CVE-2025-59057-PoC

A XSS vulnerability exists in in React Router's meta/ APIs in Framework Mode when generating script:ld+json tags which could allow arbitrary JavaScript execution during SSR if untrusted content is used to generate the tag...

CVE-2026-89274-wp-recipe-maker-poc

CVE-2026-89274 - WP Recipe Maker Arbitrary Shortcode Execution Validation Lab Security-research material for reproducing and validating CVE-2026-89274 : WP Recipe Maker Use only on systems you own or are explicitly authorized to test. The PoC posts one rating comment containing a lab-registered...

Astra Linux – Vulnerability in binutils

A heap-based buffer overflow issue was discovered in the secmergehashlookup function in merge.c within the Binary File Descriptor BFD library also known as libbfd, as part of the GNU Binutils 2.31. This issue arises due to bfdaddmergesection improperly handling section merges when the size is not...

libprocesshider

libprocesshider Nascondi un processo sotto Linux usando il preloader ld. Tutorial completo disponibile su https://sysdigcloud.com/hiding-linux-processes-for-fun-and-profit/ In breve, compila la libreria: gianluca@sid:/libprocesshider$ make gcc -Wall -fPIC -shared -o libprocesshider.so...

Exploit for Privilege Chaining in Canonical Ubuntu_Linux

CVE-2026-3888 - snap-confine - Escalacion de Privilegios a Roo...

CVE-2026-103292

Ghost versions from 0.5.3 through versions prior to 6.50.0 fail to sanitize the data placed in the JSON-LD HTML tag emitted by the ghosthead helper. An authenticated user with limited privileges can inject unescaped content that is rendered as script in the published page, potentially leading to...

CVE-2026-103292 Ghost 0.5.3 before 6.50.0 Cross-Site Scripting via ghost_head

Ghost versions from 0.5.3 through versions prior to 6.50.0 fail to sanitize the data placed in the JSON-LD HTML tag emitted by the ghosthead helper. An authenticated user with limited privileges can inject unescaped content that is rendered as script in the published page, potentially leading to...

EUVD-2026-90685

Ghost versions from 0.5.3 through versions prior to 6.50.0 fail to sanitize the data placed in the JSON-LD HTML tag emitted by the ghosthead helper. An authenticated user with limited privileges can inject unescaped content that is rendered as script in the published page, potentially leading to...

CVE-2026-103292: Improper Neutralization of Input During Web Page Generation

Ghost versions from 0.5.3 through versions prior to 6.50.0 fail to sanitize the data placed in the JSON-LD HTML tag emitted by the ghosthead helper. An authenticated user with limited privileges can inject unescaped content that is rendered as script in the published page, potentially leading to...

PT-2026-103824

Name of the Vulnerable Software and Affected Versions Ghost versions 0.5.3 through 6.49.9 Description Insufficient sanitization of data within the JSON-LD HTML tag emitted by the ghost head helper allows an authenticated user with limited privileges to inject unescaped content. This content is...

Rocky Linux 10.1 [CIQ] Security Update: binutils / binutils-debuginfo / binutils-debugsource / etc (crlsa-2025_20155)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202520155 advisory. binutils: GNU Binutils ld elflink.c elfgcsweep memory corruption CVE-2025-5244 Tenable has extracted the preceding description block directly from the CIQ...

CentOS Linux 6 [TuxCare] Security Update: binutils / binutils-devel Multiple Vulnerabilities (CENTOS6:CLSA-2026:1775722568)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1775722568 advisory. - A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elfgcsweep...

CentOS Linux 8 [TuxCare] Security Update: binutils / binutils-devel Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1776083558)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1776083558 advisory. - A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function...

CentOS Linux 7 [TuxCare] Security Update: binutils / binutils-devel Multiple Vulnerabilities (CENTOS7:CLSA-2026:1777286373)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1777286373 advisory. - A flaw has been found in GNU Binutils 2.45. Impacted is the function bfdelfparseehframe of the file bfd/elf-eh-frame.c of the componen...

ld-platform (>=0.1.2, <=0.2.0), spswarehouse-airflow (0.6.3) potentially affected by CVE-2026-82355 via apache-airflow (2.5.0)

apache-airflow PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - ld-platform =0.1.2, =0.2.0 - spswarehouse-airflow 0.6.3 Source cves: CVE-2026-82355 Source advisory: OSV:PYSEC-2026-3989...

ld-platform (>=0.1.2, <=0.2.0), spswarehouse-airflow (0.6.3) potentially affected by CVE-2026-75158 via apache-airflow (2.5.0)

apache-airflow PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - ld-platform =0.1.2, =0.2.0 - spswarehouse-airflow 0.6.3 Source cves: CVE-2026-75158 Source advisory: OSV:PYSEC-2026-3988...

PT-2026-96264

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.10.6-lts Description Function-library code running under the LD PRELOAD sandbox can invoke ctypes.CDLL from an importlib.abc.MetaPathFinder callback. This allows the dlopen call-stack heuristic to identify a Python...

PT-2026-96263

Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.10.6-lts Description The ToolExecutor LD PRELOAD sandbox fails to hook the fexecve function, although it hooks execve, execvpe, and execveat to prevent subprocess creation. An authenticated attacker with the ability t...

Exploit for CVE-2026-89274

CVE-2026-89274 — WP Recipe Maker Arbitrary Shortcode Execution...

CVE-2026-9289

The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.54.10 via the JSON-LD REST API endpoints. This is due to the plugin registering the /wordlift/v1/jsonld/ routes jsonld/id, jsonld/http/itemid,...