EUVD-2026-41144

Silverstripe Framework: Possible XSS attack through media embed...

Silverstripe Framework: Possible XSS attack through media embed

Impact The "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed. Reported by Jack Wallace from Bastion Security...

cve-2015-1538-1

VEUILLEZ NE PAS PARTAGER CECI AVEC PERSONNE. CE CODE VOUS EST FOURNI SOUS FrienNDA. LES PERSONNES VIOLANT CELA NE SERONT PLUS CONSIDÉRÉES COMME DES AMIS. Un script Python est inclus qui génère un MP4 exploitant la vulnérabilité ‘stsc’ également connue sous le nom de CVE-2015-1538 1. C'est l'une d...

PlEXcalaison

Escalação de Privilégio Local - CVE-2021-42835 Plex Media Server para Windows anterior à versão 1.25.0.5282, vulnerável a Time Of Check Time Of Use TOCTOU que permite que usuários com baixos privilégios obtenham privilégios de SYSTEM. Descoberto por Tomer Peled, Netanel Cohen e Amir Shen,...

CVE-2026-74232

creationtimestamp| type| source ---|---|--- 2026-08-27 14:07:43+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu2zi2brta2p 2026-08-27 16:27:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168410801839477 2026-08-27 17:00:52+00:00| seen|...

CVE-2021-29447

CVE-2021-29447 PoC Questo repository contiene un exploit Proof of Concept PoC per la vulnerabilità CVE-2021-29447 , che interessa WordPress 5.6 e 5.7 utilizzando PHP 8. L'exploit dimostra come un attaccante, con la capacità di caricare file, possa sfruttare una vulnerabilità di parsing XML nella...

CVE-2026-78286

creationtimestamp| type| source ---|---|--- 2026-08-27 12:07:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu2srn2bca23 2026-08-27 12:12:09+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117167405591936091 2026-08-27 12:12:09+00:00| seen|...

hdwebmobile-photo-video-reviews

HDWebmobile Avaliações com Foto e Vídeo Um plugin WooCommerce que permite aos clientes anexar fotos e vídeos curtos às suas avaliações de produtos, exibidos diretamente na lista de avaliações na página do produto. WordPress.org: https://wordpress.org/plugins/hdwebmobile-photo-video-reviews/...

CVE-2026-81575

creationtimestamp| type| source ---|---|--- 2026-08-27 11:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2p2ezi6m22...

CVE-2026-78281

Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...

CVE-2026-80589

creationtimestamp| type| source ---|---|--- 2026-08-27 09:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2ibwul2h2p 2026-08-27 09:02:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2ifsjxiz2r 2026-08-27 16:23:29+00:00| seen|...

CVE-2026-78281 WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...

EUVD-2026-66940

Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...

CVE-2026-78281

The WordPress plugin CP Media Player (versions

CVE-2026-81485

A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-management.ts of the component Media Upload. Such manipulation of the argument filePath leads to path traversal. The...

Iran-War-Media

Iran War Media Monitor Leggi l'approfondimento completo Introduzione Questo progetto monitora la copertura mediatica della guerra tra Iran, Israele e Stati Uniti. Puoi usare questo repository per: 1. Creare un corpus di articoli giornalistici in inglese 2. Identificare autori e testate...

Social-media-c2

Server di comando e controllo sui social media Lo script è una prova di concetto su come controllare la tua macchina utilizzando piattaforme di social media. Descrizione e utilizzo Lo script ha le seguenti funzioni: history - RiTwitta history, metti mi piace a una foto su Instagram con 'history'...

CVE-2026-81485

linkedin-ads-mcp (danielpopamd) version 1.0.0 is affected by a path traversal vulnerability in the Media Upload component. The root cause is the fs.readFileSync function in src/tools/campaign-management.ts, where the filePath argument is not properly validated, allowing a remote attacker to read ...

EUVD-2026-66832

A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-management.ts of the component Media Upload. Such manipulation of the argument filePath leads to path traversal. The...

CVE-2026-81485 danielpopamd linkedin-ads-mcp Media Upload campaign-management.ts fs.readFileSync path traversal

A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-management.ts of the component Media Upload. Such manipulation of the argument filePath leads to path traversal. The...