CVE-2026-104977

Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an SSRF in work-item link unfurling shipped in v1.2.2, remains incomplete in the v1.3.1 GA release. Any authenticated project member can make the server fetch attacker-selected...

CVE-2026-104977 Plane: Incomplete fix of CVE-2026-27706 — SSRF still reachable on: missing is_blocked_ip (CGNAT/multicast) + DNS-rebinding TOCTOU

Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an SSRF in work-item link unfurling shipped in v1.2.2, remains incomplete in the v1.3.1 GA release. Any authenticated project member can make the server fetch attacker-selected...

EUVD-2026-92535

Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an SSRF in work-item link unfurling shipped in v1.2.2, remains incomplete in the v1.3.1 GA release. Any authenticated project member can make the server fetch attacker-selected...

CVE-2026-104977

The project management tool Plane contains a Server-Side Request Forgery (SSRF) vulnerability in its work-item link unfurling functionality. The issue persists in versions prior to 1.4.0 because the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw remained incomplete in the 1.3.1 GA release. Specif...

Mythic-Macro-Generator

Mythic-Macro-Generator 用于生成 MS Office 宏的 Python3 脚本，用于启动 Mythic JXA 有效载荷。 此脚本生成一个 Office 宏，该宏使用 osascript 下载并执行 Mythic JXA .js 有效载荷。 步骤： 1. 设置 Mythic C2 服务器并生成一个 "apfell" jxa 有效载荷（注意：此生成器假设有效载荷使用 http 而非 https...如果您使用 https，可以修改生成器脚本让 curl 使用 https）。在 Mythic 服务器上下载该有效载荷。 2. 删除 Mythic JXA .js...

libfwsi

libfwsi es una biblioteca para acceder al formato Windows Shell Item. Información del proyecto: Estado: experimental Licencia: LGPL-3.0-or-later Para más información, ver: Documentación del proyecto: https://github.com/libyal/libfwsi/wiki/Home Cómo compilar desde el código fuente:...

CVE-2025-56771

描述 在对ecodotempo.com.br网站进行分析时，发现了一个存储型跨站脚本XSS漏洞。该漏洞允许攻击者将恶意脚本注入到某些字段中，这些字段随后会未经适当清理便渲染给其他用户，具体出现在未认证（已断开连接）区域的首页上。 受影响端点 ecodotempo.com.br/colecoes/itens/cadastrarrealizar.php 受影响参数 name="nome" and name="descricao" Payload示例： PoC...

Academy LMS 6.0 - Cross-Site Scripting

Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting XSS vulnerability through query parameter. id: CVE-2023-38964 info: name: Academy LMS 6.0 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Creative Item Academy LMS 6.0 was discovered to...

CVE-2023-3009

CVE-2023-3009 XSS almacenado en el nombre del elemento - Bypass de CVE-2023-2516 en TeamPass 3.0.9 - por M Nadeem Qazi Description Este repositorio aborda la vulnerabilidad de XSS almacenado descubierta en la aplicación nilsteampassnet/teampass, a la que se le asignó el identificador CVE-2023-251...

duckdb

Jepsen DuckDB 测试 针对 DuckDB 数据库的 Jepsen 测试。在本地运行，而不是在远程集群上。该测试会生成一组本地进程，它们打开本地的 DuckDB 文件，并通过标准输入/标准输出与其交互。 这是一个早期原型。它能启动、运行事务、检查正确性并报告错误，但我不确定这些错误是否真实存在。 安装 你需要一个 JDK（21+）、Git、Gnuplot、Graphviz，以及 Leiningen。与大多数 Jepsen 测试不同，此测试完全在本地运行；你不需要集群机器、SSH 密钥等。 Debian sudo apt install openjdk leiningen...

CVE-2023-2591

CVE-2023-2591: Teampass 3.0.6 中项目标签的存储型HTML注入漏洞 - M Nadeem Qazi 我最近在 nilsteampassnet/teampass 这个流行的密码管理工具中发现了一个安全漏洞。该漏洞被标识为 CVE-2023-2591，是项目标签字段中的存储型HTML注入漏洞。如果两个用户具有相同的文件夹访问权限，恶意用户可以创建一个项目，其标签字段容易受到HTML注入攻击。当其他用户看到该项目时，可能会强制他们重定向到攻击者的网站，或者通过表单捕获他们的数据。 漏洞详情 漏洞类型：存储型HTML注入 CVE：CVE-2023-2591...

CVE-2026-84645

CVE-2026-84645 — Deserialización RCE en PersistenceRoot de Jenkins SECURITY-3972 PoC para la vulnerabilidad de deserialización de Jenkins corregida el 2026-09-02 aviso. Una cuenta con privilegios bajos que tenga Item/Configure en cualquier trabajo individual puede convertir eso en ejecución...

ServiceNow AI Platform - Pre-Auth JavaScript Sandbox Escape RCE

ServiceNow AI Platform Brazil, Australia, Zurich, and Yokohama releases before patching contains a pre-authentication remote code execution vulnerability. The /assessmentthanks.do endpoint passes the sysparmassessabletype parameter into GlideRecord's addQuery, which evaluates "javascript:" prefix...

CVE-2026-97660

The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpcpo- Array Key via Multipart Field Name in all versions up to, and including, 4.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

CVE-2026-97660

The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 4.0.5 . The root cause is insufficient input sanitization and output escaping. Unauthenticated attackers can exploit this via a guest checkout by emb...

CVE-2026-97660 WPC Product Options for WooCommerce <= 4.0.5 - Unauthenticated Stored Cross-Site Scripting via wpcpo-* Array Key via Multipart Field Name

The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpcpo- Array Key via Multipart Field Name in all versions up to, and including, 4.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

EUVD-2026-91952

The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpcpo- Array Key via Multipart Field Name in all versions up to, and including, 4.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

CVE-2026-88782 Kubio AI Page Builder < 2.9.3 - Contributor+ Stored XSS via Image Gallery Item URL Attribute

The Kubio AI Page Builder WordPress plugin before 2.9.3 does not validate the URI scheme of a user-supplied value before outputting it as a link target, allowing users with the contributor role and above to store a payload which executes in the browser of anyone who follows the link, including an...

CVE-2026-88782 Kubio AI Page Builder < 2.9.3 - Contributor+ Stored XSS via Image Gallery Item URL Attribute

The Kubio AI Page Builder WordPress plugin before 2.9.3 does not validate the URI scheme of a user-supplied value before outputting it as a link target, allowing users with the contributor role and above to store a payload which executes in the browser of anyone who follows the link, including an...

EUVD-2026-91855

Shopclass before 6.2.0 contains a stored cross-site scripting vulnerability that allows self-registered non-admin users to inject scripts into item listing descriptions when frontend TinyMCE is enabled. Attackers can submit malicious JavaScript, which ItemActions.php saves without tag stripping,...