rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

CVE-2026-120035

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'itemtitle parsed from feed ' parameter in all versions up to, and including, 5.2.13 due to insufficient input sanitization an...

ShunyaNet-Sentinel

ShunyaNet Sentinel v3.3 - MAJOR UPDATE UPDATED: 10/22/2026 ShunyaNet Sentinel is a lightweight, cyberpunk-themed program that ingests RSS feeds breaking news, social media, government alerts, sends them to an LLM for analysis, and delivers alerts and summary reports to the GUI and your notificati...

CVE-2026-120035

The RSS Aggregator by Feedzy WordPress plugin (versions <= 5.2.13 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping of the item_title parameter, which is parsed from a feed's tag. An unauthenticated attacker can inject...

EUVD-2026-118199

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'itemtitle parsed from feed ' parameter in all versions up to, and including, 5.2.13 due to insufficient input sanitization an...

CVE-2026-120035 RSS Aggregator by Feedzy <= 5.2.13 - Unauthenticated Stored Cross-Site Scripting via Feed Item Title

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'itemtitle parsed from feed ' parameter in all versions up to, and including, 5.2.13 due to insufficient input sanitization an...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

WordPress RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin <= 5.2.13 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by churchill11 in WordPress Plugin Feedzy versions = 5.2.13...

Changedetection.io RSS Single Watch - Cross-Site Scripting

changedetection.io 0.54.1 contains a stored XSS caused by unescaped reflection of UUID path parameter in RSS single-watch endpoint, letting remote attackers execute JavaScript in victim's browser, exploit requires victim to visit crafted URL. id: CVE-2026-27645 info: name: Changedetection.io RSS...

Cross RSS 1.7 - Local File Inclusion

Absolute path traversal vulnerability in Cross-RSS wp-cross-rss plugin 1.7 for WordPress allows remote attackers to read arbitrary files via a full pathname in the rss parameter to proxy.php. id: CVE-2014-4941 info: name: Cross RSS 1.7 - Local File Inclusion author: DhiyaneshDK severity: medium...

CVE-2026-123202

A flaw was found in libnxml. This vulnerability allows a remote attacker to cause a Denial of Service DoS by crashing applications that process untrusted data. By supplying specially crafted XML or RSS feeds containing excessively long names ending in multi-byte characters, an attacker can trigge...

CVE-2026-120035: themeisle: The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress…

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'itemtitle parsed from feed ' parameter in all versions up to, and including, 5.2.13 due to insufficient input sanitization an...

EUVD-2026-117647

libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxmlparser.c that allows remote attackers to write past a 1024-byte stack buffer via long XML names. Attackers can supply XML or RSS feeds with a 1022-character element, attribute, DOCTYPE or entity name ending in a...

Iran-War-Media

Iran War Media Monitor Read the Full Deep Dive Introduction This project monitors news coverage of the war between Iran, Israel, and the United States. You can use this repository to: 1. Create a corpus of media articles in English 2. Identify authors and news media outlets to keep track of who...

Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE

The Import XML and RSS Feeds WordPress plugin before 2.1.5 allows unauthenticated attackers to execute arbitrary commands via a web shell. id: CVE-2023-4521 info: name: Import XML and RSS Feeds 2.1.5 - Unauthenticated RCE author: princechaddha severity: critical description: The Import XML and RS...

CVE-2026-118178

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored subscription URL to a file: URL. Thunderbird then read that location o...

CVE-2026-53631

GLPI is a free asset and IT management software package. From 0.83 until 10.0.27 and from 11.0.0 until 11.0.9, any authenticated user could submit a crafted request to change the visibility of knowledge base items, reminders, or RSS feeds and then access content that should remain restricted. Thi...

CVE-2026-53631 GLPI: Unauthorized visibility expansion of knowbase items, reminders and RSS feeds

GLPI is a free asset and IT management software package. From 0.83 until 10.0.27 and from 11.0.0 until 11.0.9, any authenticated user could submit a crafted request to change the visibility of knowledge base items, reminders, or RSS feeds and then access content that should remain restricted. Thi...

CVE-2026-53631

The GLPI asset and IT management software package is vulnerable to an unauthorized visibility expansion affecting knowledge base items, reminders, and RSS feeds. From versions 0.83 until 10.0.27 and 11.0.0 until 11.0.9 , any authenticated user can submit a crafted request to modify visibility set...

PT-2026-137232

Name of the Vulnerable Software and Affected Versions GLPI versions 0.83 through 10.0.26 GLPI versions 11.0.0 through 11.0.8 Description An authenticated user can submit a crafted request to modify the visibility of RSS feeds, reminders, or knowledge base items. This allows the user to access...