295338 matches found
osintbuddy
I have no data yet. It is a capital mistake to theorize before one has data. Insensibly one begins to twist facts to suit theories, instead of theories to suit facts. | plugins-system | osintbuddy.com | osintbuddy discord | entities | pypi package | Introducing OSINTBuddy Notice - No, this projec...
PT-2026-137391
Name of the Vulnerable Software and Affected Versions IVPAY payments versions prior to 1.0.9 Description The plugin fails to sanitize a value from its payment callback before incorporating it into a SQL statement. Additionally, the system accepts an empty API key, which is the default setting, as...
PT-2026-137362
In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation...
CVE-2026-122130
CESNET ipfixcol2 2.3.0 before 2.9.0 contains an integer overflow vulnerability in the Forwarder output plugin that allows unauthenticated IPFIX exporters to overflow a heap buffer by wrapping uint16t message length counters. Attackers can send near-65535-byte data sets and large templates to a...
Better Auth (Expo plugin): Auth Bypass
@better-auth/expo before 1.7.16 allows certain account-takeover outcomes e.g., unauthenticated changes of any account's email address, because it signs a caller-supplied state value without checking whether that value had been issued by the server. NOTE: the application secret must be rotated aft...
CVE-2026-122130
The CESNET ipfixcol2 software (versions 2.3.0 before 2.9.0 ) is vulnerable to a heap buffer overflow within the Forwarder output plugin . The root cause is an integer overflow occurring when wrapping uint16_t message length counters. This allows unauthenticated IPFIX exporters to send near-65535-...
CVE-2026-122130 CESNET ipfixcol2 2.3.0 before 2.9.0 Buffer Overflow via Forwarder Output Plugin
CESNET ipfixcol2 2.3.0 before 2.9.0 contains an integer overflow vulnerability in the Forwarder output plugin that allows unauthenticated IPFIX exporters to overflow a heap buffer by wrapping uint16t message length counters. Attackers can send near-65535-byte data sets and large templates to a...
CVE-2026-122130 CESNET ipfixcol2 2.3.0 before 2.9.0 Buffer Overflow via Forwarder Output Plugin
CESNET ipfixcol2 2.3.0 before 2.9.0 contains an integer overflow vulnerability in the Forwarder output plugin that allows unauthenticated IPFIX exporters to overflow a heap buffer by wrapping uint16t message length counters. Attackers can send near-65535-byte data sets and large templates to a...
EUVD-2026-117084
CESNET ipfixcol2 2.3.0 before 2.9.0 contains an integer overflow vulnerability in the Forwarder output plugin that allows unauthenticated IPFIX exporters to overflow a heap buffer by wrapping uint16t message length counters. Attackers can send near-65535-byte data sets and large templates to a...
Malicious code in extera-plugin-runtime (PyPI)
Source: kam193 b13320bcb71932e051e8e2a8fbd98f3e8faadae85f0ae60ca2f1c2cf8d827829 The package provides functionality to exfiltrate sensitive Telegram files. The malicious code does not start automatically. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
Malicious code in extera-plugin-runtime (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 b13320bcb71932e051e8e2a8fbd98f3e8faadae85f0ae60ca2f1c2cf8d827829 The package provides functionality to exfiltrate sensitive Telegram files. The malicious code does not start automatically. --- Category: MALICIOUS - The...
EUVD-2026-116913
Sender plugin for WordPress before 2.11.3 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to access a sensitive diagnostic dump by requesting the adminpostsenderdebugdownload action handled by downloadDebugFile without any capability, nonc...
CVE-2026-104799
The Mobile builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2 via the wcfmmpprofilesettings REST handler exposed at POST /mobile-builder/v1/wcfm-profile-settings. This is due to a PHP loose-comparison logic flaw in the meta key allow-lis...
volatility
This project is archived. See Volatility 3 for modern investigations: https://github.com/volatilityfoundation/volatility3 ============================================================================ Volatility Framework - Volatile memory extraction utility framework The Volatility Framework is a...
EUVD-2026-116885
The Mobile builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2 via the wcfmmpprofilesettings REST handler exposed at POST /mobile-builder/v1/wcfm-profile-settings. This is due to a PHP loose-comparison logic flaw in the meta key allow-lis...
CVE-2026-90632
Apache OpenOffice versions through 4.1.16 are vulnerable to a local file inclusion issue within the GStreamer multimedia component . A crafted document can exploit this component to load the contents of any local file and include them during document saving or export (e.g., to PDF ). Users should...
CVE-2026-110022
The PFI plugin framework deploys executable assemblies DLLs from a signed plugin package into the local plugin repository and loads them via reflection, but the deployment routine processes archive entries that were never covered by the signature verification. An unauthenticated local attacker ca...
CVE-2026-110935
The PFI plugin framework deployment routine does not validate path components when extracting archive entries to the local plugin repository. Archive entries containing relative path segments such as '..' are not rejected, allowing an unauthenticated local attacker to write files outside the plug...
EUVD-2026-116804
The PFI plugin framework deployment routine does not validate path components when extracting archive entries to the local plugin repository. Archive entries containing relative path segments such as '..' are not rejected, allowing an unauthenticated local attacker to write files outside the plug...
CVE-2026-110935
The PFI plugin framework is vulnerable to a path traversal flaw during the deployment routine. The software fails to validate path components when extracting archive entries to the local plugin repository, specifically failing to reject relative path segments like '..' . This allows an unauthenti...