55807 matches found
WordPress plugin Tutor LMS has a vulnerability related to information leakage.
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PT-2026-5899
Name of the Vulnerable Software and Affected Versions Apple Vision Pro affected versions not specified Description The issue appears to be a security flaw in vision-related technology, potentially affecting Apple Vision Pro. While no public jailbreak currently exists for iOS 26.0 as of February...
PT-2026-6042
Name of the Vulnerable Software and Affected Versions Tutor LMS versions prior to 3.9.6 Description The Tutor LMS plugin for WordPress has a flaw where sensitive coupon details can be accessed without proper authorization. The issue stems from insufficient validation within the ajax coupon detail...
Linux Distros Unpatched Vulnerability : CVE-2026-0865
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - User-controlled header names and values containing newlines can allow injecting HTTP headers. CVE-2026-0865 Note that Nessus relies on the presence of the packa...
WordPress Tutor LMS plugin <= 3.9.5 - Authenticated (Subscriber+) Information Disclosure in Coupon Details via 'tutor_coupon_details' AJAX Action vulnerability
Authenticated Subscriber+ Information Disclosure in Coupon Details via 'tutorcoupondetails' AJAX Action vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin Tutor LMS versions = 3.9.5...
CVE-2026-25488
creationtimestamp| type| source ---|---|--- 2026-02-02 20:58:58+00:00| published-proof-of-concept| https://github.com/craftcms/commerce/security/advisories/GHSA-p6w8-q63m-72c8...
Exploit for CVE-2025-12197
Security Research This repository contains my security resea...
CVE-2020-37048 Iskysoft Application Framework Service 2.4.3.241 - 'IsAppService' Unquoted Service Path
Iskysoft Application Framework Service 2.4.3.241 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that would ...
CGA-8M3F-9Q74-QXC5
Bulletin has no description...
CGA-69C7-VMXF-Q3VC
Bulletin has no description...
CVE-2025-9226
Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affected by a stored cross-site scripting vulnerability in the Subnet Details...
CGA-2G5Q-9XG9-25WM
Bulletin has no description...
CGA-8JXR-J56M-P89W
Bulletin has no description...
CGA-4MFX-7RPR-GWJ8
Bulletin has no description...
CGA-6XV2-GFQJ-Q663
Bulletin has no description...
CGA-52GJ-4FFH-PGXF
Bulletin has no description...
CGA-4CX7-FFJ7-7QX4
Bulletin has no description...
CGA-3MFF-FVF7-2HVJ
Bulletin has no description...