CVE-2026-3844

CVE-2026-3844 Breeze Cache ≤ 2.4.4 - رفع ملفات تعسفي غير مصادق عليه ⚠️ إخلاء مسؤولية root@kitploit: هذه الأداة مقدمة لأغراض تعليمية وبحوث أمنية فقط. الوصول غير المصرح به إلى أنظمة الكمبيوتر غير قانوني. استخدم هذه الأداة فقط على الأنظمة التي تملكها أو لديك إذن صريح لاختبارها. لا يتحمل المؤلف أي...

CVE-2017-14980

🐞 CVE-2017-14980: Sync Breeze Enterprise 10.0.28 - Stack-basierter Pufferüberlauf Stack-basierter Pufferüberlauf in Sync Breeze Enterprise 10.0.28, erreichbar über den /login-Handler, der zeigt, wie eine ungeprüfte Eingabelänge den Stapelspeicher beschädigen kann. 📑 Inhaltsverzeichnis Warum diese...

CVE-2018-6537.RCE

CVE-2018-6537 L'exploit prende di mira Sync Breeze in esecuzione su Windows 10 x86, build: 16299 , interessando la versione 10.4.18 , dove un attaccante non autenticato può effettuare un overflow SEH tramite una connessione TCP, causando l'esecuzione di codice remoto. Questo exploit presuppone ch...

CVE-2017-14980.RCE

CVE-2017-14980 L'exploit ha come bersaglio Sync Breeze Enterprise in esecuzione su Windows 10 x86, build: 16299 , colpendo la versione 10.0.28 , dove un attaccante non autenticato può eseguire un buffer overflow tramite il corpo di una richiesta HTTP , causando esecuzione di codice arbitrario...

CVE-2026-73356

Unauthenticated Arbitrary Content Deletion in Breeze = 2.5.12 versions...

EUVD-2026-60781

Unauthenticated Arbitrary Content Deletion in Breeze = 2.5.12 versions...

CVE-2026-73356 WordPress Breeze plugin <= 2.5.12 - Arbitrary Content Deletion vulnerability

Unauthenticated Arbitrary Content Deletion in Breeze = 2.5.12 versions...

CVE-2026-73356

Unauthenticated Arbitrary Content Deletion in Breeze = 2.5.12 versions...

CVE-2026-73356

The Breeze WordPress plugin (versions

WordPress Breeze plugin <= 2.5.12 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Asim Alshaya in WordPress Plugin Breeze versions = 2.5.12...

The vulnerability of the fetch_gravatar_from_remote() function in the Breeze Cache plugin of the WordPress content management system allows a hacker to execute arbitrary code.

The vulnerability of the fetchgravatarfromremote function in the Breeze Cache plugin of the WordPress content management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Exploit for CVE-2026-3844

text ╔═══════════════════════════════════════════════════════...

EUVD-2026-43283

The Breeze Cache WordPress plugin before 2.5.6 is vulnerable to unauthenticated Stored Cross-Site Scripting XSS due to a predictable replacement hash used during the HTML minification process and abusing a regular expression. This allows an attacker to inject arbitrary HTML attributes in the fina...

CVE-2026-10551

The Breeze Cache WordPress plugin before 2.5.6 is vulnerable to unauthenticated Stored Cross-Site Scripting XSS due to a predictable replacement hash used during the HTML minification process and abusing a regular expression. This allows an attacker to inject arbitrary HTML attributes in the fina...

CVE-2026-10551

The Breeze Cache WordPress plugin (before version 2.5.6) is vulnerable to unauthenticated Stored XSS due to a predictable replacement hash in the HTML minification process and a related regex misusage. An attacker can inject arbitrary HTML attributes into the final HTML by predicting the placehol...

CVE-2026-10551 Breeze Cache < 2.5.6 - Unauthenticated Stored XSS via Minify Library

The Breeze Cache WordPress plugin before 2.5.6 is vulnerable to unauthenticated Stored Cross-Site Scripting XSS due to a predictable replacement hash used during the HTML minification process and abusing a regular expression. This allows an attacker to inject arbitrary HTML attributes in the fina...

CVE-2026-10551

The Breeze Cache WordPress plugin before 2.5.6 is vulnerable to unauthenticated Stored Cross-Site Scripting XSS due to a predictable replacement hash used during the HTML minification process and abusing a regular expression. This allows an attacker to inject arbitrary HTML attributes in the fina...

MAL-2026-10008 Malicious code in breeze-feature-flag-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bc85f58d0fcdcfa75e143c0fb4e09095edf4d9fd3ac6d53576d58176beef49e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for CVE-2026-3844

CVE-2026-3844 – Breeze Cache WordPress Plugin Unauthenticated...

CVE-2026-2128

The Breeze plugin for WordPress is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in all versions up to, and including, 2.5.2 This is due to improper verification of the wordpressloggedin cookie in the inc/cache/execute-cache.php file when the "Cache Logged-in Users"...