CVE-2026-91840

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

CVE-2026-91840

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

CVE-2026-91840

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

CVE-2026-91840 Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

CVE-2026-100176

The AIL Framework's username timeline feature is vulnerable to stored cross-site scripting XSS. Usernames imported from chats and crawled forums are stored without character restrictions. When an authenticated analyst views the username timeline, the application renders these stored usernames int...

CVE-2026-100176

The AIL Framework username timeline feature is vulnerable to stored cross-site scripting (XSS) . The application stores usernames from chats and crawled forums without character restrictions. When an authenticated analyst views the timeline, the client-side JavaScript file var/www/static/js/d3/ti...

EUVD-2026-87089

The AIL Framework's username timeline feature is vulnerable to stored cross-site scripting XSS. Usernames imported from chats and crawled forums are stored without character restrictions. When an authenticated analyst views the username timeline, the application renders these stored usernames int...

CVE-2026-100176 Stored Cross-Site Scripting (XSS) in AIL Framework Username Timeline Tooltip

The AIL Framework's username timeline feature is vulnerable to stored cross-site scripting XSS. Usernames imported from chats and crawled forums are stored without character restrictions. When an authenticated analyst views the username timeline, the application renders these stored usernames int...

CVE-2026-100176 Stored Cross-Site Scripting (XSS) in AIL Framework Username Timeline Tooltip

The AIL Framework's username timeline feature is vulnerable to stored cross-site scripting XSS. Usernames imported from chats and crawled forums are stored without character restrictions. When an authenticated analyst views the username timeline, the application renders these stored usernames int...

CVE-2026-100176 Stored Cross-Site Scripting (XSS) in AIL Framework Username Timeline Tooltip

The AIL Framework's username timeline feature is vulnerable to stored cross-site scripting XSS. Usernames imported from chats and crawled forums are stored without character restrictions. When an authenticated analyst views the username timeline, the application renders these stored usernames int...

Wordell

Wordell 🌐 Wordell is a powerful WordPress enumeration script designed to make your WordPress security assessments more efficient and comprehensive. It enables you to enumerate sitemaps, discover usernames, gather WordPress logins, capture screenshots, and generate random IP addresses with geo dat...

PT-2026-98847

Name of the Vulnerable Software and Affected Versions AIL Framework affected versions not specified Description The username timeline feature is susceptible to stored cross-site scripting XSS. Usernames imported from chats and crawled forums are stored without character restrictions. When an...

CVE-2026-91840: Improper Neutralization of CRLF Sequences

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...

CVE-2026-100176: Improper Neutralization of Input During Web Page Generation

The AIL Framework's username timeline feature is vulnerable to stored cross-site scripting XSS. Usernames imported from chats and crawled forums are stored without character restrictions. When an authenticated analyst views the username timeline, the application renders these stored usernames int...

Malicious code in @birbalo/aliftech-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6392dad6c7467b1d2b75c329d517982f061f3ca0792b8879b72127813d26aa8 The npm package @birbalo/[email protected] ships a postinstall.js lifecycle script that runs automatically on npm install. The script imports the...

CVE-2026-96810

A vulnerability was identified in huanzi-qch base-admin up to 52816b760cd53244989fd664bbb2b3d4edbfdbf1. This issue affects the function Save of the file base-admin-master\src\main\java\cn\huanzi\qch\baseadmin\common\controller\CommonController.java of the component Add User Handler. The...

EUVD-2026-85775

A vulnerability was identified in huanzi-qch base-admin up to 52816b760cd53244989fd664bbb2b3d4edbfdbf1. This issue affects the function Save of the file base-admin-master\src\main\java\cn\huanzi\qch\baseadmin\common\controller\CommonController.java of the component Add User Handler. The...

CVE-2026-96810

A cross-site scripting (XSS) vulnerability exists in the huanzi-qch base-admin software (up to commit 52816b760cd53244989fd664bbb2b3d4edbfdbf1). The flaw is located within the Add User Handler component, specifically affecting the Save function of the base-admin-master\src\main\java\cn\huanzi\qch...

CVE-2026-96810 huanzi-qch base-admin Add User CommonController.java save cross site scripting

A vulnerability was identified in huanzi-qch base-admin up to 52816b760cd53244989fd664bbb2b3d4edbfdbf1. This issue affects the function Save of the file base-admin-master\src\main\java\cn\huanzi\qch\baseadmin\common\controller\CommonController.java of the component Add User Handler. The...

PT-2026-97688

Name of the Vulnerable Software and Affected Versions huanzi-qch base-admin versions up to 52816b760cd53244989fd664bbb2b3d4edbfdbf1 Description A remote cross site scripting issue exists in the Add User Handler component. The problem occurs within the Save function located in the...