988 matches found
anamorpher
Anamorpher Anamorpher（命名于 anamorphosis（错视画））是一款用于制作和可视化针对多模态AI系统的图像缩放攻击的工具。它提供了一个前端界面和Python API，用于生成仅在缩小时才会显示多模态提示注入的图像。有关此攻击向量的更多信息，请参阅 《利用图像缩放攻击生产AI系统》。 Anamorpher处于活跃的beta开发阶段。我们欢迎反馈和贡献！ 功能特性 为使用双三次、双线性及最近邻下采样算法特定实现的系统生成载荷 通过包含OpenCV、PyTorch、TensorFlow和Pillow实现的前端界面比较载荷有效性 利用Python...
Malicious code in oleh-modal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf2aebc282014a7dfa6ef1726083d23bcc9cc3eca76c814d4e775b7b10021545 Package [email protected] is a credential-harvesting phishing kit disguised as a wallet-connect modal component. It renders fake...
Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export
The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handleexport' function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to export all feedback data in CSV or...
EmailXpose
EmailXpose 规格说明 AI 驱动的电子邮件清晰度分析 HTML 镜像：https://roxanneardary.com/emailxpose-specification/ 规格概述 EmailXpose 是一个开源、模块化的 AI 电子邮件安全与情报系统，旨在分析电子邮件内容、发件人身份、链接、附件、图片和视频，以识别网络钓鱼、垃圾邮件、诈骗、恶意软件、社会工程、欺骗行为及上下文异常。 EmailXpose 将传统电子邮件安全分析与自然语言处理、计算机视觉、多模态智能、行为分析、威胁情报和符号学解读相结合。该系统旨在解释其发现，而非仅仅给出威胁分类。...
CVE-2026-96270
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formid' parameter in all versions up to, and including, 2.13.1 due to insufficient input sanitization and...
EUVD-2026-91876
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formid' parameter in all versions up to, and including, 2.13.1 due to insufficient input sanitization and...
CVE-2026-96270
The Ultimate Member plugin for WordPress (versions up to and including 2.13.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the 'form_id' parameter. The root cause is insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts...
CVE-2023-29439
CVE-2023-29439 このリポジトリは、WordPress Foogallery プラグインの XSS 脆弱性に関するものです。 脆弱性の詳細 説明 Foogallery 2.2.35 以前では、foogallery/includes/admin/class-gallery-attachment-modal.php 内の foogalleryimageeditormodal 関数が XSS 攻撃に対して脆弱です。 前提条件 認証なし 概念実証 PoC 1. Foogallery 設定 → 管理 → 詳細添付ファイルモーダルを有効にする 2...
DRUPAL-CONTRIB-2026-180
This module enables you to add mermaid diagram that displays either inline on an entity or optionally in a modal. The module doesn't sufficiently respect default revision behavior and does not properly limit access to the modal content. This vulnerability is mitigated by the fact that an attacker...
PT-2026-97674
This module enables you to add mermaid diagram that displays either inline on an entity or optionally in a modal. The module doesn't sufficiently respect default revision behavior and does not properly limit access to the modal content. This vulnerability is mitigated by the fact that an attacker...
PT-2026-97502
Name of the Vulnerable Software and Affected Versions Formie versions prior to 2.2.23 Formie versions prior to 3.1.31 Description An authenticated user can enumerate notification IDs and read recipient headers and complete HTML email bodies containing submitted form data. This occurs because the...
Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180
This module enables you to add mermaid diagram that displays either inline on an entity or optionally in a modal. The module doesn't sufficiently respect default revision behavior and does not properly limit access to the modal content. This vulnerability is mitigated by the fact that an attacker...
PT-2026-96229
Name of the Vulnerable Software and Affected Versions Tautulli versions prior to 2.17.2 Description Tautulli is a Python based monitoring and tracking tool for Plex Media Server. The application fails to use safe JSON encoding when inserting the newsletter cron field from the newsletters table in...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Navigation in Google Chrome on iOS prior to 108.0.5359.71 allowed a remote attacker to spoof the contents of the modal dialogue via a crafted HTML page. Chromium security severity: Medium...
EmailXpose — Updated!
EmailXpose Specification AI-Powered Email Clarity HTML Mirror: https://roxanneardary.com/emailxpose-specification/ Specification Overview EmailXpose is an open source, modular AI email security and intelligence system designed to analyze email content, sender identity, links, attachments, images,...
CVE-2026-16645: Missing Authorization
Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 3.2.0...
CVE-2026-66634
Subscriber Insecure Direct Object References IDOR in Modal Survey = 2.0.2.2.3 versions...
CVE-2026-66634 WordPress Modal Survey plugin <= 2.0.2.2.3 - Insecure Direct Object References (IDOR) vulnerability
Subscriber Insecure Direct Object References IDOR in Modal Survey = 2.0.2.2.3 versions...
CVE-2026-66634
The Modal Survey WordPress plugin (versions ≤ 2.0.2.2.3) contains an IDOR flaw allowing authenticated subscribers to access or modify objects without authorization. Patchstack reports it; no patch version or exploitation evidence is provided in the documents. Upgrade to a newer version if availab...