ShunyaNet-Sentinel

ShunyaNet Sentinel v3.3 - MAJOR UPDATE UPDATED: 10/22/2026 ShunyaNet Sentinel is a lightweight, cyberpunk-themed program that ingests RSS feeds breaking news, social media, government alerts, sends them to an LLM for analysis, and delivers alerts and summary reports to the GUI and your notificati...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

CVE-2026-87939

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Feed Block allows Stored XSS. This issue affects Feed Block versions: from 0.0.0 to 2.0.2, from 3.0.0 to 3.0.2...

CVE-2023-5612

Disclosure of the public email in Tags RSS Feed https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possible to read the...

exploit-CVE-2023-38490

Kirby XML External Entity XXE - CVE-2023-38490 exploit Kirby 3.9.6 XML External Entity Exploit for CVE-2023-38490 / GHSA-q386-w6fg-gmgp. Exploitation demonstration Build and run the vulnerable demo app: cd docker docker buildx build -t kirby-starterkit-3.9.5 . docker run -d --rm -p...

CVE-2025-24893_Analysis

CVE-2025-24893 - XWiki SolrSearch SSTI to unauthenticated RCE A self-contained Docker lab that reproduces CVE-2025-24893, a Server-Side Template Injection in XWiki's SolrSearch RSS feed that leads to unauthenticated remote code execution. It runs the vulnerable version 15.10.10 and the patched...

CVE-2025-24893

XWiki SSTI Exploit A Python exploit for XWiki Server-Side Template Injection SSTI vulnerability via Groovy template injection in the SolrSearch endpoint. Vulnerability Type : Server-Side Template Injection SSTI Component : XWiki SolrSearch RSS feed Impact : Remote Code Execution Affected Version ...

CVE-2026-97470

The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via unfilteredhtml Grant to Customer Role in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escapin...

CVE-2026-110252

The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.9 This is due to the plugin removing WordPress's wpfilterpostkses filter from contentsavepre immediately before calling wpinsertpost with RSS feed content, whenever...

CVE-2026-110252 WPeMatico RSS Feed Fetcher <= 2.9 - Unauthenticated Stored Cross-Site Scripting via RSS Feed Content Import

The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.9 This is due to the plugin removing WordPress's wpfilterpostkses filter from contentsavepre immediately before calling wpinsertpost with RSS feed content, whenever...

EUVD-2026-102798

The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.9 This is due to the plugin removing WordPress's wpfilterpostkses filter from contentsavepre immediately before calling wpinsertpost with RSS feed content, whenever...

CVE-2026-110252

The WPeMatico RSS Feed Fetcher plugin for WordPress (versions up to and including 2.9 ) is vulnerable to Unauthenticated Stored Cross-Site Scripting (XSS) . The root cause is the plugin's removal of the wp_filter_post_kses filter from content_save_pre before calling wp_insert_post() with RSS feed...

CVE-2026-110252 WPeMatico RSS Feed Fetcher <= 2.9 - Unauthenticated Stored Cross-Site Scripting via RSS Feed Content Import

The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.9 This is due to the plugin removing WordPress's wpfilterpostkses filter from contentsavepre immediately before calling wpinsertpost with RSS feed content, whenever...

PT-2026-116086

WeRSS we-mp-rss through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/feed id endpoint. Attackers can supply a non-built-in ext value and a =expression template whose object-subclass travers...

PT-2026-115493

Name of the Vulnerable Software and Affected Versions WPeMatico RSS Feed Fetcher versions prior to 2.10 Description The plugin is susceptible to Stored Cross-Site Scripting. This occurs because the software removes the wp filter post kses filter from content save pre before executing the wp inser...

WordPress WPeMatico RSS Feed Fetcher plugin <= 2.9 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Elieve in WordPress Plugin WPeMatico RSS Feed Fetcher versions = 2.9...

CVE-2026-104816

The open source federated social media platform Misskey is vulnerable to Cross-site Scripting (XSS) in its RSS components. Specifically, versions 12.0.0 through 2026.7.0 fail to verify URL schemes for feed item links. An attacker who controls feed content can provide an unsafe-scheme link , leadi...

peer-tweet

PeerTweet Feeds descentralizados usando el DHT de BitTorrent. Idea de Arvid y The8472 "DHT RSS feeds" http://libtorrent.org/dhtrss.html Captura de pantalla Enlaces rápidos Descarga los últimos binarios desde la página de lanzamientos. Encuentra y comparte direcciones de PeerTweet desde la página ...

WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed

Description WordPress does not properly restrict access to the comments associated with private and unpublished posts in some cases, which could allow unauthenticated users to read those comments through a feed...

Gitea RSS Atom Disclosure

The vulnerability of RSS and Atom feed handlers in the Git repository management system Gitea is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to disclose protected information...