onelinepy

onelinepy Python Obfuscator for FUD Python Code. Download & Run git clone https://github.com/spicesouls/onelinepy cd onelinepy chmod +x setup.sh ./setup.sh onelinepy Usage Guide | || | . | | -| | | | -| . | | |Python |||||||||| | |Obfuscator || || usage: oneline.py -h -m M -i I --script SCRIPT...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

Read More & Accordion <= 3.5.7 - Authenticated Privilege Escalation

The Read More & Accordion expand-maker plugin for WordPress through 3.5.7 allows privilege escalation due to improper validation in the importData AJAX handler yrmimportdata action. An authenticated user with plugin access can upload a crafted JSON attachment to insert arbitrary rows into WordPre...

WordPress Ajax Load More < 7.8.4 - Reflected Cross-Site Scripting

The Ajax Load More WordPress plugin 7.8.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting attack which could be used against high privilege users such as administrators. id: CVE-2026-6495 info: name: WordPress Ajax Load...

CVE-2025-71434

Weaver E-cology 8.0, 9.0, and 10.0 prior to 10.76 contains an unauthenticated SQL injection vulnerability in the /api/doc/out/more/list endpoint via the elementmore parameter with srcType=2. Attackers can inject SQL through docdatefrom/docdateto fields and read results via /api/ec/dev/table/count...

EUVD-2025-211171

Weaver E-cology 8.0, 9.0, and 10.0 prior to 10.76 contains an unauthenticated SQL injection vulnerability in the /api/doc/out/more/list endpoint via the elementmore parameter with srcType=2. Attackers can inject SQL through docdatefrom/docdateto fields and read results via /api/ec/dev/table/count...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: bpf, sockmap: Fixed issues where data was not being charged when msg-sg.size contained more data. In tcpbpfsendverdict: If msg-sg.size contains more data after tcpbpfsendmsgredir: c tcpbpfsendverdict tosend = msg-sg.size...

CVE-2026-109322

Grav Guestbook plugin before 0.5.2 contains a stored cross-site scripting vulnerability because its AJAX Load more and Admin Load all handlers insert stored author and message fields into the DOM as unescaped HTML via jQuery. Unauthenticated visitors can submit markup that executes in other...

EUVD-2026-97624

Grav Guestbook plugin before 0.5.2 contains a stored cross-site scripting vulnerability because its AJAX Load more and Admin Load all handlers insert stored author and message fields into the DOM as unescaped HTML via jQuery. Unauthenticated visitors can submit markup that executes in other...

CVE-2026-109322

The Grav Guestbook plugin before version 0.5.2 is vulnerable to a stored cross-site scripting (XSS) flaw. The issue resides in the AJAX Load more and Admin Load all handlers, which insert stored author and message fields into the DOM as unescaped HTML using jQuery . This allows unauthenticated vi...

CVE-2026-109322 Grav Guestbook before 0.5.2 Stored XSS via AJAX Pagination and Admin Views

Grav Guestbook plugin before 0.5.2 contains a stored cross-site scripting vulnerability because its AJAX Load more and Admin Load all handlers insert stored author and message fields into the DOM as unescaped HTML via jQuery. Unauthenticated visitors can submit markup that executes in other...

CVE-2026-109322 Grav Guestbook before 0.5.2 Stored XSS via AJAX Pagination and Admin Views

Grav Guestbook plugin before 0.5.2 contains a stored cross-site scripting vulnerability because its AJAX Load more and Admin Load all handlers insert stored author and message fields into the DOM as unescaped HTML via jQuery. Unauthenticated visitors can submit markup that executes in other...

CVE-2026-109322: Improper Neutralization of Input During Web Page Generation

Grav Guestbook plugin before 0.5.2 contains a stored cross-site scripting vulnerability because its AJAX Load more and Admin Load all handlers insert stored author and message fields into the DOM as unescaped HTML via jQuery. Unauthenticated visitors can submit markup that executes in other...

CVE-2026-106462

Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credential boundaries. An authenticated user could cause an affected action to fall back to broader integration credentials and perform operation...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fixed repeated calls to sockput when msg has moredata In the tcpbpfsendverdict redirection, the eval variable is assigned to SKREDIRECT after the applybytes data is sent. If msg has moredata, sockput will be called...

more-jwtauth (0.7.0) potentially affected by CVE-2026-102268 via pyjwt (1.4.1)

pyjwt PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - more-jwtauth 0.7.0 Source cves: CVE-2026-102268 Source advisory: OSV:PYSEC-2026-4145...

more-jwtauth (0.7.0) potentially affected by CVE-2026-101917 via pyjwt (1.4.1)

pyjwt PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - more-jwtauth 0.7.0 Source cves: CVE-2026-101917 Source advisory: OSV:PYSEC-2026-4140...

atlassian-jwt-auth (>=2.0.0, <=2.6.0), clink (>=0.10.0, <=0.23.0) +7 more potentially affected by CVE-2026-102270 via pyjwt (1.4.0)

pyjwt PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - atlassian-jwt-auth =2.0.0, =0.10.0, =0.0.1.dev1, =0.0.1.dev3, =0.4.0, =3.1.0, =1.1.0, =0.8.0, =0.9.0 Source cves: CVE-2026-102270 Source advisory:...

more-jwtauth (0.7.0) potentially affected by CVE-2026-102270 via pyjwt (1.4.1)

pyjwt PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - more-jwtauth 0.7.0 Source cves: CVE-2026-102270 Source advisory: OSV:PYSEC-2026-4148...

more-jwtauth (0.7.0) potentially affected by CVE-2026-102269 via pyjwt (1.4.1)

pyjwt PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - more-jwtauth 0.7.0 Source cves: CVE-2026-102269 Source advisory: OSV:PYSEC-2026-4147...