1949539 matches found
CVE-2026-105885
Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62...
CVE-2026-102388
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPMU DEV Forminator forminator allows Stored XSS.This issue affects Forminator: from n/a through 1.57.3...
CVE-2016-6366
CVE-2016-6366 Public repository for improvements to the EXTRABACON exploit, a remote code execution for Cisco ASA written by the Equation Group NSA and leaked by the Shadow Brokers. There is improved shellcode, a LINA offset finder script, a Metasploit module, and extrabacon-2.0. We are adding...
CVE-2026-48908-by-yora
🔐 CVE-2026-48908 Scanner & Safe PoC Joomla SP Page Builder — Unauthenticated File Upload / Potential RCE Developed byyora 📌 About This project is a security research and vulnerability detection tool developed by yora to help identify CVE-2026-48908 affecting SP Page Builder for Joomla. The...
AWS-SAM-CLI-Vulnerabilities
AWS SAM CLI Vulnerabilities CVE-2025-3047 & CVE-2025-3048 This README provides a detailed analysis of two security vulnerabilities found in the AWS Serverless Application Model CLI AWS SAM CLI – CVE-2025-3047 and CVE-2025-3048 – along with the code-level issues and fixes. Both vulnerabilities...
CVE-2023-34039
CVE-2023-34039 POC for CVE-2023-34039 VMWare Aria Operations for Networks vRealize Network Insight Static SSH key RCE Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-34039/ Summary VMWa...
CVE-2021-40512
CVE-2021-40512 OSCAR McMaster 19.401235 SQL Injection Vulnerability A SQL injection vulnerability exists in version 19.401235 of OSCAR McMaster. A malicious attacker can issue SQL commands to the MySQL/MariaDB database through the vulnerable sendTo parameter located on the...
CVE-2026-66435 WordPress WP Rollback plugin <= 3.1.2 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Devin Walker WP Rollback wp-rollback allows Retrieve Embedded Sensitive Data.This issue affects WP Rollback: from n/a through 3.1.2...
EUVD-2026-96326
Insertion of Sensitive Information Into Sent Data vulnerability in Devin Walker WP Rollback wp-rollback allows Retrieve Embedded Sensitive Data.This issue affects WP Rollback: from n/a through 3.1.2...
CVE-2026-97264
The WPAdverts WordPress plugin (versions n/a through 2.3.4 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. This vulnerability is caused by the Improper Neutralization of Input During Web Page Generation (CWE-79). No specific exploitation details or remediation steps are provided i...
CVE-2026-66435
The WP Rollback WordPress plugin (versions 3.1.2 and below ) is vulnerable to an Insertion of Sensitive Information Into Sent Data (CWE-201) vulnerability. This flaw allows an attacker to Retrieve Embedded Sensitive Data . Specific technical details regarding the root cause or affected functions ...
EUVD-2026-96325
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Greg Winiarski WPAdverts wpadverts allows Reflected XSS.This issue affects WPAdverts: from n/a through 2.3.4...
CVE-2026-66435 WordPress WP Rollback plugin <= 3.1.2 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Devin Walker WP Rollback wp-rollback allows Retrieve Embedded Sensitive Data.This issue affects WP Rollback: from n/a through 3.1.2...
CVE-2026-97264 WordPress WPAdverts plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Greg Winiarski WPAdverts wpadverts allows Reflected XSS.This issue affects WPAdverts: from n/a through 2.3.4...
CVE-2026-97264 WordPress WPAdverts plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Greg Winiarski WPAdverts wpadverts allows Reflected XSS.This issue affects WPAdverts: from n/a through 2.3.4...
CVE-2026-94676 WordPress Tainacan plugin <= 1.3.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0...
CVE-2026-94676
The Tainacan Community Tainacan WordPress plugin is vulnerable to PHP Object Injection due to the deserialization of untrusted data . This vulnerability affects versions from n/a through 1.3.0 . An attacker could potentially exploit this to perform unauthorized actions. No specific exploit links ...
CVE-2026-97263
The WPAdverts plugin by Greg Winiarski is vulnerable to a Stored Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This issue affects versions up to and including 2.3.4 . Exploitation details are not provided in the documents.
CVE-2026-97263 WordPress WPAdverts plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Greg Winiarski WPAdverts wpadverts allows Stored XSS.This issue affects WPAdverts: from n/a through 2.3.4...