CVE-2026-124687

In Progress® Kendo® UI for jQuery versions from 2022.2.621 prior to 2026.4.1111 the DropDownButton and SplitButton allow markup injection through the "id" and "target" attributes. An attacker who can influence these item values can break out of the attributes and inject markup, including event...

EUVD-2026-123580

In Progress® Kendo® UI for jQuery versions from 2022.2.621 prior to 2026.4.1111 the DropDownButton and SplitButton allow markup injection through the id and target attributes. An attacker who can influence these item values can break out of the attributes and inject markup, including event...

CVE-2026-124687

Progress Kendo UI for jQuery (versions 2022.2.621 prior to 2026.4.1111 ) is vulnerable to Cross-Site Scripting (XSS) . The DropDownButton and SplitButton components fail to properly neutralize the id and target attributes, allowing an attacker who can influence these values to break out of the at...

CVE-2023-49989

CVE-2023-49989 Hotel Booking Management v1.0 - SQL Injection Vulnerability in the "id" parameter at update.php Description : Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at update.php. Vulnerable Product Version : Hotel Booking...

CVE-2014-3466_PoC

Proof of Concept for CVE-2014-3466 GnuTLS buffer overflow: session id length check Information See: https://bugzilla.redhat.com/showbug.cgi?id=1101932 This is not a weaponized exploit. be warned: this python code is ugly, I pretty much handcrafted the ServerHello and spent only about five fifteen...

CVE-2021-42670

CVE-2021-42670 CVE-2021-42670 - SQL Injection vulnerability in the Engineers online portal system. Technical description: An SQL Injection vulnerability exists in the Engineers Online Portal. An attacker can leverage the vulnerable "id" parameter in the "announcementsstudent.php" web page in orde...

CVE-2020-17530

What's this This is a Simple test Project for S2-061 which can be used to analysis the detail of this vulnerability. How to use Step 1:Use IDEA import this project Step 2:setup tomcat Server Step 3:Use browser access...

semcms

Introduction to Semcms SEMCMS is a foreign trade website content management system CMS that supports multiple languages. v4.8 Download Link: http://www.sem-cms.com/TradeCmsdown/php/semcmsphp4.8.zip Causes of vulnerabilities: /xcR45qAdmin/SEMCMSMenu.php Line 66 Vulnerability code: query"SELECT FRO...

iDictPy

iDictPy A salty-ass 100% verified hacker status python script to turn apple id's into apple crisp nicememe I initially made this as a better alternative to this piece of shit: https://github.com/Pr0x13/iDict/ but then i forgot i'm a little bit drunk and then this happened. prerequisites are...

dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters

A flaw was found in Dovecot. An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in. This action causes the server to consume excessive memory and CPU resources, leading to the termination of login processes and other active connections...

OESA-2026-4777 activemq security update

The most popular and powerful open source messaging and Integration Patterns server. Security Fixes: Input validation vulnerability in Apache ActiveMQ configured to use the LDAPAuthorizationMapPlugin allows an authenticated attacker to create or address a destination with a crafted name containin...

OESA-2026-4776 activemq security update

The most popular and powerful open source messaging and Integration Patterns server. Security Fixes: Input validation vulnerability in Apache ActiveMQ configured to use the LDAPAuthorizationMapPlugin allows an authenticated attacker to create or address a destination with a crafted name containin...

ROOT-APP-PYPI-CVE-2026-54273 CVE-2026-54273 in aiohttp - Patched by Root

Root has patched CVE-2026-54273 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

Maestro

Maestro Maestro is a post-exploitation tool designed to interact with Intune/EntraID from a C2 agent on a user's workstation without requiring knowledge of the user's password or Azure authentication flows, token manipulation, and web-based administration console. Maestro makes interacting with...

CVE-2020-10199_POC-EXP

Affected versions + + EXP: python3 cve-2020-10199poc.py 1.1.1.1 8081 0.9567822851573897 edfca15e-c721-45e2-bdef-e8b3c6364ddb + + VER: Nexus Repository Manager OSS/Pro version...

Important: Red Hat Security Advisory: dovecot security update

An update for dovecot is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters

A flaw was found in Dovecot. An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in. This action causes the server to consume excessive memory and CPU resources, leading to the termination of login processes and other active connections...

AzureAD-Attack-Defense

Attack and Defense Playbook for Microsoft Entra This publication is a collection of various common attack scenarios on Microsoft Entra and how they can be mitigated or detected. All of the included scenarios, insights and comments are based on experiences from the contributors during their attack...

CVE-2026-93661-idor-events-manager

CVE-2026-93661 — Events Manager Status: Published by WPScan · CVE assigned: CVE-2026-93661 · Verified · Fixed in 7.4.5 Private repository — for disclosure record-keeping and reproduction only. | ---|--- Repository| CVE-2026-93661-idor-events-manager Plugin| Events Manager events-manager Affected...

EntraTrace

EntraTrace EntraTrace is a defensive security research tool for documenting and identifying the observable behavior of offensive tooling targeting Microsoft Entra ID. The project builds a automatic knowledge base around tools such as AzureHound, AADInternals, O365Enum, PingCastle , and others, wi...