CVE-2026-75838

A flaw was found in DOMPurify. This cross-site scripting vulnerability occurs during INPLACE sanitization, where element-removal hooks fail to neutralize detached subtrees. A remote attacker can exploit this by supplying specially crafted HTML with event handlers. This allows the execution of...

Security Bulletin: Multiple Vulnerabilities in IBM Concert Software

Summary Multiple vulnerabilities were addressed in IBM Concert Software version 3.0.0 Vulnerability Details CVEID:CVE-2026-26996 DESCRIPTION: minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular...

gh-repo-clone-marklindsey11--CVE-2021-44228_scanner-Applications-that-are-vulnerable-to-the-log4j-CV

-My intention was to conceive of a novel, and effective, policy-based data science framework to optimize a massively distributed alternative data landscape. By leveraging emerging critical new technological advances in operations and core processes, integrated natively, in an architecture which...

CVE-2026-52200

UZ801 / ES-U3TS MifiService Fehlerhafte Zugriffskontrolle Sicherheitshinweis und technische Notizen zu einem Problem mit fehlerhafter Zugriffskontrolle in der eingebetteten Web-Management-API, die von MifiService.apk auf der OEM-/White-Label-Plattform UZ801v2.1 für mobile 4G-LTE-Wi-Fi-Geräte...

EUVD-2026-66463

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Selectively expand iomutex The iomutex was defined to serialize the ioregions, but then has also sort of been associated with the I/O themselves because of the close relationship they share. With the handful of race...

Installer for Rakuten Kobo Desktop Application (Windows version) may insecurely load Dynamic Link Libraries

Overview The installer for Rakuten Kobo Desktop Application Windows version contains the following vulnerability in the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Uncontrolled search path element CWE-427 - CVE-2026-68955 Yukihiro Nakamura reported this...

cve-2026-25676

Ricerca su CVE-2026-25676 DLL Search Path Hijacking nell'Installer di M-Track Duo HD Panoramica Questo repository contiene la ricerca iniziale e una proof-of-concept relativa a CVE-2026-25676, una vulnerabilità di DLL search path hijacking che colpisce l'installer di M-Track Duo HD 1.0.0...

Hitachi Pentaho Business Analytics Server - Remote Code Execution

Hitachi Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x, is susceptible to remote code execution via server-side template injection. Certain web services can set property values which contain Spring templates that are interpreted downstream, thereby...

SHA256-CDP

SHA256-CDP: Cyclische Ziffernsummen-Projektion GPU-beschleunigte Regenbogentabellen-Implementierung des CDP-Strukturanalyse-Frameworks für SHA-256. Basierend auf den Erkenntnissen des CDP-Papers DOI: 10.5281/zenodo.20627240 bietet dieses Repository eine vollständige, funktionsfähige Implementieru...

domato

Domato 🍅 Ein DOM-Fuzzer Geschrieben und gepflegt von Ivan Fratric, [email protected] Copyright 2017 Google Inc. All Rights Reserved. Lizenziert unter der Apache-Lizenz, Version 2.0 die "License"; Sie dürfen diese Datei nur in Übereinstimmung mit der Lizenz verwenden. Eine Kopie der Lizenz...

CVE-2026-0920

Exploit-Forschung: CVE-2026-0920 - LA-Studio Element Kit Backdoor Technische Analyse und Proof of Concept PoC für die kritische Hintertür, die im LA-Studio Element Kit für Elementor Versionen ≤ 1.5.6.3 entdeckt wurde. Diese Schwachstelle ermöglicht die Erstellung von administrativen Konten ohne...

EUVD-2026-66829

A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of the component rawsentryapi. The manipulation of the argument endpoint results in server-side request forgery. It is possible to launch the attack remotely. The exploit has...

CVE-2026-4112

SonicWall SMA 8200v: Privilege Escalation durch Cross-Parameter Blind SQL Injection Firmware: 12.5.0-02283 Platform Hotfix auf 12.5.0-02002 Basis SonicWall Advisory 1. Zusammenfassung Eine Blind-SQL-Injection-Schwachstelle nach der Authentifizierung in der Verwaltungskonsole der SonicWall SMA...

CVE-2026-0920-WordPress-LA-Studio-Exploit

CVE-2026-0920 PoC: LA-Studio Element Kit Backdoor-Exploit Ein robuster Proof-of-Concept-Exploit PoC, geschrieben in Go, für die kritische Backdoor-Schwachstelle im LA-Studio Element Kit für Elementor -Plugin Versionen = 1.5.6.3. Dieses Tool demonstriert, wie ein nicht authentifizierter Angreifer...

Craft-CMS-3.0.25---Cross-Site-Scripting

Craft-CMS-3.0.25 - Cross-Site-Scripting Craft CMS 3.0.25 - Vulnerabilità Cross-Site Scripting CVE-CVE-2018-20418 https://vulners.com/cve/CVE-2018-20418 Prova di concetto Consente di eseguire un attacco Cross-Site Scripting salvando un nuovo titolo dalla scheda della console. root@kitploit: POST...

Glass

Glass wie in durchsichtig und glatt Ein schneller, nativer, mobile-app first interaktiver Disassembler. Geistiger Nachfolger von IDA Pro für den Android‑/iOS‑Reverse‑Engineering‑Workflow, aufgebaut um: smali für APK / DEX / smali‑Handhabung armv8-encode für AArch64 und ARMv7 A32 / Thumb — native...

Aura-State

Aura-State Un framework Python per costruire workflow LLM come macchine a stati, con verifica formale integrata. root@kitploit: pip install git+https://github.com/munshi007/Aura-State.git Che cos'è La maggior parte dei framework LLM ti permettono di concatenare chiamate API e sperare per il megli...

power-tracks-research

Power Tracks Forschung Umfassendes Forschungsrepository für die Marktmechanismen von "Power Tracks", "Stock Galaxy" und "Warped Prism". Diese Codebasis enthält die Werkzeuge, Pipelines und Validierungssuiten, die verwendet wurden, um systemische Anomalien in der modernen Marktmikrostruktur...

CVE-2026-81421

A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of the component rawsentryapi. The manipulation of the argument endpoint results in server-side request forgery. It is possible to launch the attack remotely. The exploit has...

CVE-2023-39144

CVE-2023-39144 배경 이 취약점은 2023년 5월에 발견되었습니다. Element55는 법률 사무소가 시간을 추적할 수 있는 소프트웨어를 생산합니다. 이 소프트웨어는 Exchange, SQL, Shoretel과 같은 다양한 위치에서 정보를 가져옵니다. 타임라인 2023년 5월 24일 - Element 55에 취약점 보고 2023년 5월 25일 - Element55가 취약점을 확인하고 버전 22의 일부로 수정하겠다고 밝혔습니다. 그들은 전문적이었고 함께 일하기 좋았습니다 2023년 7월 24일 - Element 55와...