CVE

CVE Writeups for CVE-2025-67586, CVE-2025-67985, CVE-2025-67986 -------------- CVE-2025-67586 Exploit PoC -------------- Exploit Title: WordPress Plugin 5.2.0 - Broken Access Control Software Link: https://wordpress.org/plugins/highlight-and-share/ Version: Description A broken access control...

CVE-2005-0603-phpBB-2.0.12-Full-path-disclosure

CVE: https://vulners.com/cve/CVE-2005-0603 Neo Security Team NST® - Advisory 06 - 25/02/05 Program: phpBB 2.0.12 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.12 & Lower versions Risk: Low Risk!! Impact: Full path disclosure -==phpBB 2.0.12 Full path disclosure==- Description phpB...

CLSA-2026-1792516123 TuxCare security update for @babel/highlight (2 CVEs)

TuxCare rebuilt @babel/highlight to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792516120 TuxCare security update for @babel/highlight (1 CVE)

TuxCare rebuilt @babel/highlight to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792516115 TuxCare security update for @babel/highlight (1 CVE)

TuxCare rebuilt @babel/highlight to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792516114 TuxCare security update for @babel/highlight (1 CVE)

TuxCare rebuilt @babel/highlight to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CVE-2026-61610

Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photosstarvisibility is set to anonymous, POST /api/v2/Photo::highlight can fetch and modify a photo without confirming that the caller can see it. BaseApiRequest::validateResolved invokes...

CVE-2026-61610 Lychee: unauthenticated photo starring reveals existence of private photos when photos_star_visibility=anonymous

Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photosstarvisibility is set to anonymous, POST /api/v2/Photo::highlight can fetch and modify a photo without confirming that the caller can see it. BaseApiRequest::validateResolved invokes...

CVE-2026-61610

The photo-management tool Lychee is vulnerable to an improper access control issue in versions prior to 7.6.1 . When photos_star_visibility is set to anonymous, the POST /api/v2/Photo::highlight endpoint fails to verify if a caller has permission to see a photo before processing the request. Spec...

CVE-2026-61610 Lychee: unauthenticated photo starring reveals existence of private photos when photos_star_visibility=anonymous

Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photosstarvisibility is set to anonymous, POST /api/v2/Photo::highlight can fetch and modify a photo without confirming that the caller can see it. BaseApiRequest::validateResolved invokes...

CVE-2026-61610: Improper Access Control

Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photosstarvisibility is set to anonymous, POST /api/v2/Photo::highlight can fetch and modify a photo without confirming that the caller can see it. BaseApiRequest::validateResolved invokes...

PT-2026-115021

Name of the Vulnerable Software and Affected Versions Lychee versions prior to 7.6.1 Description An issue exists when the photos star visibility setting is configured as anonymous. An unauthenticated attacker who can guess photo identifiers can use the 'POST /api/v2/Photo::highlight' endpoint to...

CVE-2026-92243 Ivory Search <= 5.5.18 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 5.5.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-92243 Ivory Search <= 5.5.18 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 5.5.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-92243: Improper Neutralization of Input During Web Page Generation

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 5.5.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2025_1292)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20251292 advisory. firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 CVE-2025-1017 firefox: thunderbird...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the highlight parameter of the search plugin due to insufficient HTML or JavaScript escaping. An attacker can execute arbitrary scripts in the context of a user's browser by enticing a victim to click a craft...

CVE-2026-100521

Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in the search plugin highlight parameter that performs no HTML or JavaScript escaping. Attackers can craft malicious links with injected JavaScript in the highlight parameter that executes in the browser of any visitor...

CVE-2026-100521

Cotonti versions through 1.0.0 are vulnerable to a reflected cross-site scripting (XSS) vulnerability within the search plugin highlight parameter . The root cause is the failure to perform proper HTML or JavaScript escaping on this parameter. An attacker can craft a malicious link containing inj...

CVE-2026-100521 Cotonti through 1.0.0 Reflected XSS via search highlight parameter

Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in the search plugin highlight parameter that performs no HTML or JavaScript escaping. Attackers can craft malicious links with injected JavaScript in the highlight parameter that executes in the browser of any visitor...