298042 matches found
CVE-2026-24061-Telnetd
CVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass CVE: CVE-2026-24061 Severity: Critical CVSS: 9.8 Critical CWE: CWE-88 — Improper Neutralization of Argument Delimiters in a Command Affected Component: GNU Inetutils telnetd Affected Versions: 1.9.3 through 2.7 Overview CVE-2026-24061 is ...
CVE-2026-32572
Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...
CVE-2026-105058
Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...
CVE-2026-47102-PoC
CVE-2026-47102 — LiteLLM Privilege Escalation via /user/update LiteLLM v1.83.7 versions before v1.83.10 /user/update endpoint allows low-privileged users with access to this endpoint to modify their own userrole field to proxyadmin when updating their account, achieving unauthorized privilege...
CVE-2026-98215
In the Linux kernel, the following vulnerability has been resolved: selinux: preserve user SID across nested backing files SELinux saves the user file SID in a backing-file security blob so it remains available after mmap replaces vma-vmfile with a backing file. For nested backing files overlayfs...
CVE-2026-105058
The WordPress WP User Profiles plugin versions
EUVD-2026-93084
Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...
CVE-2026-105058 WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...
CVE-2026-105058 WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...
CVE-2026-41555 WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability
Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...
CVE-2026-41555
The Newsletter Subscription Form – User Subscriptions Form, Capture Email WordPress plugin (versions
CVE-2026-41555 WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability
Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...
EUVD-2026-93235
Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...
CVE-2026-32572 WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...
CVE-2026-32572 WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...
CVE-2026-32572
The WP User Frontend Pro plugin for WordPress (versions
CVE-2012-2982
CVE-2012-2982 Description file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | pipe character. Installation 1. git clone https://github.com/CpyRe/CVE-2012-2982.git 2. pip3 install -...
CVE-2026-999999
X-Trading Portal: Regional Financial Infrastructure v1.4.2 Overview This repository contains the core distribution and deployment configurations for the X-Trading Portal XTP , a containerized solution designed for retail banking and stock trading services. This version v1.4.2 includes the updated...