CVE-2026-16750

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized access of data due to missing authorization checks in mvlajaxdealerloadcars function in all versions up to, and including, 1.4.120. This makes it possible for unauthenticated attackers to...

CVE-2026-54645

CubeCart is an e-commerce platform where a stored XSS vulnerability exists in the product management panel prior to version 6.7.5. In admin/sources/products.index.inc.php (lines 55–59), the application bypasses its global sanitizer by reading description, description_short, and spec_copy fields d...

CVE-2026-54645 CubeCart: Stored XSS in Product Description Editor via Global Sanitizer Bypass

CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/products.index.inc.php reads the description, descriptionshort, and speccopy rich-text fields from $GLOBALS'RAW''POST' and removes only script elements before the values are stored and rendered through Smarty templates. An...

CVE-2026-54644 CubeCart: XSS via Anchor Tag Attribute Injection in gui.class.php Message System

CubeCart is an ecommerce software solution. Prior to 6.7.5, the errorMessage method in classes/gui.class.php uses striptags to permit anchor elements in error, information, and warning messages while retaining unsafe href values and onclick event handlers. Attacker-controlled search or input data...

CVE-2026-54644

CubeCart (ecommerce platform) prior to 6.7.5 is vulnerable to Cross-Site Scripting (XSS) via the _errorMessage method in classes/gui.class.php. The method uses strip_tags($message, ''), which permits anchor tags but retains unsafe href attributes and onclick event handlers. Attacker-controlled se...

CVE-2026-54644 CubeCart: XSS via Anchor Tag Attribute Injection in gui.class.php Message System

CubeCart is an ecommerce software solution. Prior to 6.7.5, the errorMessage method in classes/gui.class.php uses striptags to permit anchor elements in error, information, and warning messages while retaining unsafe href values and onclick event handlers. Attacker-controlled search or input data...

CVE-2026-16750

The Motors – Car Dealership & Classified Listings WordPress plugin is vulnerable to unauthorized data access due to missing authorization checks in the mvl_ajax_dealer_load_cars() function, affecting all versions up to and including 1.4.120 . An unauthenticated attacker can exploit this to retrie...

CVE-2026-16750 Motors – Car Dealership & Classified Listings <= 1.4.120 - Missing Authorization to Unauthenticated Private/Draft/Password-Protected Listings Exposure

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized access of data due to missing authorization checks in mvlajaxdealerloadcars function in all versions up to, and including, 1.4.120. This makes it possible for unauthenticated attackers to...

autopwn

autopwn ターゲットを指定して、ツールセットを実行する autopwn は、ペネトレーションテスターの作業をより簡単かつ一貫性のあるものにするために設計されています。ターゲットに対して実行したいツールを指定できるようにし、シェルで入力したりスクリプトを書いたりする必要をなくします。このツールは、特定の試験でも役立つでしょう。 Installation Dockerイメージを使用し、autopwnクライアントが接続できるようにTCP 5000を公開することをお勧めします。これは、autopwn...

CVE-2026-54597 ITFlow: Authenticated Time-Based Blind SQL Injection in ITFlow via expires Parameter

ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated user with modulesupport write permission and access to a credential record can perform time-based blind SQL injection through the expires parameter of...

EUVD-2026-65219

Grav: UserInterface offsetget/offsetexists allow-listed in Twig sandbox let editor-authored content leak hashedpassword and 2FA secrets via offsetGet...

CVE-2026-92758

If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information if in use such as passwords and AWS secure access keys...

CVE-2025-58434-Unauthenticated-Password-Reset-Flowwise

Flowise パスワードリセットによるアカウント乗っ取り ATO 研究およびテスト目的専用です。このツールを意図した用途以外で使用した場合、実稼働中のインフラに生じた損害について私は一切責任を負いません。所有するシステム、またはテストの許可を得たシステムでのみ使用してください。 使い方 root@kitploit: usage: CVE-2025-58434-PasswordResetNew.py -h -u URL -e EMAIL -p PASSWORD Flowise Password Reset Exploit ATO options: -h, --help show this...

CVE-2026-77407

A flaw was found in RabbitMQ amqp091-go, a Go client for AMQP 0.9.1. This vulnerability allows plaintext credentials to be exposed. After a successful PLAIN authentication handshake, the client retains passwords in an unencrypted format within its connection configuration. Local code with access ...

PwnCity

PwnCity 安全でない構成のTeamCity継続的インテグレーション環境です。 作業中: デプロイコードは まもなく いずれ公開予定です。 デモ PwnCityには複数の攻略経路があるかもしれませんが、これは2月24日にOWASP Sacramento Chapterのミーティングで私が発表する予定の経路です。 注記: これはデモのため、ここでは作戦セキュリティはほぼ無視されています。 初期アクセス 1. IPをスキャンしてSSHとTeamCityを発見する nmap -Pn -p- 52.234.0.18。 注: ICMPに応答しないため、nmap 52.234.0.18...

CVE-2026-54495

CVE-2026-54495 affects the OpenFeature Operator (version 0.9.2 and earlier). A tenant who can create a controller-owned workload can use the openfeature.dev/featureflagsource annotation with {NAMESPACE}/{NAME} syntax to reference a FeatureFlagSource or InProcessConfiguration in another namespace....

CVE-2026-54495 Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters

The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and earlier, a tenant who can create a controller-owned workload can use the openfeature.dev/featureflagsource annotation with NAMESPACE/NAME syntax to reference a FeatureFlagSource or...

CVE-2026-45726 Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. From 1.3.0 until 1.6.6 and 1.7.3, importing a standalone Talos cluster creates an ImportedClusterSecrets resource containing the cluster's complete CA secrets bundle. The access rules in...

CVE-2025-55182-scanner

🔍 CVE-2025-55182-scanner - 脆弱性を簡単に検出 Download CVE-2025-55182-scanner 🚀 はじめに ようこそ！このガイドでは、CVE-2025-55182-scanner のダウンロードと実行方法を説明します。このツールは、アプリケーション内の露出した React Server Components エンドポイントを侵襲的に行わずに特定します。 🔧 システム要件 開始する前に、以下の環境を確認してください: オペレーティングシステム: Windows 10 以降、macOS、または Linux ディストリビューション。 ディスク容量:...

EUVD-2026-82377

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database...