Lucene search
+L

706 matches found

Cvelist
Cvelist
•added 2026/10/28 6:45 a.m.•8 views

CVE-2026-118164 If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'repeater' Parameter

The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'repeaterversionuid and many sibling fields: freeze-mode, cookie-input, ip-input, compare, utm-value, page-url-compare, group-name, custom, …'...

6.4CVSS0.00206EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/10/28 6:45 a.m.•3 views

EUVD-2026-111752

The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'repeaterversionuid and many sibling fields: freeze-mode, cookie-input, ip-input, compare, utm-value, page-url-compare, group-name, custom, …'...

6.4CVSS6AI score0.00206EPSS
SaveExploits0References8
CVE
CVE
•added 2026/10/28 6:45 a.m.•3 views

CVE-2026-118164

The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.10.2 . The root cause is insufficient input sanitization and output escaping within the repeater[*][version_uid] ...

6.4CVSS6AI score0.00206EPSS
SaveExploits0References8
CVE
CVE
•added 2026/10/28 6:45 a.m.•3 views

CVE-2026-104740

The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 1.10.2 . The root cause is insufficient input sanitization and output escaping within the 'conversion' Shortcode Attrib...

6.4CVSS6AI score0.00243EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/28 6:45 a.m.•6 views

CVE-2026-104740 If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'conversion' Shortcode Attribute

The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'conversion' Shortcode Attribute in all versions up to, and including, 1.10.2 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS0.00243EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/10/28 6:45 a.m.•3 views

EUVD-2026-111745

The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'conversion' Shortcode Attribute in all versions up to, and including, 1.10.2 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS6AI score0.00243EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/28 6:45 a.m.•3 views

CVE-2026-103996

The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 1.10.2 . The root cause is insufficient input sanitization and output escaping within the 'url' parameter of the ifso-r...

6.4CVSS6AI score0.00243EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/28 6:45 a.m.•6 views

CVE-2026-103996 If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ifso-redirect Shortcode 'url' Attribute

The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 1.10.2 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS0.00243EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/10/28 6:45 a.m.•3 views

EUVD-2026-111737

The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 1.10.2 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS6AI score0.00243EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/28 6:23 a.m.•21 views

so-crates

SO-CRATES Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus A standalone web application for analyzing pcap files, log files, email messages, and binary files. Features include Suricata network analysis with tshark adding the protocols Suricata doesn't parse, YARA binary...

6.2AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/28 1:24 a.m.•20 views

CVE-2017-17562

CVE-2017-17562 RCE GoAhead web server 2.5 3.6.5 Standalone Python 3 reverse shell exploit for CVE-2017-17562, works on GoAhead web server versions 2.5 3.6.5. Blog article here. Written and tested on Python 3.7 based on POC and vulnerable environment here. Some code borrowed from the Metasploit...

8.1CVSS7.7AI score0.97127EPSS
SaveExploits16References3
Positive Technologies
Positive Technologies
•added 2026/10/28 12:00 a.m.•0 views

PT-2026-127853

The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 1.10.2 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS6AI score0.00243EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2026/10/27 6:30 p.m.•2 views

WordPress If-So Dynamic Content – Elementor & All Page Builders Personalization plugin <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin If-So Dynamic Content Personalization versions = 1.10.2...

6.4CVSS5.8AI score0.00243EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2026/10/27 5:39 p.m.•1 views

WordPress If-So Dynamic Content – Elementor & All Page Builders Personalization plugin <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin If-So Dynamic Content Personalization versions = 1.10.2...

6.4CVSS5.8AI score0.00243EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2026/10/27 5:39 p.m.•1 views

WordPress If-So Dynamic Content – Elementor & All Page Builders Personalization plugin <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin If-So Dynamic Content Personalization versions = 1.10.2...

6.4CVSS5.8AI score0.00206EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
•added 2026/10/27 3:10 p.m.•50 views

CVE-2026-43499-T807D

T807D Final Artifacts — Source One-to-One Correspondence Recovery Package Generated: 2026-08-08 Conclusion This directory has organized the complete popsicle source tree, necessary header files, embedded su payload, production binaries, and runtime scripts that can be recovered from the current...

7.8CVSS7.2AI score0.00891EPSS
SaveExploits149
Kitploit
Kitploit
•added 2026/10/27 3:05 a.m.•19 views

CVE-2026-43499-so-build

This repository does not have a README...

7.8CVSS7.1AI score0.00891EPSS
SaveExploits149
Positive Technologies
Positive Technologies
•added 2026/10/18 12:00 a.m.•11 views

PT-2026-117020

In the Linux kernel, the following vulnerability has been resolved: net: restrict SO RESERVE MEM to TCP sockets and cap max value Commit 2bb2f5fb21b0 "net: add new socket option SO RESERVE MEM" and commit d00c8ee31729 "net: fix possible NULL deref in sock reserve memory" only checked sk has...

5.8AI score0.00168EPSS
SaveExploits0References5
NVD
NVD
•added 2026/10/12 5:17 a.m.•18 views

CVE-2026-21119

Out-of-bounds read and write in libsagaisoundsepv2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory...

4.8CVSS0.00106EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/12 4:57 a.m.•39 views

CVE-2026-21119

Out-of-bounds read and write in libsagaisoundsepv2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory...

4.8CVSS0.00106EPSS
SaveExploits0References1
Rows per page
Query Builder