43 matches found
Y2X
Y2eXploit Y2X --- Overview Y2eXploit Y2X is an a...
RHCOS 4 : OpenShift Container Platform 4.6.51 (RHSA-2021:4799)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4799 advisory. - jenkins: FilePathmkdirs does not check permission to create parent directories CVE-2021-21685 - jenkins: File path filters do not...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Safari
Vue-After-Free A PlayStation Vue userland code execution e...
CVE-2026-27638
Actual is a local-first personal finance tool. Prior to version 26.2.1, in multi-user mode OpenID, the sync API endpoints /sync/ don't verify that the authenticated user owns or has access to the file being operated on. Any authenticated user can read, modify, and overwrite any other user's budge...
WordPress plugin Simple File List 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...
LibrePS4
LibrePS4 stable PSFREE Original Lapse Kex ported to 9.00 Very...
Louvre Jewel Heist
I assume I don't have to explain last week's Louvre jewel heist. I love a good caper, and have like many others eagerly followed the details. An electric ladder to a second-floor window, an angle grinder to get into the room and the display cases, security guards there more to protect patrons tha...
CVE-2025-59017
Missing authorization checks in the Backend Routing of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke AJAX backend routes without having access to the corresponding backend modules...
psfree-lapse
🌟 psfree-lapse - Easy PS4 Exploits in One Place 📥 Download...
Malicious code in test-mlw2-began-yokel-lapse-clogs (npm)
The package test-mlw2-began-yokel-lapse-clogs was found to contain malicious code...
MAL-2025-35649 Malicious code in test-mlw2-lapse-wench (npm)
The package test-mlw2-lapse-wench was found to contain malicious code...
Malicious code in test-mlw2-lapse-wench (npm)
The package test-mlw2-lapse-wench was found to contain malicious code...
MAL-2025-34946 Malicious code in test-mlw2-began-yokel-lapse-clogs (npm)
The package test-mlw2-began-yokel-lapse-clogs was found to contain malicious code...
WordPress plugin Visual Header 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PrepHero-Linked Database Exposed Data of 3M Students and Coaches
A security lapse on PrepHero, a college recruiting platform, exposed millions of unencrypted records, including sensitive personal details…...
WordPress plugin Pearl 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-7598 Network restriction bypass via race condition during namespace termination
A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects are deleted during namespace termination is not defined, and it is possible for network policies ...
Propertyrec Leak Exposes Over Half a Million Background Check Records
Summary A critical data security lapse has left a massive trove of personal information vulnerable, raising concerns about…...
The US Could Finally Ban Inane Forced Password Changes
Plus: The US Justice Department indicts three Iranians over Trump campaign hack, EU regulators fine Meta $100 million for a password security lapse, and the Tor Project enters a new phase...