CVE-2026-75793

The SureCart WordPress plugin before 4.7.0 does not consult the site's user registration setting before creating WordPress accounts, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled...

EUVD-2026-72063

The SureCart WordPress plugin before 4.7.0 does not consult the site's user registration setting before creating WordPress accounts, allowing unauthenticated users to create an account and receive a logged-in session even when registration is disabled...

CVE-2026-85038 B2BKing < 5.2.40 - Unauthenticated B2B Group Assignment and Approval Bypass via Registration Role Selection

The B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More WordPress plugin before 5.2.40 does not verify that a role selected during registration is one actually offered on the registration form, allowing unauthenticated users to assign themselves to...

CVE-2026-75793

The SureCart WordPress plugin versions prior to 4.7.0 fail to check the site's user registration setting before creating WordPress accounts. This allows unauthenticated users to register and receive a logged-in session even when registration is disabled on the site, effectively bypassing a common...

EUVD-2026-72066

The B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More WordPress plugin before 5.2.40 does not verify that a role selected during registration is one actually offered on the registration form, allowing unauthenticated users to assign themselves to...

CVE-2026-18480 SureCart < 4.6.3 - Subscriber+ Administrator Account Takeover

The SureCart WordPress plugin before 4.6.3 does not ensure that the account affected by a customer update is the same account its permission check authorised, allowing users with a subscriber-level account to change another user's email address, including an administrator's, and take over that...

EUVD-2026-72062

The SureCart WordPress plugin before 4.6.3 does not ensure that the account affected by a customer update is the same account its permission check authorised, allowing users with a subscriber-level account to change another user's email address, including an administrator's, and take over that...

EUVD-2026-72043

The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the accesstoken parameter in all versions up to, and including, 1.1.4. This is due to the authenticateuser function's Facebook authenticator resolving third-party identity by forwarding the...

messari-crack

Messari MSR Crack 2026 Messari プレミアムをアンロック | リサーチハブ & インテルデータフィードへのアクセス 説明 Messari MSR Crack は、Messari のプレミアムリサーチハブとインテルデータフィードへのアクセスをアンロックするために設計されたプロフェッショナルなクラッキングユーティリティです。機関投資家向けの暗号通貨リサーチ、市場インテリジェンスレポート、リアルタイムデータフィードへの無制限アクセスを提供します。 主な利点 ✅ リサーチハブのアンロック — Messari のプレミアムリサーチライブラリへの完全アクセス ✅...

Linux Distros Unpatched Vulnerability : CVE-2026-57166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet...

PT-2026-86470

Name of the Vulnerable Software and Affected Versions N-central versions prior to 2026.3.1.14 Description N-central contains a flaw that allows for pre-authentication remote code execution, enabling an attacker to execute arbitrary code on the system without requiring valid credentials...

PT-2026-86529

OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider URLs via the x-base-url header or baseUrl parameter to access sensitive cloud...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053429)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053429 advisory. In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays The frequency table arrays are...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053437)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053437 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of ST...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073360 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in ucsiconnectorchange The connector number in a UCSI...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053197)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053197 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in ip6makeskb As it was done in commit fc1092f51567 ipv4:...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022289 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053261)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053261 advisory. In the Linux kernel, the following vulnerability has been resolved: mailbox: Prevent out-of-bounds access in fwmboxindexxlate Although it is guided that mbox-cells...

PT-2026-86575

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.5 Description Improper access controls exist in the exportXls function within the AiragModelController.java file. A remote attacker can exploit this by manipulating the credential argument to gain unauthorized...

PT-2026-86533

Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description An authorization bypass exists in the UiBeta theme collection view at the presentation layer. The view template app/View/Themed/UiBeta/Collections/view.ctp performs a secondary query of member...