300 matches found
Boucle-framework
Boucle Hooks de Claude Code que realmente hacen cumplir tus reglas. 7 hooks independientes, además de enforce-hooks para la política de CLAUDE.md, herramientas de auditoría, más de 1,900 pruebas y un corpus de brechas de Claude Code con clasificaciones de gravedad y soluciones. Enlaces rápidos:...
Name-That-Hash
➡️ Discord | 网站 ⬅️ 现代哈希识别系统 pip3 install name-that-hash && nth 无需安装的 Web 应用 🤔 这是什么？ 你是否曾经遇到过像 5f4dcc3b5aa765d61d8327deb882cf99 这样的哈希值，然后好奇这是什么类型的哈希？🤔 Name-that-hash 可以告诉你那个哈希的类型！ 🔥 特性 📺 流行度评级 - Name that hash 会首先显示最流行的哈希。在旧系统中，它会将 Skype Hash 与 Active Directory 的 NTLM 等同对待，这就像说我的 GitHub 和 VSCode...
WordPress kk Star Ratings – Rate Post & Collect User Feedbacks plugin <= 5.4.10.3 - Unauthenticated Arbitrary Shortcode Execution vulnerability
Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by Ronnachai Sretawat Na Ayutaya Simonhaskelly in WordPress Plugin kk Star Ratings versions = 5.4.10.3...
CVE-2026-3424
The The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.4.10.3. This is due to the software allowing users to execute an action that does not properly validate the 'payload' value befo...
CVE-2026-3424
The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress is vulnerable to unauthenticated arbitrary shortcode execution in all versions up to and including 5.4.10.3 . The root cause is improper validation of the payload parameter before passing it to do_shortcode, allowing an...
EUVD-2026-64250
The The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.4.10.3. This is due to the software allowing users to execute an action that does not properly validate the 'payload' value befo...
CVE-2026-3424 kk Star Ratings <= 5.4.10.3 - Unauthenticated Arbitrary Shortcode Execution via 'payload' Parameter
The The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.4.10.3. This is due to the software allowing users to execute an action that does not properly validate the 'payload' value befo...
CVE-2026-8239
Concrete CMS 9.5.0 and below is vulnerable to IDOR. The '/ccm/frontend/conversations/getrating' endpoint confirms existence and returns rating score for any message by ID. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 6.3 with...
Concrete CMS 安全漏洞
Concrete CMS is an open-source content management system designed for teams. Concrete CMS versions 9.5.0 and earlier have security vulnerabilities, which stem from IDOR. These vulnerabilities may allow unauthorized parties to access confirmation messages and obtain ratings...
CVE-2026-45396 Open WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data Manipulation
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the POST /api/v1/evaluations/feedback endpoint in Open WebUI v0.9.2 is vulnerable to mass assignment via FeedbackForm, which uses modelconfig = ConfigDictextra='allow'. Due to an...
PT-2026-36924
ITEMS ADDED: Filters Add filter for Atmos PM-5173 Filters Add filter for audio layout PM-5118 Filters Add filters for video, audio, and subtitle codecs PM-5117 Metadata Add support for RottenTomatoes audience and average ratings to Nfo parser PM-5176 Metadata Detect Dolby Atmos PM-4004 Metadata...
WordPress Five-Star Ratings Shortcode plugin <= 1.2.56 - Unauthenticated Reflected Cross-Site Scripting vulnerability
Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Five-Star Ratings Shortcode versions = 1.2.56...
[SECURITY] Fedora 44 Update: shotwell-33~alpha-9.fc44
Shotwell is an easy-to-use, fast photo organizer designed for the GNOME desktop. It allows you to import photos from your camera or disk, organize them by date and subject matter, even ratings. It also offers basic photo editing, like crop, red-eye correction, color adjustments, and straighten...
CVE-2023-40332
Improper Control of Interaction Frequency vulnerability in Lester ‘GaMerZ’ Chan WP-PostRatings allows Functionality Misuse.This issue affects WP-PostRatings: from n/a through 1.91...
Malicious code in namei-maila-abinaui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79768eaac72a043553803c1ae2c2c4daba9fb5d265d6e9c6249ddc8315888a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ocha-mieaceh48-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6de38385ab77e2a48a9b7db95c75462d3208221b955b8d6006e2804dac32c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in zul-tumis6-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da7f64087acb9777682d8c026a6f8e23f378c5b1c251a088fe2611bca816c872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-114196 Malicious code in gilang-kue60-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b2ec54f2d1f3192cdd8cf210870cf643d28d88f77602461a1c2303a35172bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...