CVE-2026-119511

Missing Authorization vulnerability in Saeed MC Woocommerce Wishlist smart-wishlist-for-more-convert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MC Woocommerce Wishlist: from n/a through 2.0.3...

CVE-2026-119510

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saeed MC Woocommerce Wishlist smart-wishlist-for-more-convert allows Stored XSS.This issue affects MC Woocommerce Wishlist: from n/a through 2.0.3...

EUVD-2026-119019

Missing Authorization vulnerability in Saeed MC Woocommerce Wishlist smart-wishlist-for-more-convert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MC Woocommerce Wishlist: from n/a through 2.0.3...

CVE-2026-119511 WordPress MC Woocommerce Wishlist plugin <= 2.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Saeed MC Woocommerce Wishlist smart-wishlist-for-more-convert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MC Woocommerce Wishlist: from n/a through 2.0.3...

CVE-2026-119511

The MC Woocommerce Wishlist plugin (smart-wishlist-for-more-convert) for WordPress is vulnerable to a Broken Access Control issue in versions up to and including 2.0.3 . The root cause is a Missing Authorization vulnerability that allows for the exploitation of incorrectly configured access contr...

CVE-2026-119510

The MC Woocommerce Wishlist (smart-wishlist-for-more-convert) plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This vulnerability affects versions from n/a through 2.0.3 . Exploitation details are not provi...

EUVD-2026-119012

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saeed MC Woocommerce Wishlist smart-wishlist-for-more-convert allows Stored XSS.This issue affects MC Woocommerce Wishlist: from n/a through 2.0.3...

CVE-2026-119510 WordPress MC Woocommerce Wishlist plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saeed MC Woocommerce Wishlist smart-wishlist-for-more-convert allows Stored XSS.This issue affects MC Woocommerce Wishlist: from n/a through 2.0.3...

MC-Log4j-Patcher

MC-Log4J-Patcher The goal of this project is to provide Minecraft players, and server owners, peace of mind in regards to the recently discovered Log4J exploit CVE-2021-44228. Currently this project looks for any Log4J format strings, not just jndi, and either replaces them or stops them from bei...

CVE-2023-36163

Exploit Title: BuildaGate5library - Reflected Cross-Site Scripting XSS Date: 06/07/2023 Exploit Author: Idan Malihi Vendor Homepage: None Version: 5 Tested on: Microsoft Windows 10 Pro CVE: CVE-2023-36163 PoC: An attacker needs to find the vulnerable parameter mc= and inject the JS code like: 'di...

mc-log4j-patcher

mc-log4j-patcher Replaces old vulnerable - CVE-2021-44228 Log4j2 version with the latest one 2.15.0 that contains the JNDI RCE fix. Tested on Spigot 1.12.2, PaperSpigot 1.8.8, PaperSpigot 1.17.1 This is intended to fix servers that are currently unsupported, such as PaperSpigot 1.8.8 Please check...

PT-2026-127733

rtl 433 through 25.12 contains a stack-based buffer overflow vulnerability in proflame2 mc that allows nearby attackers to write past a 7-byte stack buffer by sending more than seven valid Manchester-coded words. Attackers can transmit a crafted OOK radio signal or supply a crafted signal file to...

CLSA-2024-1728935304 kernel: Fix of 12 CVEs

xfs: don't walk off the end of a directory data block CVE-2024-41013 - net/sched: clsu32: fix netns refcount changes in u32change CVE-2022-29581 - net/packet: fix slab-out-of-bounds access in packetrecvmsg CVE-2022-20368 - openvswitch: fix OOB access in reservesfasize CVE-2022-2639 - net: sched:...

CLSA-2023-1683146027 kernel: Fix of 24 CVEs

media: rc: Fix use-after-free bugs caused by enetxirqsim CVE-2023-1118 - net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26545 - net/ulp: prevent ULP without clone op from entering the LISTEN status CVE-2023-0461 - Bluetooth: L2CAP: Fix u8 overflow CVE-2022-45934 -...

OESA-2026-4359 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: use generic driveroverride infrastructure When a driver is probed through driverattach, the bus' match callback is called without the device lock...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vfio/fsl-mc: Blocking calls to interrupt handlers without triggering them The eventfdctx trigger pointer of the vfiofslmcirq object is initially NULL, and it may become NULL if the user sets the trigger parameter of eventfd to -1...

Astra Linux – vulnerability in libde265

LibDe265 v1.0.4 contains a heap buffer overflow in the mcluma function, which can be exploited via a specially crafted file...

mc-coppel (>=4.0.9, <=4.1.3), msc (>=1.0.0, <=1.1.20) +2 more potentially affected by CVE-2026-77387 via geopy (1.17.0)

geopy PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on geopy and may be impacted: - mc-coppel =4.0.9, =1.0.0, =1.0.0, =0.3.0, =0.4.1 Source cves: CVE-2026-77387 Source advisory: OSV:PYSEC-2026-4218...

CVE-2026-16438

Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, MC Works64 all versions, Mitsubishi...

CVE-2026-16437

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI...