5927 matches found
Angular template injection in Reports in Guardian/CMC before 26.1.0
Summary An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. Impact An authenticated user with report privileges can define a malicious report containing an Angular template payload, or a victim can be socially...
Jaspersoft Reports Library code-related vulnerabilities
Jaspersoft Reports Library is a Java report engine developed by Jaspersoft Corporation in the United States. It can generate reports in various formats such as PDF, HTML, Excel, and Word. There is a code vulnerability in Jaspersoft Reports Library, which stems from a Java deserialization issue...
PT-2026-41987
Name of the Vulnerable Software and Affected Versions Jaspersoft Reports Library affected versions not specified Description A Java deserialization issue exists in the Jaspersoft Reports Library. This flaw can lead to Remote Code Execution RCE, which is a type of attack where an attacker can...
CVE-2026-6009: Deserialization of Untrusted Data
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
CVE-2025-40900: Improper Neutralization of Special Elements Used in a Template Engine
An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileges can define a malicious report containing an Angular template payload, or a victim can be socially engineered to...
PT-2026-57356
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
Web-Application-Vulnerability-Scanner
Web-Application-Vulnerability-Scanner Developed a Python-...
bug-bounty-reports
Bug Bounty Reports — Josef Basner Sanitized, redacted, resp...
Exploit for CVE-2012-3152
Oracle Reports rwservlet Scanner ⚠️ For authorized use on...
shadow-pentest
🖤 Shadow Pentest Framework v1.0 Automated CVE Discovery & E...
PT-2026-41346
PHP Timeclock 1.04 contains multiple cross-site scripting vulnerabilities that allow unauthenticated attackers to inject arbitrary JavaScript by manipulating URL paths and POST parameters. Attackers can append malicious payloads to login.php, timeclock.php, audit.php, and timerpt.php endpoints, o...
report-anonymizer
🛡️ Report Anonymizer Local LLM anonymizer for penetration-t...
GHSA-3H63-FX68-X5FM omec-project amf crashes when processing malformed LocationReports
A flaw has been found in omec-project amf up to 2.1.1. This vulnerability affects unknown code of the component NGAP Message Handler. Executing a manipulation can lead to memory corruption. The attack can be launched remotely. The exploit has been published and may be used. This patch is called...
PT-2026-44355
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the HID playstation module where the dualshock4 parse report function fails to validate the number of touch reports provided by a device. If a device reports an excessiv...
CVE-2026-40636
creationtimestamp| type| source ---|---|--- 2026-05-11 10:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mll2y7rqub2d 2026-05-11 10:31:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116555476431173133 2026-05-11 10:44:11+00:00| seen|...
xpath 1.0.0
xpath is a multi-technique XPath injection scanner written entirely in Nim with no external dependencies. It's a single static binary that handles error-based, boolean blind, time-based blind, union injection, and authentication bypass detection, plus data extraction once injection is confirmed. ...
Wagtail security vulnerabilities
Wagtail is an open-source content management system CMS developed by Wagtail. Versions of Wagtail prior to 7.0.7, 7.3.2, and 7.4 contain security vulnerabilities. These vulnerabilities stem from the ability for CMS users to access historical reports, which may lead to the disclosure of sensitive...
CyberThreat-Nlp-Intelligence-System
🛡️ CyberGuard AI — Cyber Threat Intelligence System An AI-p...