EUVD-2026-96787

The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and escape a parameter before using it in SQL statements, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database...

EUVD-2026-96786

The Datalist it WordPress plugin through 0.0.3 does not sanitize and escape several request parameters before using them to build a SQL query, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database...

EUVD-2026-96782

The WpCues Basic Quiz WordPress plugin through 1.6.5 does not properly sanitise and escape values before using them in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database...

EUVD-2026-96781

The Llavero.io WordPress plugin through 0.1.4 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database...

CVE-2026-89214 WpCues Basic Quiz <= 1.6.5 - Unauthenticated SQLi via Quiz Result Submission

The WpCues Basic Quiz WordPress plugin through 1.6.5 does not properly sanitise and escape values before using them in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database...

CVE-2026-89285 Datalist it <= 0.0.3 - Unauthenticated SQLi via dli_fronted_action

The Datalist it WordPress plugin through 0.0.3 does not sanitize and escape several request parameters before using them to build a SQL query, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database...

CVE-2026-89213 Llavero.io <= 0.1.4 - Unauthenticated Blind SQLi via 'cill_login' Parameter

The Llavero.io WordPress plugin through 0.1.4 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database...

CVE-2026-89232

The Recordbrowser WordPress plugin version 1.1.7 and below is vulnerable to an unauthenticated SQL injection vulnerability. The root cause is the failure to properly sanitize and escape the 'recordid' parameter before including it in a SQL query. This allows an unauthenticated attacker to append ...

CVE-2026-89285

The Datalist it WordPress plugin, in versions up to and including 0.0.3 , is vulnerable to SQL injection due to a failure to sanitize and escape several request parameters before building a SQL query. This flaw allows unauthenticated attackers to perform SQL injection and read arbitrary data from...

CVE-2026-89214

The WpCues Basic Quiz WordPress plugin, in versions up to and including 1.6.5 , contains a vulnerability where it fails to properly sanitize and escape values before incorporating them into a SQL statement . This flaw allows unauthenticated attackers to perform SQL injection attacks, potentially ...

EUVD-2026-96780

The Site Setup Wizard WordPress plugin through 1.5.8 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database...

CVE-2026-89195 Site Setup Wizard <= 1.5.8 - Unauthenticated SQLi via ssw_check_admin_email_exists

The Site Setup Wizard WordPress plugin through 1.5.8 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database...

CVE-2026-89195

The Site Setup Wizard WordPress plugin, in versions up to and including 1.5.8 , is vulnerable to an unauthenticated SQL injection attack. The root cause is the improper sanitization and escaping of a parameter before its use in a SQL statement, specifically within the ssw_check_admin_email_exists...

EUVD-2026-96774

The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores gallery data, and does not sanitise or escape that data before outputting it, allowing unauthenticated users to store arbitrary web scripts that execute when an administrator...

attack-stix-data

Dati STIX ATT&CK® MITRE ATT&CK è una base di conoscenza accessibile a livello globale di tattiche e tecniche degli avversari basata su osservazioni del mondo reale. La base di conoscenza ATT&CK è utilizzata come fondamento per lo sviluppo di modelli di minaccia e metodologie specifici nel settore...

Chaya

Chaya Derecho a la Privacidad Chaya protege tu privacidad mediante esteganografía, criptografía y compresión. Cifra eficazmente tus cargas útiles usando criptografía AES-256-GCM , las incrusta usando la técnica de esteganografía LSB-LPS en imágenes y las comprime usando FLIF para evadir la...

refinery

Binary Refinery docs tests codecov pypi High Octane Triage Analysis || || || || || | / / / \ || ==||=====|| | / |/ \ /==| / \ ===| '======|| | \ | | \ | \ /| | || || /||/ / | | | || =========''====/=========/ /==||=====||======' \ / / Il Binary Refinery™ è una raccolta di script Python che...

CVE-2021-40375

CVE-2021-40375 - Broken Access Control in OpenEyes 3.5.1 Description An improper access control vulnerability was identified in OpenEyes 3.5.1, developed by the Apperta Foundation. A low privileged user could load a patient's profile in their browser and access sensitive information without the...

leakdb

LeakDB LeakDB es un conjunto de herramientas diseñado para permitir a las organizaciones construir y desplegar su propio servicio interno de texto plano plaintext similar a "Have I Been Pwned". El conjunto de herramientas LeakDB puede normalizar, deduplicar, indexar, ordenar y buscar conjuntos de...

tcpdump

TCPDUMP 4.x.y di The Tcpdump Group Per segnalare un problema di sicurezza, inviare un'e-mail a [email protected]. Per segnalare bug e altri problemi, contribuire con patch, richiedere una funzionalità, fornire feedback generico ecc., consultare le linee guida per contribuire nella radice...