592 matches found
CVE-2024-51788
💀 CVE-2024-51788 - WordPress The Novel Design Store Directory Plugin = 4.3.0 - बिना प्रमाणीकरण के मनमाना फ़ाइल अपलोड 🚨 अवलोकन CVE-2024-51788 एक नवीन खोजा गया गंभीर भेद्यता है जो The Novel Design Store Directory WordPress प्लगइन = v4.3.0 को प्रभावित करती है। यह दोष बिना प्रमाणीकरण के हमलावरों को...
CVE-2025-65442-DOM-based-Cross-Site-Scripting-XSS-Vulnerability-in-novel-V3.5.0-CWE-79-
Obiettivo:http://117.72.165.13:8888/ Github:https://github.com/201206030/novel Versione:V3.5.0 Nome della vulnerabilità:Vulnerabilità di Cross-Site Scripting XSS basata su DOM in novel V3.5.0 CWE-79 Tipo di vulnerabilità: Cross-Site Scripting basato su DOM DOM-based XSS Data di scoperta: 2025-11-...
CVE-2021-34045
Informações Exploit Title：Novel-plus-install-v3.5.3-Druid Unauthorized access Data do exploit：01.06.2021 Autor do exploit：Al1ex@Heptagram Página inicial do fornecedor：https://github.com/201206030/novel-plus Versão afetada：novel-plus-install-v3.5.3 Descrição：O sistema Novell plus carrega o...
CVE-2026-47392 PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)
PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praisonaiagents, executecode in praisonaiagents/tools/pythontools.py v1.6.37, subprocess sandbox mode can be fully bypassed using print.self to retrieve the real Python builtins modul...
The Hardest Fork
Mythos is real. I know a big chunk of the industry thinks it's a marketing stunt, and I get why. I get it. But I've seen the findings, and they're bad. These aren't "whoops, this line right here is wrong, and that's RCE." They're novel combinations of a few dozen issues out of thousands of things...
Brinker Introduces a Novel Approach to Deepfake Detection
WILMINGTON, Delaware, 29th April 2026, CyberNewswire...
SIR-Bench: Evaluating Investigation Depth in Security Incident Response Agents
We present SIR-Bench, a benchmark of 794 test cases for evaluating autonomous security incident response agents that distinguishes genuine forensic investigation from alert parroting. Derived from 129 anonymized incident patterns with expert-validated ground truth, SIR-Bench measures not only...
CVE-2022-35121
Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /service/impl/BookServiceImpl.java...
CVE-2025-15250
A security vulnerability has been detected in 08CMS Novel System up to 3.4. This issue affects some unknown processing of the file admina/mtpls.inc.php of the component Template Handler. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-15250 08CMS Novel System Template mtpls.inc.php code injection
A security vulnerability has been detected in 08CMS Novel System up to 3.4. This issue affects some unknown processing of the file admina/mtpls.inc.php of the component Template Handler. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been...
08CMS Novel System 代码注入漏洞
08CMS Novel System is a novel system of China Dingdot 08CMS company. A code injection vulnerability exists in 08CMS Novel System 3.4 and earlier versions, which stems from incorrect manipulation of the file admina/mtpls.inc.php in the component Template Handler, which can lead to code injection...
novel 安全漏洞
novel is an open source novel system by xxyopen open source. A security vulnerability exists in novel version V3.5.0, which stems from insufficient validation and coding of user-controllable data, and may result in the execution of arbitrary JavaScript code or the disclosure of sensitive...
PT-2025-53724
DOM-based Cross-Site Scripting XSS vulnerability in 201206030 novel V3.5.0 allows remote attackers to execute arbitrary JavaScript code or disclose sensitive information e.g., user session cookies via a crafted "wvstest" parameter in the URL or malicious script injection into window.localStorage...
EUVD-2025-78701
Malicious code in novelperchz3n npm...
EUVD-2025-78702
Malicious code in novelherringz3n npm...
MAL-2025-106399 Malicious code in novel_herring_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7654b9589b3f6f36740bd12fc3fc990379d308433c365ea787b4a559443e005f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-81089
Malicious code in novelbear0xrequest npm...
MAL-2025-95678 Malicious code in novel_spider_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1f780743155cedb46bc2f2a14e504b9a5acc2b77f9fea0273db1ba7578675f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...