CVE-2026-105649

The Ghost Node.js content management system is vulnerable to Stored Cross-Site Scripting (XSS) in versions 4.22.0 through 6.65.0 . The root cause is a lack of sanitization for SVG media thumbnails and SVG images uploaded using non-SVG file extensions. This flaw allows any staff user, including Co...

CVE-2026-105649 Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

Ghost is a Node.js content management system. From 4.22.0 until 6.65.0, SVG media thumbnails and SVG images uploaded with a non-SVG file extension were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in...

CVE-2016-0752

Explotando CVE-2016-0752 Esta aplicación sirve como una prueba de concepto vulnerable para explotar CVE-2016-0752. Para más información, consulte esta entrada de blog, que explica la vulnerabilidad, los pasos necesarios para explotarla, la solución y un enlace a un módulo de metasploit. Primeros...

CVE-2025-2005

Exploit de Subida Arbitraria de Archivos en WordPress FEUP CVE-2025-2005 Este repositorio proporciona un exploit de Prueba de Concepto PoC para el plugin Front End Users de WordPress versiones hasta 3.2.32, el cual es vulnerable a subida arbitraria de archivos debido a la falta de validación de...

CVE-2026-105639

The open-source project management tool Plane is vulnerable to a pre-auth workspace invitation hijack prior to version 1.4.0 . The flaw exists because the signup flow creates a logged-in user for any submitted email without an out-of-band ownership check, while the User.email field is unique. An ...

CVE-2026-105639 Plane: Pre-auth workspace invitation hijack via email-squat and self-served invitation token leak in Plane

Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any submitted email without an out-of-band ownership check, while User.email is unique=True. The authenticated user can call GET /api/users/me/workspaces/invitations/, which retur...

CVE-2026-105639 Plane: Pre-auth workspace invitation hijack via email-squat and self-served invitation token leak in Plane

Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any submitted email without an out-of-band ownership check, while User.email is unique=True. The authenticated user can call GET /api/users/me/workspaces/invitations/, which retur...

CVE-2026-104961

The open-source project management tool Plane is vulnerable to an incorrect authorization issue (CWE-863) prior to version 1.4.0 . The WorkspaceOwnerPermission check fails to verify if a user's is_active status is set to True. Consequently, a deactivated user can retain owner-level access to a wo...

CVE-2026-104893

The project management tool Plane is vulnerable to improper validation in its API. Prior to version 1.4.0 , an authenticated user can use the PATCH /api/users/api-tokens/{token_id}/ endpoint to modify the allowed_rate_limit field without server-side validation or a maximum limit. This allows an a...

CVE-2026-104893 Plane: Improper validation allows arbitrary modification of API token rate limits

Plane is an open-source project management tool. Prior to 1.4.0, GET /api/users/api-tokens/ allows an authenticated user to retrieve API-token records, while PATCH /api/users/api-tokens/tokenid/ allows the user to modify the token's allowedratelimit field without server-side validation or a maxim...

CVE-2025-2005

CVE-2025-2005 El Plugin Front End Users de WordPress = 3.2.32 es vulnerable a la subida de archivos arbitrarios Explotación del Plugin Front-End Users de WordPress Información de la Vulnerabilidad Nombre del Plugin : Front-End Users Plugin Versión Afectada : = 3.2.32 Tipo de Vulnerabilidad : Subi...

CVE-2022-34961

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS Explicación de la vulnerabilidad: Se descubrió que OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS contiene una vulnerabilidad de cross-site scripting XSS almacenado a través del módulo Users Timeline. Vectores de ataque: El atacante...

CVE-2021-42205

CVE-2021-42205 El controlador ELAN Miniport touchpad para Windows anterior a 24.21.51.2, utilizado en hardware de PC de múltiples fabricantes, permite a los usuarios locales provocar un bloqueo del sistema enviando una determinada solicitud IOCTL, porque esa solicitud se maneja dos veces...

Astra Linux – Vulnerability in Intel Microcode

Observable timing discrepancies in some Intel processors may allow an authenticated user to potentially enable information disclosure through local access...

CVE-2026-104808 Mitel MiVoice Office 400 stored Cross-Site Scripting

DigitalCanion has discovered a stored Cross-Site Scripting XSS vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content, resulting in a denial-of-service condition within the web application. The specific flaw exists within the web portal listening...

The Opal Estate Pro – Property Management <= 1.7.5 - Unauthenticated Privilege Escalation

The Opal Estate Pro plugin ≤ 1.7.5 is vulnerable to privilege escalation. Due to missing role restrictions in the onregisteruser function, users can register with any role. This allows unauthenticated attackers to create administrator accounts. id: CVE-2025-6934 info: name: The Opal Estate Pro –...

XWiki < 4.10.15 - Email Disclosure

The Solr-based search in XWiki discloses the email addresses of users even when obfuscation of email addresses is enabled. To demonstrate the vulnerability, search for objcontent:email using XWiki's regular search interface. id: CVE-2023-50720 info: name: XWiki 4.10.15 - Email Disclosure author:...

CVE-2025-32462

CVE-2025-32462 – Script POC de sudo Este es un script de detección de escalada de privilegios CVE‑2025‑32462 , que ofrece dos modos: detección directa de sudo y detección de recorrido para usuarios no privilegiados. Estructura de archivos Archivo| Descripción ---|--- poc.sh| Archivo de verificaci...

CVE-2025-65950

CVE-2025-65950: WBCE CMS es vulnerable a inyección SQL ciega basada en tiempo a través del parámetro groups Resumen Campo| Detalles ---|--- ID de CVE| CVE-2025-65950 Gravedad| CRÍTICA Aviso| Ver aviso Descubierto por| Lukasz Rybak Productos afectados WBCE/WBCECMS Detalles Resumen Una vulnerabilid...

Compromised-Org-Chart-Generator

受损组织架构图生成器 概述 Active Directory 被组织用作身份提供者。 它包含所有员工的信息，包括姓名、职位、部门以及他们的经理。 密码审计有助于发现弱点和风险。 您可以尝试对少量密码进行密码喷洒。 或者，您可以使用 hashcat 对用户哈希执行字典攻击。 您还可以从 https://haveibeenpwned.com 等服务获取泄露信息。 在这些情况下，您将获得一份有风险的用户列表。此脚本可帮助您可视化哪些部门或区域面临风险。 知晓明文密码后，威胁行为者可以以该用户身份进行身份验证，而这通常不会触发任何警报。 此存储库通过基于 Active Directory...