CVE-2026-105058

The WordPress WP User Profiles plugin versions

EUVD-2026-93084

Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...

CVE-2026-105058 WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...

CVE-2026-105058 WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...

CVE-2026-41555 WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...

CVE-2026-41555

The Newsletter Subscription Form – User Subscriptions Form, Capture Email WordPress plugin (versions

CVE-2026-41555 WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...

EUVD-2026-93235

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

CVE-2026-32572 WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

CVE-2026-32572 WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

CVE-2026-32572

The WP User Frontend Pro plugin for WordPress (versions

CVE-2012-2982

CVE-2012-2982 설명 Webmin 1.590 및 이전 버전의 file/show.cgi는 원격 인증 사용자가 경로명에 유효하지 않은 문자를 통해 임의의 명령을 실행할 수 있도록 허용하며, | 파이프 문자가 그 예입니다. 설치 1. git clone https://github.com/CpyRe/CVE-2012-2982.git 2. pip3 install -r requirements.txt 사용법 1. nc -nlvp 2. python3 exp.py 또는 python3 subprocess-exp.py 3. RCE!!...

github.com/moby/sys/user: moby/sys/user: Denial of Service via crafted user or group database files

A flaw was found in the moby/sys/user package. The package does not properly limit memory allocation when parsing Unix-style user and group database files, such as /etc/passwd or /etc/group. An attacker who can supply a specially crafted file can cause excessive memory consumption, leading to a...

CVE-2026-999999

X-Trading Portal: Региональная финансовая инфраструктура v1.4.2 Обзор Этот репозиторий содержит основные дистрибутивы и конфигурации развертывания для X-Trading Portal XTP , контейнеризованного решения, предназначенного для розничных банковских и фондовых торговых услуг. Эта версия v1.4.2 включае...

CVE-2026-57555

Memory Corruption when executing system service routines due to improper handling of user input buffers...

CVE-2026-57555 Use After Free in DSP Service

Memory Corruption when executing system service routines due to improper handling of user input buffers...

EUVD-2026-92983

Memory Corruption when executing system service routines due to improper handling of user input buffers...

CVE-2026-57555 Use After Free in DSP Service

Memory Corruption when executing system service routines due to improper handling of user input buffers...

CVE-2026-57555

A Use After Free vulnerability exists in the DSP Service due to improper handling of user input buffers during the execution of system service routines. This memory corruption flaw can lead to HIGH confidentiality, integrity, and availability impacts. Exploitation details are not provided in the ...

CVE-2026-19478-PoC

CVE-2026-19478 PoC GitLab GraphQL 계층에서의 인증되지 않은 원격 코드 인젝션 취약점으로, 공격자가 단일 조작된 쿼리로 공개 프로젝트와 사용자 데이터를 수정하거나 삭제 할 수 있습니다. 인증이 필요 없고, 사용자 상호작용이 없으며, 특별한 권한도 필요하지 않습니다. | ---|--- 심각도| 9.4 Critical — AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H CWE| CWE-94 Improper Control of Generation of Code / Code Injection...