CVE-2024-30167

Atlona OME 인증된 명령 삽입을 위한 PoC 면책 조항 : 이 개념 증명은 교육 및 연구 목적으로만 제공됩니다. 귀하가 소유하지 않거나 명시적 테스트 권한이 없는 시스템에서 이 코드를 사용하지 마십시오. 저는 어떠한 오용에 대해서도 책임을 지지 않습니다. Atlona AT-OME-RX21 AV 스위처의 시간 구성 인터페이스에 인증된 명령 삽입 취약점이 존재합니다. 유효한 자격 증명을 가진 사용자는 root 로 실행되는 운영 체제 명령을 주입하여 시스템 전체를 손상시킬 수 있습니다. 제품 정보 Atlona...

CVE-2021-41074

CVE-2021-41074 Qloapps HotelCommerce 1.5.1 における CSRF HotelCommerce 1.5.1 には CSRF が存在します。これにより、誰でも管理者メールを変更できる可能性があります。 攻撃者が管理者に悪意を持って作成された HTML 文書をクリックさせると、管理者ユーザーのメールを変更される可能性があります。...

CVE-2020-13942byVulHub

CVE-2020-13942byVulHub Apache Unomi Expression Language Injection RCE CVE-2020-13942 説明 この脆弱性は、MVEL式言語インジェクションを悪用して、Apache Unomi バージョン 1.5.1 を実行しているシステム上で任意のコマンド実行を可能にします。 プロジェクトページ GitHub - Vulhub - Unomi CVE-2020-13942 環境設定 Docker Compose ファイル docker-compose.yml root@kitploit: version: '2'...

CLEANSTART-2026-XV09943 Security fixes in fulcio 1.5.1-r0

Package fulcio version 1.5.1-r0 fixes 5 vulnerabilities: CVE-2025-27144, CVE-2026-34986, CVE-2025-30204, CVE-2026-41178, ghsa-hrxh-6v49-42gf...

Important: Red Hat Security Advisory: Cluster Observability Operator 1.5.2

The Cluster Observability Operator COO is a Red Hat OpenShift Container Platform Operator that you can deploy to manage observability component stacks by using custom resource descriptions CRDs. The 1.5.2 release of COO...

EUVD-2026-53110

The Custom Fields WordPress plugin before 1.5.1 does not validate a user-supplied file path before deletion, allowing unauthenticated users to delete arbitrary files on the server such as wp-config.php, which can lead to a full site takeover...

CVE-2026-16940

The Custom Fields WordPress plugin before 1.5.1 does not validate a user-supplied file path before deletion, allowing unauthenticated users to delete arbitrary files on the server such as wp-config.php, which can lead to a full site takeover...

CVE-2026-16940 Custom Fields for WooCommerce < 1.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal

The Custom Fields WordPress plugin before 1.5.1 does not validate a user-supplied file path before deletion, allowing unauthenticated users to delete arbitrary files on the server such as wp-config.php, which can lead to a full site takeover...

WordPress Xpro Addons — 140+ Widgets for Elementor plugin <= 1.5.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Creation vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post Creation vulnerability discovered by normaandersonfrank in WordPress Plugin Xpro Elementor Addons versions = 1.5.1...

CLSA-2026-1785204344 TuxCare security update for xmlhttprequest-ssl (2 CVEs)

TuxCare rebuilt xmlhttprequest-ssl to address 2 CVEs. Fixed in 1.5.1-tuxcare.1...

CLSA-2026-1774484497 TuxCare security update for tar-fs (5 CVEs)

TuxCare rebuilt tar-fs to address 5 CVEs. Fixed in 1.5.1-tuxcare.1...

CLEANSTART-2026-GK99323 Security fixes in rekor-fips 1.5.1-r0

Package rekor-fips version 1.5.1-r0 fixes 1 vulnerabilities: CVE-2026-34986...

CLEANSTART-2026-KM46423 Security fixes in vertical-pod-autoscaler-fips 1.5.1-r2

Package vertical-pod-autoscaler-fips version 1.5.1-r2 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-27141...

CLEANSTART-2026-XZ21760 Security fixes in nginx-prometheus-exporter 1.5.1-r0

Package nginx-prometheus-exporter version 1.5.1-r0 fixes 7 vulnerabilities: CVE-2025-61726, CVE-2025-61729, CVE-2025-61728, CVE-2025-61731, CVE-2025-61731...

CLEANSTART-2026-YT08737 Security fixes in nginx-prometheus-exporter 1.5.1-r2

Package nginx-prometheus-exporter version 1.5.1-r2 fixes 21 vulnerabilities: CVE-2026-27143, CVE-2026-27140, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...

CVE-2026-65433

Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...

CVE-2026-59559

Subscriber Cross Site Scripting XSS in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...

CVE-2026-65433 WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...

CVE-2026-65433

CVE-2026-65433 concerns the WordPress plugin “RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg” (versions

CVE-2026-65433 WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...