds it as the token hidden field in every form it renders, but only admin/users.php and admin/changecurrentuserpassword.php call checkcsrftoken to validate it. No financial transaction handler...

CVE-2026-80210

FrontAccounting through 2.4.20 suffers from a Cross-Site Request Forgery (CSRF) flaw in its financial transaction forms. The application generates a CSRF token in end_form() (includes/ui/ui_controls.inc) and embeds it as the _token hidden field, but only admin/users.php and admin/change_current_u...

ACEshark

ACEshark Was ist das? ACEshark ist ein Dienstprogramm zur schnellen Extraktion und Analyse von Windows-Dienstkonfigurationen und Access Control Entries, ohne dass Tools wie accesschk.exe oder andere nicht native Binärdateien benötigt werden. Warum? Dienstberechtigungen effizient identifizieren un...