5682 matches found
CVE-2026-109198
The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'useremail' parameter in all versions up to, and including, 6.89.1 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-109198
The Anti-Spam by CleanTalk plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 6.89.1 . The root cause is insufficient input sanitization and output escaping of the user_email parameter. An unauthenticated attacker can inject arbitrary web s...
CVE-2026-109198 Anti-Spam by CleanTalk <= 6.89.1 - Unauthenticated Stored Cross-Site Scripting via 'user_email' Registration Parameter
The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'useremail' parameter in all versions up to, and including, 6.89.1 due to insufficient input sanitization and output escaping. This makes it possible for...
kube-scan
Kube-Scan Try our free Kubernetes risk assessment tool today. Run it on any cluster at any time. No data leaves your cluster. We do not collect any information. For more information on Octarine see https://www.octarinesec.com. Get the risk score of your workloads Kube-Scan gives a risk score, fro...
CVE-2026-33234
How I Turned AutoGPT's Email Feature Into an Internal Network Scanner CVE-2026-33234 | Moderate 5.0 | GHSA-4jwj-6mg5-wrwf Author: Pavan Nallamothu I was mapping every user-controlled input that touched the network in AutoGPT Platform. The HTTP layer was locked down tight. Private IP ranges...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-scan Defensive exposure and compromise-indicator...
ms-msdt-vulnerability-pdq-package
ms-msdt-vulnerability-pdq-package You will need all of the files in order for the package to properly run "out of the box". If you do not have PDQ Inventory, Please remove the scan step from the package before running. This package now searches for the search-ms registry key in addition to the...
Shellshock-Vulnerability-Scan
Shellshock-Vulnerability-Scan Android app to scan for bash Vulnerability - CVE-2014-6271 also known as Shellshock Download app from play store https://play.google.com/store/apps/details?id=in.indiandragon.shellshock.shellshockvulnerabilityscan Not being developed further...
Malware in x402-prompt-injection-scan
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in x402-prompt-injection-scan (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88f52d4070c48d6b724799575ba65b28cb4b2e218b4eda4a67fbbbe353add870 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
php2shell-detect
phphunt php-hunt.sh is a single, self-contained, read-only...
phphunt
phphunt php-hunt.sh is a single, self-contained, read-only...
CLEANSTART-2026-BX50217 Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID
CVE-2026-91777 affects multiple packages. Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. See references for individual vulnerability details...
wolf-tools
Arctic Wolf Log4Shell Deep Scan The Arctic Wolf Log4Shell Deep Scan is designed to detect Java application packages subject to CVE-2021-44228 and CVE-2021-45046. Legal Copyright 2021, Arctic Wolf Networks, Inc. Arctic Wolf Networks, Inc. licenses this file to you under the Apache License, Version...
CLEANSTART-2026-XT22555 Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID
Security vulnerability affects the apache-zookeeper package. Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID...
Security Bulletin: IBM Integration Designer is vulnerable to multiple CVEs
Summary Vulnerability in jackson-databind.jar in IBM Integration Designer: CVE-2026-91776 and CVE-2026-91777 Vulnerability Details CVEID:CVE-2026-91776 DESCRIPTION: TypeDeserializerBase.findDeserializer in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplie...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: A memory leak has been fixed when scanning for an adapter. The ssifinfofind function sets info-adaptername if the adapter information comes from the SMBIOS; otherwise, it isn’t set. However, this function can be called...
Astra Linux – Vulnerability in Linux
In the Linux kernel, the following vulnerability has been resolved: gfs2: The use-of-free variable issue in gfs2glockshrinkscan has been fixed. The GLFLRU flag is checked under lrulock in gfs2glockremovefromlru, to remove a glock from the lru list in gfs2glockput. During the shrink scan process,...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fixed a UAF in ieee80211scanrx The ieee80211scanrx function attempts to access scanreq-flags after a null check. However, a UAF Use-after-Allocation was observed when the scan is completed and ieee80211scancomplet...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: deferring partition scanning. We need to prevent the partition scanning from occurring within the controller’s scanwork context. If a path error occurs here, I/O operations will wait until a path becomes available...