CVE-2026-73621 GitPython before 3.1.56 Arbitrary File Truncation via Commit.count

GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count method, which forwards keyword arguments to 'git rev-list' without the checkunsafeoptions guard present in the sibling iteritems method. An attacker who can control options passed to Commit.count e.g., via an...

CVE-2026-65485

Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...

CVE-2026-65485

CVE-2026-65485 affects the WordPress plugin Content Control

EUVD-2026-48096

Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...

CVE-2026-65485

Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...

CVE-2026-65485 WordPress Content Control plugin <= 2.6.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...

CVE-2026-65485: Missing Authorization

Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...

PT-2026-63906

Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...

WordPress Content Control plugin <= 2.6.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Que Thanh Tuan in WordPress Plugin Content Control versions = 2.6.5...

CVE-2026-59930

A flaw was found in Mistune, a Python Markdown parser. The table of contents toc plugin and TableOfContents directive generate heading identifiers IDs as predictable values e.g., tocN without properly processing the heading text. This allows an attacker to control content with a colliding ID, whi...

Directory Traversal

Overview liquidjs is an A simple, expressive, safe and Shopify compatible template engine in pure JavaScript. Affected versions of this package are vulnerable to Directory Traversal via the Loader.candidates resolution when require.resolve is used as a fallback; an attacker can read arbitrary...

CVE-2018-1000604

A persisted cross-site scripting vulnerability exists in Jenkins Badge Plugin 1.4 and earlier in BadgeSummaryAction.java, HtmlBadgeAction.java that allows attackers able to control build badge content to define JavaScript that would be executed in another user's browser when that other user...

The vulnerability of the Bitrix24 business management service lies in the lack of measures taken to protect the website structure, allowing attackers to control the content of email messages.

The vulnerability of the Bitrix24 business management service is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to control the content of email messages remotely...

EUVD-2020-19501

Malware in sbrugna...

EUVD-2024-0652

Malicious code in bioql PyPI...

EUVD-2022-51850

Malicious code in bioql PyPI...

EUVD-2024-16408

Malicious code in bioql PyPI...

EUVD-2024-54000

Malicious code in bioql PyPI...

EUVD-2025-13823

Malicious code in bioql PyPI...

PT-2025-50949

Уязвимость сервиса для управления бизнесом Битрикс24 связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости, может позволить нарушителю, действующему удаленно, осуществлять контроль над содержимым электронных писем...