490159 matches found
PT-2026-80831
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...
PT-2026-81063
Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...
PT-2026-81046
Name of the Vulnerable Software and Affected Versions WooBeWoo Product Filter Pro versions prior to 3.1.9 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes t...
PT-2026-80811
Author SQL Injection in FluentCRM Pro = 3.1.12 versions...
PT-2026-81057
Name of the Vulnerable Software and Affected Versions Toolset Blocks versions 1.6.26 and earlier Description Unauthenticated Cross-Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update Toolset Blocks to...
PT-2026-80844
Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...
PT-2026-81058
Name of the Vulnerable Software and Affected Versions The Events Calendar versions prior to 6.17.3 Description An unauthenticated PHP Object Injection issue exists. PHP Object Injection occurs when untrusted input is passed to the PHP unserialize function, potentially allowing an attacker to...
PT-2026-80843
Unauthenticated Local File Inclusion in Måne = 1.7 versions...
PT-2026-80836
Name of the Vulnerable Software and Affected Versions Woo Essential versions prior to 4.3.1 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database...
PT-2026-81055
Unauthenticated PHP Object Injection in WP Project Manager = 4.0.6 versions...
PT-2026-80815
Unauthenticated Cross Site Request Forgery CSRF in Fluent Support Pro = 2.3.1 versions...
firefox security update
140.14.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.14.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.14.0-1 - Update to 140.14.0 ESR...
PT-2026-80828
Unauthenticated Cross Site Scripting XSS in Tourmaster = 5.4.9 versions...
PT-2026-80816
Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...
PT-2026-80825
Name of the Vulnerable Software and Affected Versions Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More versions prior to 1.7.2 Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions...
PT-2026-81050
Name of the Vulnerable Software and Affected Versions MagicAI for WordPress versions 1.4 and earlier Description A Local File Inclusion issue exists that allows users with Subscriber privileges to read arbitrary files on the server. Recommendations Update MagicAI for WordPress to a version later...
EUVD-2026-65146
OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via importlink...
YARA-X 1.20.0
YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malware...