CVE-2026-103350

The Magepeople inc. Booking and Rental Manager plugin for WooCommerce (versions up to and including 2.8.0 ) is vulnerable to an Improper Validation of Specified Quantity in Input (CWE-1284) vulnerability. This security flaw allows an attacker to remove important client functionality . While the s...

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

libptrace

libptrace libptrace is an event driven process/thread debugging, tracing, and manipulation framework. It is written in C and has Python 2.7 and 3.7 bindings. It is meant to be used as a library. The API has been designed with cross-platform support in mind. Although the current version only runs ...

WordPress Easy Forms for Mailchimp Plugin < 6.8.9 - Cross-Site Scripting

The Easy Forms for Mailchimp plugin before version 6.8.9 contains a reflected cross-site scripting vulnerability. The plugin does not properly sanitize and escape the sqlerror parameter before outputting it back in the page when the debug option is enabled, which could allow attackers to execute...

CVE-2026-16741

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TR7 Cyber ​​Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber ​​Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 befor...

CVE-2026-107425

Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.9.7...

EUVD-2026-101016

Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.9.7...

PT-2026-114191

Name of the Vulnerable Software and Affected Versions TR7 ASP versions 1.0.40.236 through 1.0.1554.2330 TR7 ASP versions 1.6.42.239 through 1.6.1554.2330 Description An OS command injection flaw exists in TR7 Cyber Defense Inc. TR7 ASP on both virtual and physical appliances. This issue occurs du...

heartbleed

Heartbleed A checker site and tool for CVE-2014-0160. Software from@FiloSottile for iSC Inc...

DEBIAN-CVE-2026-109378

SPIP before 4.4.18 contains a server-side request forgery vulnerability in recupererurl in ecrire/inc/distant.php that follows up to 10 redirects without re-validating targets with validerurldistante. Authenticated attackers can supply a remote URL, such as a syndicated site feed or remote...

CVE-2026-109378

SPIP before 4.4.18 contains a server-side request forgery vulnerability in recupererurl in ecrire/inc/distant.php that follows up to 10 redirects without re-validating targets with validerurldistante. Authenticated attackers can supply a remote URL, such as a syndicated site feed or remote...

EUVD-2026-97876

SPIP before 4.4.18 contains a server-side request forgery vulnerability in recupererurl in ecrire/inc/distant.php that follows up to 10 redirects without re-validating targets with validerurldistante. Authenticated attackers can supply a remote URL, such as a syndicated site feed or remote...

CVE-2026-109378 SPIP before 4.4.18 SSRF via HTTP Redirects in recuperer_url

SPIP before 4.4.18 contains a server-side request forgery vulnerability in recupererurl in ecrire/inc/distant.php that follows up to 10 redirects without re-validating targets with validerurldistante. Authenticated attackers can supply a remote URL, such as a syndicated site feed or remote...

CVE-2026-109378

SPIP versions prior to 4.4.18 are vulnerable to a Server-Side Request Forgery (SSRF) in the recuperer_url() function located in ecrire/inc/distant.php. The root cause is that the application follows up to 10 redirects without re-validating the targets using valider_url_distante(). This allows aut...

CVE-2026-109378

SPIP before 4.4.18 contains a server-side request forgery vulnerability in recupererurl in ecrire/inc/distant.php that follows up to 10 redirects without re-validating targets with validerurldistante. Authenticated attackers can supply a remote URL, such as a syndicated site feed or remote...

CVE-2026-109378 SPIP before 4.4.18 SSRF via HTTP Redirects in recuperer_url

SPIP before 4.4.18 contains a server-side request forgery vulnerability in recupererurl in ecrire/inc/distant.php that follows up to 10 redirects without re-validating targets with validerurldistante. Authenticated attackers can supply a remote URL, such as a syndicated site feed or remote...

subcrawl

SubCrawl SubCrawl es un framework desarrollado por Patrick Schläpfer, Josh Stroschein y Alex Holland del equipo de Threat Research de HP Inc. SubCrawl está diseñado para encontrar, escanear y analizar directorios abiertos. El framework es modular, compuesto por cuatro componentes: módulos de...

CVE-2026-85531

Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper Validation. This issue affects OpenCart Virtual POS Module: from 26.8.2 before 26.9.1...

CVE-2026-105870 WordPress WP Associate Post R2 plugin <= 5.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Delight Star Inc. WP Associate Post R2 wp-associate-post-r2 allows Reflected XSS.This issue affects WP Associate Post R2: from n/a through 5.0.1...

CVE-2026-95589

The Deposits and Partial Payments for WooCommerce WordPress plugin (versions up to and including 4.0.1 ) is vulnerable to a Missing Authorization flaw. This vulnerability allows for Exploiting Incorrectly Configured Access Control Security Levels , potentially impacting the integrity of the syste...