CVE-2026-90967: Unknown Essential Real Estate: The Essential Real Estate WordPress plugin before 5.3.5 does not verify ownership of an invoice before rendering it in…

The Essential Real Estate WordPress plugin before 5.3.5 does not verify ownership of an invoice before rendering it in one of its AJAX actions, allowing an authenticated low-privileged user to read other users' invoices, including the invoice owner's name, account email address and financial...

CVE-2026-58273: rucio: Rucio is a scientific data management framework

Rucio is a scientific data management framework. From 1.16.1 until 35.9.0, 38.6.0, and 41.0.0rc1, the /credentials/signurl endpoint reads X-Rucio-Account instead of the account stored in request.environ'issuer' by token authentication. Any authenticated low-privilege user can supply root as the...

Linux Distros Unpatched Vulnerability : CVE-2026-115731

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases, allows a client that holds any...

CVE-2026-112913: tox-dev filelock: filelock is a platform-independent file lock for Python

filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock and AsyncReadWriteLock on Windows use connect to attach SQLite to the lock database by pathname, allowing another local account that can create adjacent names to place a database-wal or database-journa...

CVE-2026-100144: Unknown IVPAY payments: The IVPAY payments WordPress plugin through 1.0.8 does not sanitise a value from its payment callback before using it…

The IVPAY payments WordPress plugin through 1.0.8 does not sanitise a value from its payment callback before using it in a SQL statement, and treats an empty API key, which is its own default, as valid authentication, allowing unauthenticated attackers to read arbitrary data from the database...

CVE-2026-86442: Unknown WP Event Manager: The WP Event Manager WordPress plugin before 3.4.2 does not verify the ownership or the post type of a user supplied…

The WP Event Manager WordPress plugin before 3.4.2 does not verify the ownership or the post type of a user supplied post identifier in its front-end event submission flow, allowing unauthenticated attackers to read and overwrite the content of arbitrary unpublished posts and pages, and to conver...

CVE-2026-92693: pavel-odintsov fastnetmon: FastNetMon is a high-performance DDoS detector and sensor

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, parserawpackettosimplepacketfull in src/simplepacketparserng.cpp dereferences ipv6extensionheaderfragmentt when IpProtocolNumberIPV6FRAG is present without first verifying that the eight-byte Fragment header...

MiracleLinux 8 : xorg-x11-server-Xwayland-21.1.3-20.el8_10.5 (AXSA:2026-2260:10)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-2260:10 advisory. xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling CVE-2026-93520 Tenable has extracted the preceding...

AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793866396)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793866396 advisory. - In the Linux kernel, the following vulnerability has been resolved: rv: Use strings in da monitors tracepoints Using DA monitors...

FreeBSD : openvox -- Flawed Hostname Check allows Puppet Client Impersonation (6cd47e21-d8db-11f1-8d43-18cf5efc6bb4)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6cd47e21-d8db-11f1-8d43-18cf5efc6bb4 advisory. The OpenVoxProject reports: Trapperkeeper is the framework we use for running our Clojure based...

CVE-2026-105259: Unknown Easy Social Icons: The Easy Social Icons WordPress plugin before 4.0.3 does not sanitise SVG files, which it adds to the list of file…

The Easy Social Icons WordPress plugin before 4.0.3 does not sanitise SVG files, which it adds to the list of file types that may be uploaded site-wide, allowing users with the Author role and above to upload a malicious SVG containing XSS payloads. Where another installed Easy Social Icons...

CVE-2026-87856: Unknown Subscriptions for WooCommerce: The Subscriptions for WooCommerce WordPress plugin before 2.1.1 only enforces its membership content restrictions on…

The Subscriptions for WooCommerce WordPress plugin before 2.1.1 only enforces its membership content restrictions on standard front-end page views, allowing unauthenticated users to read the full contents of restricted posts and pages through other routes that render the same content...

CVE-2026-88981: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the frontend artifact download path for source=s3 or source=minio accepts providerInfo.Params.endpoint, and the archived pod-log path accepts S3-compatible endpoint metadata from...

jsprime

Authors Nishant Das Patnaik nishant.dp@ Sarathi Sabyasachi Sahoo sarathisahoo@ Introduction Today, more and more developers are switching to JavaScript as their first choice of language. The reason is simple JavaScript has now been started to be accepted as the mainstream programming for...

Exploit for Unchecked Return Value in Google Brotli

node2shell-check A read-only, zero-dependency POSIX sh scan...

SkillSpector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks...

Fortinet FortiWeb Admin Account Creation (CVE-2025-64446)

CVE-2025-64446 path traversal to cgi-bin/fwbcgi allows unauthenticated creation of a local FortiWeb administrator account no shell session — chain to exploits/linux/http/fortinetfortiwebrce for RCE. !/usr/bin/env python3 -- coding: utf-8 -- """FortiWeb auth bypass — create local admin account...

Check Point Quantum Gateway File Read (CVE-2024-24919)

CVE-2024-24919 path traversal on POST /clients/MyCRL allows unauthenticated read of local files e.g. /etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """Check Point Quantum Gateway arbitrary file read CVE-2024-24919.""" from future import annotations import re from kittysploit import from...

WD My Cloud Auth Bypass RCE (CVE-2018-17153)

Chains CVE-2018-17153 admin session creation networkmgr.cgi cgigetipv6 flag=1 with authenticated command injection in googleanalytics.php cloud-device-num argument. Affects My Cloud before firmware 2.30.196. !/usr/bin/env python3 -- coding: utf-8 -- """Western Digital My Cloud auth bypass + comma...

Gladinet CentreStack/Triofox - LFI Detection (CVE-2025-11371)

Detects CVE-2025-11371 unauthenticated file read on /storage/t.dn via the s= parameter Gladinet UploadDownloadProxy TempDownload handler. !/usr/bin/env python3 -- coding: utf-8 -- """Gladinet CentreStack/Triofox temp download LFI CVE-2025-11371.""" import re import urllib.parse from kittysploit...