deREferencing

deREferencing deReferencing is an IDA Pro plugin that implements new registers and stack views. Adds dereferenced pointers, colors and other useful information, similar to some GDB plugins e.g: PEDA, GEF, pwndbg, etc. Supports following architectures: x86, x86-64, ARM, ARM64, MIPS32 and MIPS64...

CVE-2026-109392

Pimcore versions through 2026.3.1 are vulnerable to a stored cross-site scripting (XSS) flaw within the ExternalImage field. The root cause is the storage of unescaped URLs , which allows authenticated backend users with data object edit permissions to inject attribute-breaking payloads. These pa...

EUVD-2026-97490

Pimcore through 2026.3.1 contains a stored cross-site scripting vulnerability that allows authenticated backend users to inject scripts by storing unescaped URLs in ExternalImage fields. Attackers with data object edit permission can store attribute-breaking payloads that execute JavaScript in th...

dsync

dsync IDAPython plugin that synchronizes decompiled and disassembled code views. Please refer to comments in source code for more details. Requires IDA Pro 7.3 N.B.: You may want to use the official synchronization feature introduced with IDA 7.3 instead...

CryptoTester

CryptoTester A utility for playing with cryptography, geared towards ransomware analysis. Hex Views All hex views used in CryptoTester offer a few enhanced capabilities. Null bytes are colored a lighter gray Bytes representing printable ASCII characters are colored orange Newline patterns 0D 0A a...

voltron

Voltron Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs...

voltron

Voltron Voltron es un kit de herramientas extensible para la interfaz de usuario de depuradores, escrito en Python. Su objetivo es mejorar la experiencia del usuario de varios depuradores LLDB, GDB, VDB y WinDbg permitiendo la conexión de vistas de utilidad que pueden recuperar y mostrar datos de...

PoC_CVE-2024-28157

PoC CVE-2024-28157 Overview Jenkins GitBucket Plugin veersion 0.8 and earlier does not sanitize Gitbucket URLs on build views, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure jobs. Exploitation Steps Setup Jenkins using docker: 1. Use docker...

Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA)

Summary The task-collection endpoint GET /api/v1/projects/project/views/view/tasks loads the requested project view straight from the URL path without verifying the caller is authorized for it. For a link-share token, the task query is correctly pinned to the share's own project, but the view is...

binviz

binviz Binary visualiser & triage tool: linked interactive views entropy, histograms, image/dot-plot surfaces, control-flow graphs over a single shared address-space model. pipx install binviz && binviz serve What it does Open a file and every view is looking at the same address space. Select a...

CVE-2026-23498

CVE-2026-23498: Shopware Has Improper Control of Generation of Code in Twig rendered views Overview Field| Details ---|--- CVE ID| CVE-2026-23498 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products shopware/shopware versions: = 6.7.0.0, = 6.7.0.0, 6.7.6.1 CWE...

DRUPAL-CONTRIB-2026-205

This module enables you to "share" a view display within another website via an iframe. The module doesn't sufficiently block access to view displays. Although the views data is not displayed, resource-intensive views could still be executed which could affect site performance. This vulnerability...

Views Share - Moderately critical - Access bypass - SA-CONTRIB-2026-205

This module enables you to "share" a view display within another website via an iframe. The module doesn't sufficiently block access to view displays. Although the views data is not displayed, resource-intensive views could still be executed which could affect site performance. This vulnerability...

PT-2026-107508

wger is a free, open-source workout and fitness manager. Prior to version 2.6, five gym management views in wger apply a flawed gym-scope guard gym a != gym b that silently passes when both operands are None. A trainer with gym.gym trainer and gym.add adminusernote permissions and no gym assignme...

EUVD-2026-93913

Gitea accepted pushed Git trees containing two entries with the same name, which Git's own consistency checks reject. Gitea's web views resolved such a path to the first entry, while git checkout, Gitea Actions, and release archives use the last. A contributor could open a pull request whose diff...

CVE-2026-40807

Unauthenticated Cross Site Scripting XSS in CF7 Views Complete Entry Management for Contact Form 7 = 3.2.6 versions...

CVE-2026-40807 WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in CF7 Views Complete Entry Management for Contact Form 7 = 3.2.6 versions...

EUVD-2026-93044

Unauthenticated Cross Site Scripting XSS in CF7 Views Complete Entry Management for Contact Form 7 = 3.2.6 versions...

CVE-2026-40807 WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in CF7 Views Complete Entry Management for Contact Form 7 = 3.2.6 versions...

CVE-2026-40807

The CF7 Views – Complete Entry Management for Contact Form 7 plugin for WordPress, version 3.2.6 and below , is vulnerable to an unauthenticated Cross Site Scripting (XSS) vulnerability. The issue is rooted in the improper neutralization of input during web page generation (CWE-79). Successful ex...