CVE-2026-82017

creationtimestamp| type| source ---|---|--- 2026-08-28 22:37:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/buzdraobdsxip 2026-08-29 00:01:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu6l5fd2ov22...

DarkScrape

=====The Dark-Scrape===== Strumento OSINT per trovare i link multimediali nei siti Tor Disponibile in Testato su Kali Linux 2019.2 Ubuntu 18.04 Nethunter Arc Linux Installazione root@kitploit: git clone https://github.com/itsmehacker/DarkScrape.git pip3 install -r requirements.txt Caratteristiche...

CVE-2026-71518

CVE-2026-71518 — Typemill: Umgehung der Autorisierung ohne Authentifizierung Pfadäquivalente URL-Varianten umgehen rollenbeschränkte Medien-Downloads Die Einschränkung basiert auf dem rohen Anfragepfad; die Datei wird über den vom Betriebssystem aufgelösten Pfad gelesen — die beiden weichen...

CVE-2026-14856-TastyIgniter

CVE-2026-14856: XSS persistente verso Account Takeover in TastyIgniter v4.3.0 📌 Sommario È stata identificata una vulnerabilità di Cross-Site Scripting XSS persistente nella funzionalità di caricamento file del Media Manager in TastyIgniter v4.3.0. A causa di una validazione e sanificazione...

CVE-2024-6366

Per creare un modulo Metasploit per sfruttare la vulnerabilità RCE nel plugin WordPress User Profile Builder precedente alla versione 3.11.8, dobbiamo sfruttare la mancanza di autorizzazione appropriata nella funzionalità di caricamento dei file multimediali. Ecco come creare un tale modulo...

CVE-2026-35031

CVE-2026-35031: Path Traversal nel caricamento dei sottotitoli di Jellyfin che porta a RCE -darkred?style=flat-square -orange?style=flat-square TL;DR Una vulnerabilità critica di path traversal in Jellyfin Media Server consente agli utenti autenticati con il permesso "Upload Subtitles" di caricar...

CVE-2023-4634

CVE-2023-4634 Exploit RCE per il Plugin Media-Library di Wordpress 3.10 CVE-2023-4634 Info Patrowl ha scoperto una vulnerabilità RCE non autenticata sul plugin Media-Library-Assistant per Wordpress in versione 3.10. L'exploit non è banale e richiede un piccolo setup spiegato di seguito. La scoper...

Chromium: CVE-2026-79182 Improper input validation in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79083 Improper enforcement of behavioral workflow in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-78963 Improper input validation in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-78900 Improper input validation in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79177 Incorrect authorization in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79004 Out of bounds read in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79231 Buffer overflow in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79139 Improper input validation in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2024-6366-PoC

CVE-2024-6366-PoC User Profile Builder = 3.11.7 - Caricamento media non autenticato Descrizione Il plugin WordPress User Profile Builder precedente alla versione 3.11.8 non dispone di una corretta autorizzazione, consentendo a utenti non autenticati di caricare file media tramite la funzionalità ...

CVE-2026-82253

creationtimestamp| type| source ---|---|--- 2026-08-28 12:40:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dtb7vubmvysob 2026-08-28 13:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu5g6rpoyl22 2026-08-28 17:08:24+00:00| seen|...

wordpress-cve-2021-29447

WordPress CVE-2021-29447 Exploit Nutzt die XML-authentifizierte External Entity Injection XXE der WordPress Media Library aus, um Dateien zu exfiltrieren. Behoben in WordPress 5.7.1. Erfordert gültige WordPress-Anmeldedaten, um mit der Media Library zu interagieren. Verwendung root@kitploit:...

HyperOS-Directory-Traversal-Analysis

🔬 CVE-2025-21082: HyperOS AVCodec Use-After-Free Analisi completa della vulnerabilità Use-After-Free nel Media Framework AVCodec di Xiaomi HyperOS e simulazione in Rust...

DLL_Injection_On_VLC

Iniezione di DLL e CVE-2010-3124 Panoramica 🌱 Questo progetto esplora il tema dell'iniezione di DLL Dynamic Link Library e si concentra in particolare sulla CVE-2010-3124. La CVE-2010-3124 si riferisce a una vulnerabilità di percorso di ricerca non attendibile trovata in VLC Media Player versione...