Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools

Individuals and organizations in Cambodia have emerged as the target of a new campaign that delivers an open-source remote access trojan RAT called Spark RAT. "The samples employ diverse lure themes, suggesting an effort to appeal to a broad range of potential victims. These include government...

Exploit for CVE-2010-1240

Vulnerabilities, Exploits, and Remote Access Payloads — lab wr...

WordPress WPC Order Tip for WooCommerce plugin < 3.3.1 - Unauthenticated Order Data Disclosure vulnerability

Unauthenticated Order Data Disclosure vulnerability discovered by Farid Narimanov in WordPress Plugin WPC Order Tip for WooCommerce versions 3.3.1...

WordPress FoodBoxBooker plugin < 1.0.8 - Subscriber+ Arbitrary User Profile Update vulnerability

Subscriber+ Arbitrary User Profile Update vulnerability discovered by Erwan LR WPScan in WordPress Plugin FoodBoxBooker versions 1.0.8...

WordPress Bit File Manager plugin < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector vulnerability

Subscriber+ Sensitive Data Disclosure via bitappsfmconnector vulnerability discovered by JING QIAN in WordPress Plugin Bit File Manager versions 6.9.1...

WordPress Events Manager plugin < 7.4 - Unauthenticated Pending Upload Disclosure via events-manager/v1/uploads vulnerability

Unauthenticated Pending Upload Disclosure via events-manager/v1/uploads vulnerability discovered by Usama Arshad in WordPress Plugin Events Manager versions 7.4...

WordPress Bit File Manager plugin < 6.9.1 - Unauthenticated File Activity Log Disclosure vulnerability

Unauthenticated File Activity Log Disclosure vulnerability discovered by Farid Narimanov in WordPress Plugin Bit File Manager versions 6.9.1...

WordPress MLS Import plugin < 7.0.4 - Subscriber+ Sensitive Information Disclosure via mlsimport_logger_per_item vulnerability

Subscriber+ Sensitive Information Disclosure via mlsimportloggerperitem vulnerability discovered by Shikhali Jamalzade in WordPress Plugin MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings versions 7.0.4...

CVE-2026-81625

A remote attacker with user privileges may use a malicious or compromised NASL vulnerability test VT on the affected products to trigger a stack buffer overflow and gain full access on the compromised system...

CVE-2026-81575

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causing a segmentation fault that ultimately crashes...

CVE-2026-81576

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

CVE-2026-81574

In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in certain cases, allowing an attacker to inject printf-style format specifiers. This can be used to reliably crash CodeMeter and disclose sensitive information such as process memory and stack canarie...

CVE-2026-81579

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...

CVE-2026-81581

Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside the scope of the program. This usually results in a denial of service, yet we cannot rule out the possibility of exploits that can cause Remo...

CVE-2026-81274

Subscriber Broken Access Control in Ditty = 3.1.67 versions...

CVE-2026-81279

Subscriber Broken Access Control in Push Notification for Post and BuddyPress = 3.20 versions...

CVE-2026-81573

If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remote peers. An attacker can read potentially...

CVE-2026-81272

Editor Broken Access Control in FluentPlayer Pro = 1.3.2 versions...

CVE-2026-81277

Contributor SQL Injection in Suggestion Engine for WooCommerce = 2.0.11 versions...

CVE-2026-81572

cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse points, such as junctions or symbolic links, before file operations are performed. A local attacker can create a junction at the temporary...