CVE-2026-12277

CVE-2026-12277 Frontend File Manager Plugin WordPress = 23.6 - Unauthenticated Arbitrary File Deletion to RCE Summary Field| Value ---|--- CVE| CVE-2026-12277 Plugin| Frontend File Manager Plugin nmedia-user-file-uploader Affected| = 23.6 Type| Unauthenticated Arbitrary File Deletion CVSS| 8.7 HI...

pdfjs-vuln-demo

PDF.js Vulnerability Demo Project This project is intended to serve as a proof of concept to demonstrate exploiting the vulnerability in the PDF.js pdfjs-dist library reported in CVE-2024-4367 Getting Things Running Fork and clone from this repository npm install npm run dev Testing Things Out...

WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Đỗ Trung Kiên in WordPress Plugin Frontend Dashboard versions = 3.0.7...

CVE-2026-78356

The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend rout...

CVE-2026-78356

The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend rout...

EUVD-2026-97266

The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend rout...

CVE-2026-78356 Unauthenticated Disclosure of Agent Frontend Configuration

The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend rout...

CVE-2026-78356

The OTRS application is vulnerable to an unauthenticated disclosure of the Agent Frontend configuration. This flaw allows remote users to access an endpoint without authentication, retrieving internal details such as frontend routes , authorization groups , authentication configurations , enabled...

CVE-2026-78356: Exposure of Sensitive System Information to an Unauthorized Control Sphere

The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that is intended for use by the authenticated Agent Frontend. The exposed information may include configured frontend rout...

gdb-frontend

GDBFrontend es un depurador gráfico fácil, flexible y extensible. Instalación Requisitos GDB = 8.2 con python3 python3 = 3.6 tmux Paquete PIP Python Wheel Recomendado Puedes instalar GDBFrontend con pip. sudo python3 -m pip install gdbfrontend si ya está instalado y lo estás actualizando sudo...

CVE-2025-3605

🚀 CVE-2025-3605 Exploit Guide 🛡️ Vulnerability Summary The Frontend Login and Registration Blocks plugin for WordPress versions = 1.0.7 is vulnerable to privilege escalation via account takeover. The issue arises because the plugin does not validate user identity when updating sensitive details...

http2smugl

http2smugl Esta herramienta ayuda a detectar y explotar el contrabando de solicitudes HTTP en aquellos casos en que se puede lograr mediante la conversión HTTP/2 - HTTP/1.1 por parte del servidor frontend. El esquema es el siguiente: 1. Un atacante envía una solicitud HTTP/2 manipulada al servido...

Tai-e

Tai-e ✨Noticias Lanzamiento v0.5.4: Tai-e incluye un nuevo frontend que proporciona una conversión más rápida y confiable de programas Java a IR de Tai-e. Se admite el análisis de aplicaciones Android a través de un complemento basado en PacDroid integrado con análisis de punteros. Se admite el...

CVE-2026-42722

Administrator SQL Injection in Frontend Admin by DynamiApps = 3.29.13 versions...

EUVD-2026-96452

Administrator SQL Injection in Frontend Admin by DynamiApps = 3.29.13 versions...

CVE-2026-42722 WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - SQL Injection vulnerability

Administrator SQL Injection in Frontend Admin by DynamiApps = 3.29.13 versions...

CVE-2026-42722

The Frontend Admin by DynamiApps WordPress plugin, in versions

CVE-2026-98375

A flaw was found in the Linux kernel's Xen network frontend driver. This vulnerability allows a malicious host backend to cause a Denial of Service DoS by transmitting incoming network packets with an incomplete Ethernet header. Because the driver fails to verify that incoming packet buffers meet...

CVE-2026-96574

The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpufpaymentmethod' parameter in all versions up to, and including, 4.3.12 due to...

CVE-2026-6243

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via kses bypass / mutation XSS in all versions up to, and including, 3.28.36. This is due to the 'getdynamicvalues' function performing text-level find-and-replace operations on post content without...