firehol

FireHOL http://firehol.org/ FireHOL, an iptables stateful packet filtering firewall for humans! FireQOS, a TC based bandwidth shaper for humans! Git These instructions are for people who are working with the git repository. There are more general instructions starting with Upgrade Notes. Cloning...

CVE-2026-124420

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Woody ad snippets insert-php allows Reflected XSS.This issue affects Woody ad snippets: from n/a through 2.7.10...

CVE-2026-124420

The Woody ad snippets WordPress plugin (versions up to and including 2.7.10 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The root cause is the Improper Neutralization of Input During Web Page Generation , which allows an attacker to execute malicious scripts in a user's browser...

CVE-2026-124420 WordPress Woody ad snippets plugin <= 2.7.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Woody ad snippets insert-php allows Reflected XSS.This issue affects Woody ad snippets: from n/a through 2.7.10...

EUVD-2026-125419

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Woody ad snippets insert-php allows Reflected XSS.This issue affects Woody ad snippets: from n/a through 2.7.10...

CVE-2026-126371 Vvveb through 1.0.8.6 SQL Injection via Admin_Auth_TokenSQL::update() Array Keys

Vvveb through 1.0.8.6 contains an SQL injection vulnerability in AdminAuthTokenSQL::update, which interpolates adminauthtoken array keys into an INSERT column list without a column whitelist or backtick escaping. Authenticated admin-panel users can submit backtick-containing keys to the...

EUVD-2026-125191

Vvveb through 1.0.8.6 contains an SQL injection vulnerability because the @KEYS:each macro emits PHP array keys as backtick-quoted INSERT column names without escaping, and several procedures in admin/sql/mysqli/product.sql and adminauthtoken.sql omit the @FILTER guard. Authenticated back-office...

sqlite-xfer-auth

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-xfer-auth Write-up: https://abraxaslabs.tech/research/sqlite-xfer-auth sqlite-xfer-auth Class: Privilege leftover Reach: Local SQLite 3.53.4 b09c88c, SOURCEID 2026-07-24 19:02:57...

PT-2026-146909

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Woody ad snippets insert-php allows Reflected XSS.This issue affects Woody ad snippets: from n/a through 2.7.10...

Linux Distros Unpatched Vulnerability : CVE-2026-16237

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper protection in PostgreSQL INSERT ... ON CONFLICT on auto-updatable views allows an attacker having INSERT and UPDATE privileges on the view to read and...

CVE-2025-51820

CVE-2025-51820 A critical Remote Code Execution RCE vulnerability CVE-2025-51820 has been discovered in the Shopping Portal v1.0. 🚨 Remote Code Execution in Online Shopping Portal Project v1.0 CVE-2025-51820 🔍 Introduction In today’s digital world, Remote Code Execution RCE remains one of the mos...

CVE-2026-120154

Improper protection in PostgreSQL INSERT ... ON CONFLICT allows an attacker having INSERT, UPDATE, and applicable SELECT privileges on the table to read every row despite row security policies, via iterated INSERT ... ON CONFLICT DO UPDATE. Unlike CVE-2026-16237, this does not facilitate improper...

CVE-2026-16237

Improper protection in PostgreSQL INSERT ... ON CONFLICT on auto-updatable views allows an attacker having INSERT and UPDATE privileges on the view to read and modify every row in the view's base table, via iterated INSERT ... ON CONFLICT DO UPDATE. This bypasses the view's WHERE condition, wheth...

postgresql: postgresql: Security restriction bypass via INSERT ON CONFLICT on auto-updatable views

A flaw was found in PostgreSQL. When handling conflict-resolving insert statements INSERT ... ON CONFLICT on auto-updatable views, the database fails to properly enforce view boundary restrictions. An authenticated attacker with insert and update privileges on a view can exploit this vulnerabilit...

postgresql: PostgreSQL: Row-level security bypass via INSERT ON CONFLICT DO UPDATE

A flaw was found in PostgreSQL. An authenticated database user with table modification privileges can bypass Row-Level Security RLS policies, leading to unauthorized information disclosure. By executing iterated INSERT ... ON CONFLICT DO UPDATE statements, an attacker can read protected rows that...

CVE-2026-120154

A flaw was found in PostgreSQL. An authenticated database user with table modification privileges can bypass Row-Level Security RLS policies, leading to unauthorized information disclosure. By executing iterated INSERT ... ON CONFLICT DO UPDATE statements, an attacker can read protected rows that...

CVE-2026-16237

A flaw was found in PostgreSQL. When handling conflict-resolving insert statements INSERT ... ON CONFLICT on auto-updatable views, the database fails to properly enforce view boundary restrictions. An authenticated attacker with insert and update privileges on a view can exploit this vulnerabilit...

CVE-2026-120149

A flaw was found in PostgreSQL. A heap-based buffer overflow vulnerability in foreign batch insert operations allows a foreign server to execute arbitrary code. This issue occurs when a remote foreign server reports that it inserted more data rows than the local database server supplied, leading ...

DEBIAN-CVE-2026-16237

Improper protection in PostgreSQL INSERT ... ON CONFLICT on auto-updatable views allows an attacker having INSERT and UPDATE privileges on the view to read and modify every row in the view's base table, via iterated INSERT ... ON CONFLICT DO UPDATE. This bypasses the view's WHERE condition, wheth...

CVE-2026-16237

Improper protection in PostgreSQL INSERT ... ON CONFLICT on auto-updatable views allows an attacker having INSERT and UPDATE privileges on the view to read and modify every row in the view's base table, via iterated INSERT ... ON CONFLICT DO UPDATE. This bypasses the view's WHERE condition, wheth...