EUVD-2026-94943

Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through 4.5.5...

CVE-2026-105886 WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through 4.5.5...

WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin Ultimate Post Kit versions = 4.5.5...

tcconfig

.. contents:: tcconfig :backlinks: top :depth: 2 Summary tcconfig is a tc command wrapper. Make it easy to set up traffic control of network bandwidth/latency/packet-loss/packet-corruption/etc. to a network-interface/Docker-containerveth. |PyPI pkg ver| |Supported Python ver| |CI status| |CodeQL|...

tcconfig

.. contents:: tcconfig :backlinks: top :depth: 2 ملخص tcconfig هو غلاف لأمر tc. يسهل إعداد التحكم في حركة مرور الشبكة عرض النطاق الترددي / زمن الوصول / فقدان الحزم / تلف الحزم / إلخ لواجهة الشبكة / حاوية Docker veth. |PyPI pkg ver| |Supported Python ver| |CI status| |CodeQL| .. |PyPI pkg ver|...

CVE-2026-105878

The YITH WooCommerce Product Bundles WordPress plugin (versions

EUVD-2026-94931

Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Bundles: from n/a through 2.29.0...

CVE-2026-105878 WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Bundles: from n/a through 2.29.0...

WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin YITH WooCommerce Product Bundles versions = 2.29.0...

EUVD-2026-94930

Authorization Bypass Through User-Controlled Key vulnerability in Groundhogg HollerBox holler-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HollerBox: from n/a through 2.3.14...

EUVD-2026-94928

Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through 4.18.0...

CVE-2026-106600

The GiveWP WordPress plugin (versions 4.18.0 and below ) is susceptible to a Broken Access Control vulnerability (CWE-862). The root cause is Missing Authorization , which allows for the exploitation of incorrectly configured access control security levels. While the specific technical impact of ...

CVE-2026-106600 WordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through 4.18.0...

WordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Enis Getmez in WordPress Plugin GiveWP versions = 4.18.0...

CVE-2026-92555

Insertion of sensitive information into sent data vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. AKINSOFT WOLVOX Control Panel allows Pull Data from System Resources. This issue affects AKINSOFT WOLVOX Control Panel: from 26.02.25 before 26.02.26...

CVE-2026-107578

Improper link resolution and external control of file paths in the administrative command-line operations of hMailServer.exe in Progressive Robot hMailServer 6.3.4 and 6.3.5 allow a local attacker who already runs code as the low-privilege service account to escalate privilege. On Windows,...

RedbloodC2

الإصدار العام من Redblood C2 This is a simple command and control server to handle sessions and your victims التثبيت $ git clone https://github.com/kira2040k/RedbloodC2.git $ cd RedbloodC2 $ npm install $ node server.js الاستخدام After install node.js and and all modules from npm execute: node...

CVE-2023-43318

CVE-2023-43318 JetStream Smart Switch - TL-SG2210P v5.0/ التحكم في الوصول غير السليم / CVE-2023-43318 + الإسناد: شهنواز شيخ، باحث أمني في Cybergate Defense LLC + تويتر البائع: Tp-Link http://tp-link.com المنتج: JetStream Smart Switch - TL-SG2210P نوع الثغرة: التحكم في الوصول غير الصحيح DOS قاعدة...

CVE-2025-46204

الوصف Unifiedtransform v2.0 يعاني من ثغرة في التحكم غير الصحيح في الوصول. يمكن لأي مستخدم طلاب ومدرسين الوصول إلى تفاصيل المقرر الدراسي وتعديلها عبر نقاط النهاية /course/edit/id. هذه الوظيفة مخصصة حصريًا للاستخدام الإداري. استغلال هذه الثغرة يسمح بالتلاعب غير المصرح به بأسماء المقررات وفئاتها، مم...

CVE-2025-46203

الوصف Unifiedtransform v2.0 معرض لضعف التحكم في الوصول غير الصحيح. يمكن لأي مستخدم طلاب ومعلمين الوصول إلى سجلات الطلاب وتعديلها عبر نقاط النهاية /students/edit/id. هذه الوظيفة مخصصة حصريًا للاستخدام الإداري. استغلال هذا الضعف يمكن أن يؤدي إلى معالجة غير مصرح بها للبيانات وتصعيد الامتيازات. البائ...