436 matches found
cent
Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place. Install go install -v github.com/xm1k3/cent/v2@latest Or download from releases after installation run cent init to initialize cent with the configuration...
CVE-2023-44770_ZenarioCMS--Reflected-XSS---Organizer-Alias
ZenarioCMS Reflected XSS v.9.4.59197 Author: Sergio Description: Cross Site Scripting vulnerability in ZenarioCMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Organizer - Spare alias. Attack Vectors: Scripting a vulnerability in the sanitization of the...
CVE-2015-10034
CVE-2015-10034 This repository was created for the demonstration of the J-TAS Action. The workout-organizer-2aaedb7f69ea398a0217493fefe8f19b31ee0775 folder contains the vulnerable application related to CVE-2015-10034. We have included the SARIF file with the results of the analysis performed by...
CVE-2026-107394
The event management system Indico is vulnerable to a Server-Side Request Forgery (SSRF) flaw in versions prior to 3.3.13 . The root cause is an incomplete check in the Flask-Multipass authentication system, which failed to cover an edge case identified in a previous fix for CVE-2026-25738. This ...
CVE-2026-107394 Indico: Incomplete Server-Side Request Forgery (SSRF) check
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3.13, the previous fix for CVE-2026-25738 did not cover an edge case, allowing an event organizer to submit a crafted URL that points to a prohibited local target but is...
CVE-2026-107394 Indico: Incomplete Server-Side Request Forgery (SSRF) check
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3.13, the previous fix for CVE-2026-25738 did not cover an edge case, allowing an event organizer to submit a crafted URL that points to a prohibited local target but is...
EUVD-2026-95212
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3.13, the previous fix for CVE-2026-25738 did not cover an edge case, allowing an event organizer to submit a crafted URL that points to a prohibited local target but is...
[SECURITY] Fedora 45 Update: osmo-0.4.4-7.fc45
Osmo is a handy personal organizer which includes calendar, tasks manager and address book modules. It was designed to be a small, easy to use and good looking PIM tool to help to manage personal information. In current state the organizer is quite convenient in use - for example, user can perfor...
CVE-2026-94297
The Media Library Organizer WordPress plugin before 2.1.4 does not verify that the requesting user holds the target taxonomy's management capability before creating a new term, allowing users with contributor-level access and above to create publicly visible terms in any taxonomy registered on th...
WordPress Media Library Organizer plugin 2.0.4-2.1.3 - Contributor+ Arbitrary Taxonomy Term Creation vulnerability
Contributor+ Arbitrary Taxonomy Term Creation vulnerability discovered by Jashid Sany in WordPress Plugin Media Library Organizer - WordPress Media Library Folders & File Manager versions 2.0.4-2.1.3...
CVE-2026-94297 Media Library Organizer 2.0.4 - 2.1.3 - Contributor+ Arbitrary Taxonomy Term Creation
The Media Library Organizer WordPress plugin before 2.1.4 does not verify that the requesting user holds the target taxonomy's management capability before creating a new term, allowing users with contributor-level access and above to create publicly visible terms in any taxonomy registered on th...
EUVD-2026-89625
The Media Library Organizer WordPress plugin before 2.1.4 does not verify that the requesting user holds the target taxonomy's management capability before creating a new term, allowing users with contributor-level access and above to create publicly visible terms in any taxonomy registered on th...
CVE-2026-94297
The Media Library Organizer WordPress plugin (versions prior to 2.1.4 ) contains a vulnerability where it fails to verify if a requesting user possesses the necessary management capabilities for a target taxonomy. This flaw allows users with contributor-level access or higher to create new, publi...
[SECURITY] Fedora 45 Update: shotwell-33.0-1.fc45
Shotwell is an easy-to-use, fast photo organizer designed for the GNOME desktop. It allows you to import photos from your camera or disk, organize them by date and subject matter, even ratings. It also offers basic photo editing, like crop, red-eye correction, color adjustments, and straighten...
PT-2026-103046
The Media Library Organizer WordPress plugin before 2.1.4 does not verify that the requesting user holds the target taxonomy's management capability before creating a new term, allowing users with contributor-level access and above to create publicly visible terms in any taxonomy registered on th...
CVE-2026-94297: Missing Authorization
The Media Library Organizer WordPress plugin before 2.1.4 does not verify that the requesting user holds the target taxonomy's management capability before creating a new term, allowing users with contributor-level access and above to create publicly visible terms in any taxonomy registered on th...
CVE-2026-101268
If an attacker is able to convince a victim on a specially crafted link, the victim is logged in to the attacker's customer account. If the victim does not notice this, this might lead to their order details being stored into the attacker's account. The attack only works when the event is availab...
CVE-2026-101270
Malicious HTML content could be injected into the help texts of various fields with organizer permissions...
