WordPress WPB Show Core <= 2.2 - Server-Side Request Forgery

The WPB Show Core WordPress plugin through version 2.2 is vulnerable to Server-Side Request Forgery SSRF via the 'path' parameter in the download-file.php script. This vulnerability allows unauthenticated attackers to make the server perform requests to arbitrary URLs. id: CVE-2023-5974 info: nam...

Simple Certain Time to Show Content - Cross-Site Scripting

Simple Certain Time to Show Content WordPress plugin 1.3.1 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute arbitrary scripts in the context of high privilege users such as admin, explo...

WordPress WPB Show Core - Cross-Site Scripting

WordPress wpb-show-core plugin through TODO contains a cross-site scripting vulnerability. The plugin does not sanitize and escape a parameter before outputting it back in the page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site...

Show all comments < 7.0.1 - Cross-Site Scripting

The Show All Comments WordPress plugin before 7.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against a logged in high privilege users such as admin. id: CVE-2022-4295 info: name: Show all commen...

domhttpx

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. List Install Usage Flags Basic Usage One Keyword Multiple Keyword Extract Title Page Extract Title Page from Real Path Extract Status Code Extrac...

mysql-mysqldump-tab-path

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · mysql-mysqldump-tab-path mysql-mysqldump-tab-path Class: File write client Reach: Remote UI:R MySQL Community Server mysqldump 26.7.0 06a5c1c - Oracle mysqldump --tab=DIR writes one .sql per table using fnformat witho...

CVE-2026-88997

CVE-2026-88997 JSM Show Post Metadata 4.9.1 — Contributor+ Stored XSS via Custom Field Meta Key | ---|--- CVE ID| CVE-2026-88997 Status| PUBLISHED CNA| WPScan Published| 2026-09-23 Updated| 2026-09-23 CWE| CWE-79: Cross-Site Scripting XSS Description The JSM Show Post Metadata WordPress plugin...

CVE-2026-115982

A cross-site scripting (XSS) vulnerability exists in phpIPAM versions up to 1.8.3 . The flaw is located in the create_rack_link function within the file app/tools/racks/show-rack-popup.php of the Rack Link Creation component. By manipulating the deviceid argument, an attacker can trigger the XSS....

CVE-2026-115982 phpIPAM Rack Link Creation show-rack-popup.php create_rack_link cross site scripting

A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function createracklink of the file app/tools/racks/show-rack-popup.php of the component Rack Link Creation. Performing a manipulation of the argument deviceid results in cross site scripting. Remote exploitation o...

sudowp-hooks-visualizer

SudoWP Hooks Visualizer Contributors: SudoWP, WP Republic Original Authors: Stuart O'Brien, cxThemes Tags: hooks, actions, filters, developer-tool, debug, security-fork, cve-2024-6297 Requires at least: 5.8 Tested up to: 6.7 Stable tag: 1.3.2 License: GPLv2 or later Security Notice CVE-2024-6297...

Zimbra-CVE-2017-8802-Hotifx

CVE-2017-8802 This Zimlet fixes CVE-2017-8802 by disabling the "Show Fragment" / Snippet functionality. For further information see: https://wiki.zimbra.com/wiki/ZimbraSecurityAdvisories How to deploy Zimlets https://www.zimbra.com/docs/os/6.0.10/administrationguide/Zimlets.11.4.html...

AlmaLinux 9.2 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792636681)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792636681 advisory. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and...

BIT-MYSQL-CLIENT-2026-86047 MariaDB: Insufficient quoting in mariadb-dump and SHOW commands

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A...

BIT-MARIADB-MIN-2026-86047 MariaDB: Insufficient quoting in mariadb-dump and SHOW commands

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A...

BIT-MARIADB-2026-86047 MariaDB: Insufficient quoting in mariadb-dump and SHOW commands

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A...

CVE-2026-114057 ArcadeDB 26.2.1 before 26.10.1 Bolt SHOW DATABASES Information Disclosure

ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that allows authenticated users to enumerate all database names. Attackers with credentials for any single database can issue a SHOW DATABASES query over the Bolt port to reveal...

CVE-2026-114057 ArcadeDB 26.2.1 before 26.10.1 Bolt SHOW DATABASES Information Disclosure

ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that allows authenticated users to enumerate all database names. Attackers with credentials for any single database can issue a SHOW DATABASES query over the Bolt port to reveal...

CVE-2026-114057

ArcadeDB versions 26.2.1 before 26.10.1 are affected by a missing authorization vulnerability within the Bolt protocol handler . This flaw allows authenticated users to execute a SHOW DATABASES query over the Bolt port, enabling them to enumerate all database names. By exploiting this, an attacke...

CLSA-2025-1751916475 kernel: Fix of 12 CVEs

udmabuf: fix a buf size overflow issue during udmabuf creation CVE-2025-37803 - bpf: Prevent tail call between progs attached to different hooks CVE-2024-50063 - nfsd: fix possible badness in FREESTATEID CVE-2024-50043 - nfsd: prevent panic for nfsv4.0 closed files in nfs4showopen CVE-2024-46682...

SUSE CVE-2026-86047

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A...