CSV-Injection-in-Instant-Developer-Foundation-25.0-PoC

CVE-2025-60852: CSV Injection in Instant Developer Foundation 25.0.9600 – Proof of Concept PoC 📌 Overview This repository contains a Proof of Concept PoC for a CSV Injection Formula Injection vulnerability CVE-2025-60852 affecting applications built with the Instant Developer Foundation framework...

Aruba Instant Access Point (IAP) - Cross-Site Scripting

A remote cross-site scripting xss vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below;...

CVE-2026-15282

CVE-2026-15282 — Instant Appointment Mass RCE Exploit Pre-Auth filegetcontents + fileputcontents → PHP Webshell Overview CVE-2026-15282 is a critical CVSS 9.8 unauthenticated arbitrary file upload vulnerability in the Instant Appointment WordPress plugin ≤ 1.2. The addservicefront AJAX action is...

instant-appointment-arbitrary-file-upload

instant-appointment-arbitrary-file-upload instant-appointment - Arbitrary File upload Description The Instant Appointment plugin for WordPress is vulnerable to Arbitrary File upload in versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to upload a shell and...

EUVD-2026-105868

Vulnerability in Oracle Autonomous Health Framework component: AHF Instant Diagnostic Replay. Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to...

CVE-2026-101452

Vulnerability in Oracle Autonomous Health Framework component: AHF Instant Diagnostic Replay. Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to...

CVE-2026-101452

A vulnerability exists in the Oracle Autonomous Health Framework (component: AHF Instant Diagnostic Replay ) affecting supported versions 26.3-26.8 . A low-privileged attacker with local access to the infrastructure where the framework executes can exploit this vulnerability to compromise the sof...

PT-2026-119140

Vulnerability in Oracle Autonomous Health Framework component: AHF Instant Diagnostic Replay. Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to...

Combining Long-Term Memory and LLMs Comes at a High Cost: From Prompt Injection to Persistent Compromise

The widespread adoption of generative artificial intelligence in recent years has brought a parallel rise in prompt injection and jailbreak attacks. By embedding malicious instructions, these exploits manipulate language models to bypass intended behavior and operational boundaries. In traditiona...

Oracle Autonomous Health Framework security vulnerabilities

The Oracle Autonomous Health Framework versions 26.3 to 26.8 have security vulnerabilities. These vulnerabilities stem from issues with the AHF Instant Diagnostic Replay component. They could allow low-privilege attackers to log in and execute infrastructure tasks, potentially gaining control of...

CVE-2026-104755: Improper Privilege Management

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The vulnerability exists because the startcomms dispatcher wpsiccomms::startcomms, hooked on every front-end request, gates access on...

PT-2026-115485

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The vulnerability exists because the start comms dispatcher wps ic comms::start comms, hooked on every front-end request, gates acces...

CVE-2026-92088

Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation. This issue affects upKeeper Instant Privilege Access: through 1.7.1...

CVE-2026-92088

Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation. This issue affects upKeeper Instant Privilege Access: through 1.7.1...

CVE-2026-92088

The software upKeeper Instant Privilege Access by upKeeper Solutions is vulnerable to Privilege Escalation due to improper handling of undefined values (CWE-232). This vulnerability affects versions through 1.7.1 . The CVSS 4.0 score is 8.6 (High) , indicating significant impact on confidentialit...

EUVD-2026-99242

Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation. This issue affects upKeeper Instant Privilege Access: through 1.7.1...

CVE-2026-92088

Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation. This issue affects upKeeper Instant Privilege Access: through 1.7.1...

CVE-2026-92088: Improper Handling of Undefined Values

Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation. This issue affects upKeeper Instant Privilege Access: through 1.7.1...

PT-2026-111870

Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation. This issue affects upKeeper Instant Privilege Access: through 1.7.1...

upKeeper Solutions upKeeper Instant Privilege Access: Input validation vulnerability

UpKeeper Solutions’ UpKeeper Instant Privilege Access versions 1.7.1 and earlier have a vulnerability in input validation. This vulnerability stems from improper handling of undefined values, which may lead to privilege escalation...