EUVD-2026-91913

The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reviews.text' parameter in all versions up to, and including, 7.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-91918

The Alt Text AI – Automatically generate image alt text for SEO and accessibility plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.10.41. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes i...

CVE-2026-91108

The Alt Text AI WordPress plugin is vulnerable to an authorization bypass in all versions up to and including 1.10.41 . The flaw occurs because the plugin fails to properly verify if a user is authorized to perform specific actions, specifically via the atai_enrich_post_content AJAX action. This ...

CVE-2026-91108 Alt Text AI <= 1.10.41 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Content Modification via atai_enrich_post_content AJAX Action

The Alt Text AI – Automatically generate image alt text for SEO and accessibility plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.10.41. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes i...

CVE-2025-56503

CVE-2025-56503 説明 Sublime HQ Pty Ltd の Sublime Text 4 4200 における問題により、認証された 低権限の攻撃者が、インストールフォルダ内のアンインストールファイルを 細工されたバイナリに置き換えることで、管理者への特権昇格が可能になります。 影響を受ける製品 Sublime Text 4, バージョン 4200 製品: Seagate Toolkit プラットフォーム: Windows バージョン: 4200 攻撃タイプ: ローカル 影響:ローカル特権昇格 発見者...

cve-2022-42889-jmeter

CVE 2022-42889 この スクリプトは、Apache Commons Text 1.9 の旧バージョンを削除し、それ を JMETERHOME/lib フォルダ内の新しいバージョン 1.10.0 に置き換えるためのものです。...

EUVD-2026-91830

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any party with read access to this log, or to a backup or support bundle that includes it, can obtain the logged credential...

EUVD-2026-91058

figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width...

GHSA-62CH-8VMQ-8XM7 figlet is vulnerable to denial of service via unbounded loop when whitespaceBreak is used with a small width

Impact A denial-of-service infinite loop can occur in text / textSync when both: - whitespaceBreak: true is set, and - width is set smaller than the rendered width of a single FIGlet character. Under these conditions breakWord could never find a valid break point, so the word-wrapping loop in...

smb

███████╗███╗ ███╗██████╗ ███║ ██╔════╝████╗ ████║██╔══██╗ ║██║ ███████╗██╔████╔██║██████╔╝ ██║ ██ ║██║ ╚════██║██║╚██╔╝██║██╔══██╗ ╚██╗ ██ ╔╝██║ ███████║██║ ╚═╝ ██║██████╔╝ ╚████╔╝ ██║ ╚══════╝╚═╝ ╚═╝╚═════╝ ╚═══╝ ╚═╝ SMB is a network protocol that allows sharing files, printers and other resourc...

CVE-2026-94594

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any party with read access to this log, or to a backup or support bundle that includes it, can obtain the logged credential...

high-pcode

Ghidra における高レベル Pcode（PcodeAST）出力 Ghidra は、Pcode と呼ばれるプロセッサに依存しない表現を使用します。これはスクリプト内で簡単に取得して操作できます（Instruction.getPcode）。あまり知られていませんが、デコンパイラはより高レベルの Pcode 表現を公開しています。 プロセッサに依存しないアルゴリズムや AI モデルのトレーニングに Pcode を使用する場合の問題は、低レベル Pcode がその元となったアセンブリ言語によく似ていることです。低レベル Pcode は、Pcode...

CVE-2026-94593

The Armatura One software contains a vulnerability where the backup and restore routine records the full database connection command in a host log file. This includes the superuser password in plain text . If an attacker gains access to the server operating system, they can use these disclosed cr...

CVE-2026-94594

The Armatura One message broker is vulnerable to CWE-532 because it logs client connection credentials and associated passwords in plain text during normal operation. Any individual or entity with read access to the application logs, or to associated backups and support bundles containing these l...

CVE-2026-94594 Armatura LLC Armatura One Insertion of Sensitive Information into Log File

Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any party with read access to this log, or to a backup or support bundle that includes it, can obtain the logged credential...

WordPress Alt Text AI – Automatically generate image alt text for SEO and accessibility plugin <= 1.10.41 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Content Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post Content Modification vulnerability discovered by Webbernaut in WordPress Plugin Download Alt Text AI versions = 1.10.41...

GhostLock-Galaxy

GhostLock-Galaxy 中文: READMEZH.md これは別リポジトリです。このルートは adb shell または Shizuku を通じて取得した Android シェル権限を必要とするためです。元の YuKongA/ghostlock-app はシェル権限を使用せず、異なる実行ルートをたどります。その要件とコードパスが本プロジェクトと互換性があると仮定すべきではありません。 対応デバイス デバイス| カーネル ---|--- Samsung Galaxy Z Fold6 SM-F9560 / q6q|...

safetext

safetext これはGoogleの公式サポート製品ではありません。 YAMLなどの形式を生成するための、安全性を構造的に保証するライブラリ群です。text/template や sprintf のように、生成する形式の構文を理解しないがためにインジェクション脆弱性のリスクがあるライブラリの置き換えを目的としています。 使用例 text/template は生成する形式の構文を認識しないため、インジェクション脆弱性に対する保護を一切提供しません。 以下の produceConfig 関数は、text/template を使ってYAMLを生成します。 package main impor...

CVE-2026-96578

The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.22.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-96578

The GSpeech TTS – WordPress Text To Speech Plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.22.0 . The root cause is insufficient input sanitization and output escaping within the Comment Content functionality. Specifically, an mXSS-sty...