CVE-2026-78281 WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...

CVE-2026-78281

The WordPress plugin CP Media Player (versions

EUVD-2026-66940

Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...

CVE-2026-81485

A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-management.ts of the component Media Upload. Such manipulation of the argument filePath leads to path traversal. The...

Iran-War-Media

Iran War Media Monitor Leggi l'approfondimento completo Introduzione Questo progetto monitora la copertura mediatica della guerra tra Iran, Israele e Stati Uniti. Puoi usare questo repository per: 1. Creare un corpus di articoli giornalistici in inglese 2. Identificare autori e testate...

Social-media-c2

Server di comando e controllo sui social media Lo script è una prova di concetto su come controllare la tua macchina utilizzando piattaforme di social media. Descrizione e utilizzo Lo script ha le seguenti funzioni: history - RiTwitta history, metti mi piace a una foto su Instagram con 'history'...

CVE-2026-81485

linkedin-ads-mcp (danielpopamd) version 1.0.0 is affected by a path traversal vulnerability in the Media Upload component. The root cause is the fs.readFileSync function in src/tools/campaign-management.ts, where the filePath argument is not properly validated, allowing a remote attacker to read ...

EUVD-2026-66832

A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-management.ts of the component Media Upload. Such manipulation of the argument filePath leads to path traversal. The...

CVE-2026-81485 danielpopamd linkedin-ads-mcp Media Upload campaign-management.ts fs.readFileSync path traversal

A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-management.ts of the component Media Upload. Such manipulation of the argument filePath leads to path traversal. The...

CVE-2026-79177

Incorrect authorization in Media in Google Chrome on on Windows prior...

OPENSUSE-SU-2026:11623-1 libopenssl-3-devel-3.5.3-8.1 on GA media

These are all security issues fixed in the libopenssl-3-devel-3.5.3-8.1 package on the GA media of openSUSE Tumbleweed...

CVE-2021-29447

CVE-2021-29447 - Exploit della vulnerabilità XXE di WordPress Descrizione Questo repository contiene un exploit per CVE-2021-29447, una vulnerabilità XXE XML External Entity presente in WordPress 5.7.0 e versioni precedenti. La vulnerabilità risiede nella libreria multimediale che elabora file WA...

CVE-2026-61617

creationtimestamp| type| source ---|---|--- 2026-08-26 23:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzgrrh5tj26 2026-08-27 00:07:53+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtzkkcu5sd23...

Project-Project-Chimera-Exploiting-a-Modern-WordPress-XXE-to-Pillage-Secrets-

Projektziel: Demonstration einer vollständigen Angriffskette auf eine verwundbare WordPress-Installation unter Ausnutzung von CVE-2021-29447 XXE in der Medienbibliothek zur Erlangung von Remote-Codeausführung und vollständiger Systemkompromittierung. Phase 1: Aufklärung & Enumeration Netzwerkscan...

CVE-2026-61792

creationtimestamp| type| source ---|---|--- 2026-08-26 21:59:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzdfkzhsb27...

cyph

Cyph Cyph è un servizio di messaggistica e social network crittograficamente sicuro, che offre un livello estremo di privacy combinato con la massima facilità d'uso. La tecnologia brevettata di Cyph — costruita da ex ingegneri SpaceX, verificata da Cure53 e alla base di presentazioni di ricerca a...

emploleaks

EmploLeaks EmploLeaks é uma ferramenta de OSINT Open Source Intelligence com uma interface CLI, projetada para descobrir e correlacionar informações sobre funcionários de uma empresa alvo. Permite coletar perfis do LinkedIn, gerar e-mails corporativos potenciais, buscar credenciais vazadas em bas...

CVE-2026-80196

creationtimestamp| type| source ---|---|--- 2026-08-26 18:04:02+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117163127023272638 2026-08-26 18:04:02+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtyw7nsnmz2g...

CVE-2026-79177

A flaw was found in the Media component of Google Chrome on Windows. Incorrect authorization allows a remote attacker, who has already compromised the renderer process, to bypass system access restrictions. This can be achieved by crafting a malicious HTML page, leading to unauthorized access...

CVE-2026-79004

A flaw was found in Media in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an out-of-bounds read vulnerability by using a specially crafted HTML page. This could allow the attacker to read sensitive memory outside of the browser's security sandbox, leadi...