687 matches found
Scavenger
Scavenger - OSINT-Bot - ÜBERARBEITET Bot in Aktion Einleitung Nur der Code meines OSINT-Bots, der auf Paste-Seiten nach sensiblen Datenlecks sucht. Suchbegriffe: Anmeldeinformationen private RSA-Schlüssel WordPress-Konfigurationsdateien MySQL-Verbindungszeichenfolgen Onion-Links SQL-Dumps...
EUVD-2026-66267
The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not perform any capability or nonce check before returning taxonomy term data for an arbitrary, caller-supplied taxonomy, allowing unauthenticated users to disclose the names and IDs of terms belonging to non-public taxonomies...
CVE-2026-69659
CVE-2026-69659 affects ash-project Ash, specifically the keyset pagination cursor handling in Ash.Page.Keyset. Read actions using keyset pagination deserialize client-supplied page[:after] or page[:before] by base64 decoding the cursor and passing it to Erlang :erlang.binary_to_term/2 without siz...
CVE-2026-71233
InvoiceNinja v5-stable renders an invoice or quote's "terms" field in the client portal using Laravel Blade's raw output directive !! -terms !! resources/views/portal/ninja2020/invoices/includes/terms.blade.php with no HTML sanitization...
EUVD-2026-53306
InvoiceNinja v5-stable renders an invoice or quote's "terms" field in the client portal using Laravel Blade's raw output directive !! $entity-terms !! resources/views/portal/ninja2020/invoices/includes/terms.blade.php with no HTML sanitization. StoreInvoiceRequest.php only strips newlines from th...
CVE-2026-71233 InvoiceNinja - Stored XSS via Invoice/Quote Terms Field
InvoiceNinja v5-stable renders an invoice or quote's "terms" field in the client portal using Laravel Blade's raw output directive !! -terms !! resources/views/portal/ninja2020/invoices/includes/terms.blade.php with no HTML sanitization...
CVE-2026-71233 InvoiceNinja - Stored XSS via Invoice/Quote Terms Field
InvoiceNinja v5-stable renders an invoice or quote's "terms" field in the client portal using Laravel Blade's raw output directive !! -terms !! resources/views/portal/ninja2020/invoices/includes/terms.blade.php with no HTML sanitization...
CVE-2026-71233
InvoiceNinja v5-stable renders an invoice or quote's "terms" field in the client portal using Laravel Blade's raw output directive !! $entity-terms !! resources/views/portal/ninja2020/invoices/includes/terms.blade.php with no HTML sanitization. StoreInvoiceRequest.php only strips newlines from th...
CVE-2026-71233
CVE-2026-71233 affects InvoiceNinja v5-stable: the client portal renders the invoice/quote terms with Laravel Blade's raw output (resources/views/portal/ninja2020/invoices/includes/terms.blade.php) and no HTML sanitization. StoreInvoiceRequest.php only strips newlines, not HTML purification. An a...
EUVD-2026-53184
The Search Analytics for WP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.16. This is due to missing or incorrect nonce validation on the processbulkaction function of MWTSAStatsTable. This makes it possible for unauthenticated attacker...
CVE-2026-11867
The Frontend Admin by DynamiApps WordPress plugin before 3.29.7 does not perform capability checks on its taxonomy term creation, modification, and deletion operations, allowing authenticated users with low privileges such as Subscribers to create, rename, and delete arbitrary taxonomy terms...
CVE-2026-11867 Frontend Admin by DynamiApps < 3.29.7 - Subscriber+ Taxonomy Term Creation/Modification/Deletion via Missing Authorization
The Frontend Admin by DynamiApps WordPress plugin before 3.29.7 does not perform capability checks on its taxonomy term creation, modification, and deletion operations, allowing authenticated users with low privileges such as Subscribers to create, rename, and delete arbitrary taxonomy terms...
EUVD-2026-51003
The Frontend Admin by DynamiApps WordPress plugin before 3.29.7 does not perform capability checks on its taxonomy term creation, modification, and deletion operations, allowing authenticated users with low privileges such as Subscribers to create, rename, and delete arbitrary taxonomy terms...
CVE-2026-11867
The CVE concerns the Frontend Admin by DynamiApps WordPress plugin prior to version 3.29.7. The issue is missing capability checks on taxonomy term create/modify/delete operations, allowing authenticated, low-privilege users (e.g., Subscribers) to create, rename, and delete arbitrary taxonomy ter...
CVE-2026-39874
creationtimestamp| type| source ---|---|--- 2026-07-28 01:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mro7jycbc32j 2026-07-28 01:24:00+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mroasrtyly2b 2026-07-28 04:47:11+00:00| seen|...
CVE-2026-60439
creationtimestamp| type| source ---|---|--- 2026-07-23 00:01:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrbjv36d322d 2026-07-23 00:32:07+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mrbllgkk3q2c 2026-07-23 01:25:26+00:00| seen|...
Linux Distros Unpatched Vulnerability : CVE-2026-53364
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: Fix memory leak in hcilebigterminate hcilebigterminate allocates...
CVE-2026-59853
SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the /api/storage/getCriteria endpoint returns saved search criteria from data/storage/criteria.json without the publish-access filtering used by sibling storage endpoints, allowing a publish-mode Reader to read private...
