WordPress NC Wishlist for Woocommerce Plugin <= 1.0.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin NC Wishlist for Woocommerce versions = 1.0.1...

WordPress Conult theme < 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by justakazh Patchstack Alliance in WordPress Theme Conult - Consulting Business WordPress Themes versions 1.2.9...

WordPress Boliin theme < 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by justakazh Patchstack Alliance in WordPress Theme Boliin - Resort & Hotel Booking WordPress Theme versions 1.1.4...

WordPress Welowe theme < 1.0.9 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by justakazh Patchstack Alliance in WordPress Theme welowe versions 1.0.9...

WordPress WPLMS plugin < 1.9.9.5.3 - Subscriber+ SQL Injection vulnerability

Subscriber+ SQL Injection vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin WPLMS versions 1.9.9.5.3...

WordPress Exam Matrix plugin <= 1.5 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by ghsinfosec Patchstack Alliance in WordPress Plugin Exam Matrix versions = 1.5...

WordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin PDF Generator Addon for Elementor Page Builder versions = 1.7.4...

AZL-51014 CVE-2024-47682 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix off-by-one error in sdreadblockcharacteristics Ff the device returns page 0xb1 with length 8 happens with qemu v2.x, for example, sdreadblockcharacteristics may attempt an out-of-bounds memory access when accessing...

WordPress Ultimate Blocks plugin < 3.2.2 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Ultimate Blocks versions 3.2.2...

AZL-48721 CVE-2024-45616 affecting package opensc for versions less than 0.26.1-1

A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. The following problems were caused by insufficient control of the response AP...

WordPress UsersWP plugin < 1.2.12 - Users Information Disclosure vulnerability

Users Information Disclosure vulnerability discovered by Majdeddine Ben Hadj Brahim in WordPress Plugin UsersWP versions 1.2.12...

CVE-2018-7159 affecting package rubygem-http_parser for versions less than 0.8.0-1

CVE-2018-7159 affecting package rubygem-httpparser for versions less than 0.8.0-1. A patched version of the package is available...

CVE-2026-25679 affecting package golang for versions less than 1.2.58-1

CVE-2026-25679 affecting package golang for versions less than 1.2.58-1. A patched version of the package is available...

CVE-2025-11065 affecting package packer for versions less than 1.9.5-18

CVE-2025-11065 affecting package packer for versions less than 1.9.5-18. A patched version of the package is available...

AZL-43377 CVE-2024-6655 affecting package gtk3 for versions less than 3.24.28-10

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory...

WordPress Index WP MySQL For Speed plugin < 1.4.18 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Guido Iván García Duva in WordPress Plugin Index WP MySQL For Speed versions 1.4.18...

CVE-2024-37829

An issue in Outline = v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link...

PT-2024-26512 · Unknown · Iceice666 Resourcepack Server

Name of the Vulnerable Software and Affected Versions: iceice666 ResourcePack Server versions prior to 1.0.8 Description: A Directory Traversal issue allows a remote attacker to disclose files on the server. The issue is related to the setPath in ResourcePackFileServer.kt. Recommendations: For...

Kiuwan SAST Cross-Site Scripting Vulnerability

Kiuwan is a powerful end-to-end application security platform. A cross-site scripting vulnerability exists in Kiuwan SAST versions prior to 2.8.2402.3, which stems from an unauthenticated Reflective Cross-Site Scripting XSS attack that can be executed on the login page...

AZL-42540 CVE-2024-3049 affecting package booth for versions less than 1.2-1

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcrymdgetalgodlen, it may allow an invalid HMAC to be accepted by the Booth server...