domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

Microsoft FrontPage Extensions - Information Disclosure

Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /vtibin/ virtual directory. id: CVE-2000-0114 info: name: Microsoft FrontPage Extensions - Information Disclosure author: r3naissance,matejsmycka severity...

neto

Project Neto: A Toolkit for Analysing Browser Plugins Overview Project Neto is a Python 3 package conceived to analyse and unravel hidden features of browser plugins and extensions for well-known browsers such as Firefox and Chrome. It automates the process of unzipping the packaged files to...

CVE-2026-4813

CVE-2026-4813 CVSS-B 9.4 CRITICAL Authenticated RCE via XSLT injection in Lutece Core Explanations and more on my website /xsl:styleshee...

CVE-2026-77157 ast-cli: Auto-update downloads are not verified against a checksum before execution

ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from "download.checkmarx.com" as part of its auto-update flow, triggered by the Checkmarx’s "VSCode/JetBrains" extensions and by cx scan "sca-realtime". Prior to the fix, the downloaded archive was not...

CVE-2026-77157

The ast-cli tool is vulnerable to arbitrary binary execution because it fails to verify checksums for helper binaries (Vorpal ASCA real-time engine and SCA Resolver) during its auto-update flow. This flow is triggered by Checkmarx VSCode/JetBrains extensions and the cx scan "sca-realtime" command...

cve-2024-32002-hook

Advanced Performance Extensions Essential optimizations for data processing workloads...

PHP-Injection-in-M4-PDF-Extensions

PHP-Injection-in-M4-PDF-Extensions CVE-2023-50029 is a PHP injection vulnerability in the M4 PDF Extensions module. This vulnerability allows attackers to inject and execute arbitrary PHP code on the server, enabling them to gain full control over the targeted system. The issue lies in the improp...

CVE-2026-114703

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extensions for Leaflet Map: from n/a through 6.0...

CVE-2026-114703 WordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extensions for Leaflet Map: from n/a through 6.0...

CVE-2026-114703 WordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extensions for Leaflet Map: from n/a through 6.0...

CVE-2026-114703

The WordPress Extensions for Leaflet Map plugin (versions ≤ 6.0 ) is vulnerable to a Stored Cross-site Scripting (XSS) flaw. This issue, identified as CWE-79 , stems from the Improper Neutralization of Input During Web Page Generation within the extensions-leaflet-map component. An attacker could...

EUVD-2026-108084

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows Stored XSS.This issue affects Extensions for Leaflet Map: from n/a through 6.0...

WordPress Extensions for Leaflet Map plugin <= 6.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Extensions for Leaflet Map versions = 6.0...

CVE-2024-38063

CVE-2024-38063 — Windows IPv6 Stack Vulnerability Analysis & PoC -red Technical analysis and Proof-of-Concept PoC for CVE-2024-38063 , a critical Remote Code Execution RCE vulnerability in the Windows IPv6 stack tcpip.sys. Discovered by KunLun Lab, this issue is zero-click , meaning it can be...

CVE-2026-113333

A flaw was found in the Extensions component of chromium-browser. A remote attacker could exploit this vulnerability by enticing a user to view a specially crafted HTML page, triggering memory corruption. This issue allows the attacker to read memory contents within the sandbox environment, leadi...

CVE-2026-113142

A flaw was found in the Extensions component of Chromium. This vulnerability allows a remote attacker to cause information disclosure by reading process memory inside the browser sandbox. To exploit the flaw, an attacker must convince a user to load a specially crafted HTML page, triggering memor...

CVE-2026-113335

A flaw was found in the Extensions component of chromium-browser. This memory corruption issue allows a remote attacker to execute arbitrary code inside the browser's restricted security environment sandbox. To exploit this vulnerability, an attacker must trick a user into visiting a specially...

CVE-2026-113307

A flaw was found in the Extensions component of Chromium. A remote attacker can exploit this memory corruption vulnerability by tricking a user into opening a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's restricted sandbox...

CVE-2026-113272

A flaw was found in the Extensions component of chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution within the browser sandbox. By convincing a user to visit a specially crafted HTML page, an attacker can trigger memory corruption to execute untrusted...