EUVD-2026-93234

Subscriber Cross Site Scripting XSS in Ohio Extra = 3.6.8 versions...

CVE-2026-32571

Subscriber Cross Site Scripting XSS in Ohio Extra = 3.6.8 versions...

CVE-2026-32571 WordPress Ohio Extra plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Ohio Extra = 3.6.8 versions...

CVE-2026-32571

The WordPress Ohio Extra plugin, specifically versions

WordPress Ocean Extra <1.9.5 - Cross-Site Scripting

WordPress Ocean Extra plugin before 1.9.5 contains a cross-site scripting vulnerability. The plugin does not escape generated links which are then used when the OceanWP theme is active. id: CVE-2021-25104 info: name: WordPress Ocean Extra 1.9.5 - Cross-Site Scripting author: Akincibor severity:...

CVE-2022-28346

CVE-2022-28346 SQL injection in QuerySet.annotate, aggregate, and extra Setup: Run ./setup.sh for initial setup Open the docker image to initiate the database: docker exec -it containerid /bin/bash And run the following commands: python manage.py makemigrations cve202228346 python manage.py migra...

nishang

Nishang Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. By Nikhil Mittal Founder of Altered Security - Hands-on red team and...

CVE-2022-28346

CVE-2022-28346 Django QuerySet.annotate, aggregate, extra SQL Injection Environment Initialization 1.python manage.py makemigrations 2.python manage.py migrate 3.访问http://x.x.x.x:8000/ 插入初始化数据 Vulnerability Reproduction 访问http://x.x.x.x:8000/demo POC: http://x.x.x.x:8000/demo?field=demo.name" FRO...

CVE-2023-43353-CMSmadesimple-Stored-XSS---News---Extra

CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Extra in the Content - News Menu. Attack Vectors: Scripting A vulnerability in the sanitization o...

CVE-2022-28346

CVE-2022-28346 PoC 영향: QuerySet.annotate, aggregate 및 extra에서 잠재적 SQL 인젝션. 설치 poetry install python manage.py makemigrations python manage.py migrate python manage.py loaddata data.json python manage.py runserver PoC ?field=poc.title" FROM "pocblog" union SELECT "-1,",sqliteversion,"3" -- 참고 자료 C...

puppeteer-extra

puppeteer-extra 이곳은 puppeteer-extra를 위한 모노레포입니다. puppeteer를 위한 모듈형 플러그인 프레임워크입니다. :- 🌟 주요 문서는puppeteer-extra 패키지를 참조하세요. 또한 최근 Playwright 지원도 도입했습니다. 관심이 있다면 playwright-extra를 확인해 보세요. 모노레포 기여하기 기여하기 PR과 새로운 플러그인을 환영합니다! puppeteer-extra의 플러그인 API는 깔끔하고 사용하기 재미있습니다. 시작하려면 PuppeteerExtraPlugin 기본 클...

Ocean Extra <= 2.4.6 - Unauthenticated Shortcode Execution

The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.6. This is due to the software allowing users to supply arbitrary shortcodes in the contentrechdata parameter that is then executed. This makes it possible for...

CVE-2023-44766_ConcreteCMS-Stored-XSS---SEO

ConcreteCMS Stored XSS v.9.2.1 Author: Sergio Description: Cross Site Scripting vulnerability in ConcreteCMS v.9.2.1 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Extra from Page Settings. Attack Vectors: Scripting A vulnerability in the sanitization of the...

CVE-2026-20516

CVE-2026-20516: Android TV의 MiracastService confused deputy Davide Di Matteo @Dingo97의 연구 및 공개. 이것은 제가 처음으로 이름을 올린 CVE입니다. PEAQ Android TV를 연구하던 중 부적절하게 export된 시스템 권한 Miracast 서비스를 발견했습니다. 호출자는 intent extra를 제공하여 서비스가 자체 권한을 사용해 Wi-Fi Direct 상태를 변경하도록 만들 수 있습니다. MediaTek은 이 문제를 2026년 9월 보안 공지에...

Emerson Dixell XWEB-500 - Arbitrary File Write

Emerson Dixell XWEB-500 contains an arbitrary file write caused by unauthenticated access to /cgi-bin/logoextraupload.cgi, /cgi-bin/calsave.cgi, and /cgi-bin/loutils.cgi, letting attackers write any file on the system, exploit requires no authentication. id: CVE-2021-45420 info: name: Emerson...

[SECURITY] Fedora 45 Update: compiz-plugins-extra-0.8.18-18.fc45

The Compiz Fusion Project brings 3D desktop visual effects that improve usability of the X Window System and provide increased productivity though plugins and themes contributed by the community giving a rich desktop experience. This package contains additional plugins from the Compiz Fusion Proj...

CVE-2023-3519

CVE-2023-3519 Because you can run powershell on ur mum's PC without having to install NMAP or PYTHON or tell anyone you run ARCH! ; x...

CVE-2026-102392

Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...

CVE-2026-102392 WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...

CVE-2026-102392 WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...