EUVD-2026-92585

Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations restaurant-reservations allows Retrieve Embedded Sensitive Data.This issue affects Five Star Restaurant Reservations: from n/a through 2.7.24...

CVE-2026-103334

The Five Star Restaurant Reservations WordPress plugin (versions

CVE-2026-103334 WordPress Five Star Restaurant Reservations plugin <= 2.7.24 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations restaurant-reservations allows Retrieve Embedded Sensitive Data.This issue affects Five Star Restaurant Reservations: from n/a through 2.7.24...

CVE

CVE STAR Labs 团队为各种 CVE 编写的概念验证漏洞利用脚本集合，这些 CVE 由他们发现或由他人发现。 CVE-2026-53264 目标：Linux 内核 版本：CentOS 9 内核版本 5.14.0-721 漏洞利用编写者：Lee Jia Jie CVE-2025-29824 目标：Windows 通用日志文件系统驱动程序 版本：Windows 11 23H2 漏洞利用编写者：Ong How Chong CVE-2024-26230 目标：Windows 电话服务器 版本：Windows 11 23H2 漏洞利用编写者：Đào Tuấn Linh...

Star Blizzard Targets 100+ Organizations with Phishing and RedFlick Technique

Russian group Star Blizzard expands phishing campaigns with a new malware delivery RedFlick technique, using scheduled tasks to deliver the CosmicPulse backdoor...

CVE-2026-86817

The Five Star Business Profile and Schema WordPress plugin before 2.4.0 does not properly restrict the callbacks used to resolve schema field default values, allowing authenticated users with Author-level access and above to store input that discloses sensitive data, including other users' passwo...

EUVD-2026-92074

The Five Star Business Profile and Schema WordPress plugin before 2.4.0 does not properly restrict the callbacks used to resolve schema field default values, allowing authenticated users with Author-level access and above to store input that discloses sensitive data, including other users' passwo...

WordPress Five Star Business Profile and Schema plugin 2.3.20-2.3.21 - Author+ Sensitive Data Disclosure vulnerability

Author+ Sensitive Data Disclosure vulnerability discovered by Artus KG in WordPress Plugin Five Star Business Profile and Schema versions 2.3.20-2.3.21...

CVE-2026-86817

The Five Star Business Profile and Schema WordPress plugin (versions 2.3.20-2.3.21 ) is vulnerable to a sensitive data disclosure flaw. The issue stems from the plugin failing to properly restrict callbacks used to resolve schema field default values. This allows authenticated users with Author-l...

CVE-2026-86817 Five Star Business Profile and Schema 2.3.20 - 2.3.21 - Author+ Sensitive Data Disclosure via Schema Field Default Callback

The Five Star Business Profile and Schema WordPress plugin before 2.4.0 does not properly restrict the callbacks used to resolve schema field default values, allowing authenticated users with Author-level access and above to store input that discloses sensitive data, including other users' passwo...

White Star Software ProTop - Directory Traversal

A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences. id: CVE-2025-44177 info: name:...

PT-2026-104609

The Five Star Business Profile and Schema WordPress plugin before 2.4.0 does not properly restrict the callbacks used to resolve schema field default values, allowing authenticated users with Author-level access and above to store input that discloses sensitive data, including other users' passwo...

WordPress Five Star Restaurant Reservations plugin <= 2.7.24 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Five Star Restaurant Reservations versions = 2.7.24...

Learning-History-of-CFF-bug-in-iphone

Learning-History-of-CFF-bug-in-iphone 深入 CFF 字体，并偶然从某个越狱中了解到 cff 解析中存在的一个 bof（缓冲区溢出）。纯属娱乐。 那么……CFF 到底是什么？据我所知，它是一种文件格式，但让我们试着看看维基百科怎么说：“CFF 充当一个容器，可以将多种字体存储在一个称为 FontSet 的单元中。”（https://docs.fileformat.com/font/cff/）。所以基本上我们可以把字体存储在一起。酷，那接下来呢？嗯，既然它是一种文件格式，那它就必须有某种规范。没错，它确实有，而且并不友好，因为规范有 60...

CVE-2024-55457-PoC

CVE-2024-55457-PoC MasterSAM Star Gate v11 存在目录遍历漏洞，可通过端点 /adama/adama/downloadService 进行利用。攻击者可通过操纵 file 参数访问服务器上的任意文件，可能导致敏感信息泄露。 在“故障排除 - 下载日志”功能中负责下载日志的 API 中，应用程序未对通过 file 参数指定的文件执行路径验证。此外，用户无需身份验证即可调用此 API。 GET /adama/adama/downloadService?type=&file= HTTP/1.1...

WordPress Five Star Restaurant Reviews plugin < 2.3.14 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by V1T in WordPress Plugin Five Star Restaurant Reviews versions 2.3.14...

CVE-2026-92412

The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing unauthenticated attackers to inject arbitrary web script that runs in the browser of anyone tricked into submitting a crafted request,...

CVE-2026-92412 Five Star Restaurant Reviews < 2.3.14 - Reflected XSS

The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing unauthenticated attackers to inject arbitrary web script that runs in the browser of anyone tricked into submitting a crafted request,...

EUVD-2026-90517

The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing unauthenticated attackers to inject arbitrary web script that runs in the browser of anyone tricked into submitting a crafted request,...

CVE-2026-92412

The Five Star Restaurant Reviews WordPress plugin (versions before 2.3.14 ) contains a Reflected Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to properly escape user-supplied values before they are outputted into an HTML tag. This allows unauthenticated attackers to inj...