wp2shell

wp2shell — Pre-Auth RCE in WordPress core Unauthenticated W...

Exploit for Generation of Error Message Containing Sensitive Information in Apache Camel

camel-undertow Rest DSL muteException Stack-Trace Disclosure R...

MINI-H373-FP6W-CXWJ

Bulletin has no description...

MINI-3RC2-GQ7W-XVHG

Bulletin has no description...

MINI-G2CF-JW6M-3P57

Bulletin has no description...

MINI-4F95-P25H-9J75

Bulletin has no description...

MINI-9R94-J6Q4-485F

Bulletin has no description...

MINI-PMV6-JVCJ-256P

Bulletin has no description...

MINI-M6FV-P4XP-H2XP

Bulletin has no description...

MINI-7R75-J3MC-249J

Bulletin has no description...

CVE-2026-14551

The servereye client also known as sensorhub, technically ClientAgentContainerService versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privileged service SE3Recovery EmergencyRecoveryService.exe, running as SYSTEM, periodically monitors the directory...

CVE-2026-16473 Sbc: sbc: heap out-of-bounds read via crafted sbc audio frame

A flaw was found in the sbc library BlueZ SBC codec. An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory...

CVE-2026-16473 Sbc: sbc: heap out-of-bounds read via crafted sbc audio frame

A flaw was found in the sbc library BlueZ SBC codec. An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory...

Exploit for Server-Side Request Forgery in Apache Camel

camel-iggy User-Header Injection Reproducer CVE-2026-55994...

EUVD-2026-47622

The servereye client also known as sensorhub, technically ClientAgentContainerService versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privileged service SE3Recovery EmergencyRecoveryService.exe, running as SYSTEM, periodically monitors the directory...

CVE-2026-14551 Local Privilege Escalation in servereye client (sensorhub)

The servereye client also known as sensorhub, technically ClientAgentContainerService versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privileged service SE3Recovery EmergencyRecoveryService.exe, running as SYSTEM, periodically monitors the directory...

CVE-2026-14551

The servereye client also known as sensorhub, technically ClientAgentContainerService versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privileged service SE3Recovery EmergencyRecoveryService.exe, running as SYSTEM, periodically monitors the directory...

EUVD-2026-47619

The Joomla extension JoomShopping is vulnerable to an reflected XSS vulnerability in the product frontend controller...

EUVD-2026-47620

The Ultimate Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-close-icon Attributes in all versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible...

EUVD-2026-47618

The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE...