52047 matches found
CVE-2016-20075
CVE-2016-20075 affects WordPress Ultimate Product Catalog 3.8.6. The vulnerability is an arbitrary file upload via the custom fields feature, exploitable by authenticated users with contributor, editor, author, or administrator roles. By uploading malicious files (e.g., PHP shells) through the Pr...
CVE-2016-20073 Answer My Question 1.3 Plugin WordPress SQL Injection via modal.php
Answer My Question 1.3 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' POST parameter. Attackers can submit crafted SQL statements to the modal.php endpoint to extract...
CVE-2016-20071 WordPress 404 Redirection Manager Plugin 1.0 SQL Injection
The 404 Redirection Manager plugin version 1.0 for WordPress contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through unsanitized user input. Attackers can craft GET requests with SQL injection payloa...
CVE-2016-20071 WordPress 404 Redirection Manager Plugin 1.0 SQL Injection
The 404 Redirection Manager plugin version 1.0 for WordPress contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through unsanitized user input. Attackers can craft GET requests with SQL injection payloa...
CVE-2016-20069 WordPress Booking Calendar Contact Form 1.0.23 SQL Injection
WordPress Booking Calendar Contact Form 1.0.23 contains an unauthenticated blind SQL injection vulnerability in the shortcode function that fails to sanitize the calendar parameter before using it in database queries. Attackers can inject SQL commands through the calendar shortcode parameter to...
China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade
Instead of hiding on the laptops and servers defenders watch most closely, a China-nexus group spent close to a decade hidden inside the Linux login system itself. Sygnia, which tracks the group as Velvet Ant , says it backdoored the PAM and OpenSSH components that decide who is allowed to sign i...
EUVD-2025-210109
Authentication bypass by primary weakness vulnerability in ABB Freelance. This issue affects Freelance: through 2013, 2013 SP1, 2016, 2016 SP1, 2019, 2019 SP1, 2019 SP1 FP1, 2024...
2026-06 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5094122)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2026-06 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5094122)
2026-06 Cumulative Update for Windows Server 2016 for x64-based Systems KB5094122...
CVE-2016-20063
creationtimestamp| type| source ---|---|--- 2026-06-09 14:41:59+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnugklqaj62a...
CVE-2016-20062
creationtimestamp| type| source ---|---|--- 2026-06-09 14:40:40+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mnugia7hyk2i 2026-06-09 15:41:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnujvkabkl24 2026-06-10 11:39:39+00:00| seen|...
Description of the security update for SharePoint Server 2016 Language Pack: June 9, 2026 (KB5002881)
None None...
Description of the security update for Word 2016: June 9, 2026 (KB5002879)
None None...
Description of the security update for Office 2016: June 9, 2026 (KB5002878)
None None...
Description of the security update for Excel 2016: June 9, 2026 (KB5002877)
None None...
June 9, 2026âKB5094122 (OS Build 14393.9234)
None None...
Description of the security update for Office 2016: June 9, 2026 (KB5002852)
None None...
CVE-2016-20063
Single Personal Message 1.0.3 contains an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries by injecting malicious code through the message parameter. Attackers can access the admin interface and supply crafted SQL statements in the message parameter to...
CVE-2016-20062
Simply Poll 1.4.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the 'pollid' POST parameter. Attackers can send requests to the admin-ajax.php endpoint with the 'spAjaxResults' actio...