CVE-2026-42637

The PayPlug for WooCommerce (Official) WordPress plugin versions

EUVD-2026-93042

Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...

CVE-2026-39798 WordPress TrueBooker plugin <= 1.2.9 - Settings Change vulnerability

Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...

CVE-2026-39798

The WordPress TrueBooker plugin versions

CVE-2026-39798 WordPress TrueBooker plugin <= 1.2.9 - Settings Change vulnerability

Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...

CVE-2026-999999

X-Trading Portal: Региональная финансовая инфраструктура v1.4.2 Обзор Этот репозиторий содержит основные дистрибутивы и конфигурации развертывания для X-Trading Portal XTP , контейнеризованного решения, предназначенного для розничных банковских и фондовых торговых услуг. Эта версия v1.4.2 включае...

io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

A flaw was found in Netty, a network application framework. A remote attacker, by sending a specially crafted SPDY/3.1 SETTINGS frame, could cause the SPDY SETTINGS decoder to create a large number of map entries. This excessive processing and memory allocation can lead to a denial of service DoS...

CVE-2019-12409

CVE-2019-12409: Уязвимость RCE из-за плохой конфигурации по умолчанию в Apache Solr Версии 8.1.1 и 8.2.0 Apache Solr содержат небезопасную настройку в файле конфигурации solr.in.sh, поставляемом с Solr. Настройки, приводящие к этой уязвимости: В "solr.in.sh": ENABLEREMOTEJMXOPTS="true" Включает...

CLEANSTART-2026-KT14793 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0

Security vulnerability affects the temporal-server package. When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

PT-2026-106464

Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...

PT-2026-106481

Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...

Command injection vulnerability exists in the REST API management interface of Brocade Fabric OS (CVE-2026-94581)

: An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions. An attacker with...

RHEL 8 : firefox (RHSA-2026:76746)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:76746 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

lighthouse

Lighthouse - A Coverage Explorer for Reverse Engineers Overview Lighthouse is a powerful code coverage explorer for IDA Pro and Binary Ninja, providing software researchers with uniquely interactive controls to study execution maps for native applications without requiring symbols or source. This...

CVE-2025-26264

CVE-2025-26264 CVE-2025-26264 - GeoVision GV-ASWeb 버전 6.1.2.0 이하에는 Notification Settings 기능 내에 원격 코드 실행RCE 취약점이 존재합니다. ASWeb에서 "System Settings" 권한을 가진 인증된 공격자는 이 결함을 악용하여 서버에서 임의의 명령을 실행할 수 있으며, 이로 인해 전체 시스템이 손상될 수 있습니다. 요구 사항 성공적인 공격을 수행하려면 공격자에게 다음이 필요합니다: 버전 6.1.2.0 이하의 GV-ASManager 웹 애플리케이션에...

CVE-2026-28648

In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28648

In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28648

A permission bypass vulnerability exists in Settings due to a confused deputy flaw. This issue allows for local escalation of privilege without requiring additional execution privileges or user interaction. No specific software version, exploit links, or remediation steps are provided in the docu...

CVE-2026-28648

In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-92630

In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...