CVE-2025-10915 Dreamer Blog <= 1.2 - Subscriber+ Arbitrary Plugin Installation

The Dreamer Blog WordPress theme through 1.2 is vulnerable to arbitrary installations due to a missing capability check...

CVE-2025-10915 Dreamer Blog <= 1.2 - Subscriber+ Arbitrary Plugin Installation

The Dreamer Blog WordPress theme through 1.2 is vulnerable to arbitrary installations due to a missing capability check...

CVE-2025-10915

The Dreamer Blog WordPress theme (versions

CVE-2026-21221: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...

CVE-2026-20835: Out-of-bounds Read

Out-of-bounds read in Capability Access Management Service camsvc allows an authorized attacker to disclose information locally...

CVE-2026-20851: Out-of-bounds Read

Out-of-bounds read in Capability Access Management Service camsvc allows an unauthorized attacker to disclose information locally...

PT-2026-2349

The Dreamer Blog WordPress theme through 1.2 is vulnerable to arbitrary installations due to a missing capability check...

WordPress plugin Dreamer Blog 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

PT-2026-2665

Name of the Vulnerable Software and Affected Versions Capability Access Management Service camsvc affected versions not specified Description A flaw exists that allows for privilege escalation. Concurrent execution using a shared resource with improper synchronization, specifically a race...

NSecsoft NSecKrnl 安全漏洞

NSecsoft NSecKrnl is the underlying core module of a terminal protection software from China Anzai NSecsoft. A security vulnerability exists in NSecsoft NSecKrnl, which originates from a local attacker being able to terminate another user's process via a specially crafted IOCTL request...

PT-2026-2685

Name of the Vulnerable Software and Affected Versions Capability Access Management Service camsvc affected versions not specified Description An out-of-bounds read exists in the Capability Access Management Service camsvc. A local attacker who is authorized can exploit this to disclose informatio...

PT-2026-2355

The WP Duplicate Page plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'duplicateBulkHandle' and 'duplicateBulkHandleHPOS' functions in all versions up to, and including, 1.8. This makes it possible for authenticated attackers, with...

CVE-2025-14001: Missing Authorization

The WP Duplicate Page plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'duplicateBulkHandle' and 'duplicateBulkHandleHPOS' functions in all versions up to, and including, 1.8. This makes it possible for authenticated attackers, with...

CVE-2026-20815: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...

PT-2026-2680

Name of the Vulnerable Software and Affected Versions Capability Access Management Service camsvc affected versions not specified Description A race condition exists within the Capability Access Management Service camsvc due to concurrent execution using a shared resource with improper...

KLA90840 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information, cause denial of service, spoof user interface. Below is a complete list of...

PT-2026-2763

Name of the Vulnerable Software and Affected Versions Capability Access Management Service camsvc affected versions not specified Description A race condition exists due to concurrent execution using a shared resource with improper synchronization within the Capability Access Management Service...

CVE-2025-10915: Undefined Security Weakness

The Dreamer Blog WordPress theme through 1.2 is vulnerable to arbitrary installations due to a missing capability check...

CVE-2026-20830: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...

The vulnerability of the MongoDB database management system’s server allows a hacker to cause a service failure.

The vulnerability of the MongoDB database management system server is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to cause service interruptions...