32949 matches found
CVE-2026-49864 wetty vulnerable to DOM XSS via file-download filename
wetty provides terminal access in browser over http/https. Prior to version 3.0.4, the wetty client decodes a base64 filename from the file-download escape sequence and interpolates it raw into a Toastify HTML string escapeMarkup: false. Any output the victim renders - a cat'd file, a tailed log,...
MAL-2026-13940 Malicious code in @opezneppelin/contracts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe04ec28ed56cb0a253131129df8078d425f8a0c579c439ced9c75b6977a6ab @opezneppelin/contracts is a typosquat of @openzeppelin/contracts. Its postinstall lifecycle script scripts/postinstall.js hex-escapes all module...
EUVD-2026-58126
SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata...
WeKan Trello Live Import attachment download lacks SSRF validation, allowing readable-response SSRF (LiveBleed)
WeKan Trello Live Import Attachment Download Lacks SSRF Validation, Allowing Readable-Response SSRF LiveBleed Vulnerability Overview WeKan supports two ways to import Trello boards: offline import and Live Import online API key mode. Download URLs on the offline import path all go through unified...
CVE-2026-65582
Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...
CVE-2026-61980
Unauthenticated Arbitrary File Download in OMGF Pro = 5.2.7 versions...
CVE-2026-65582
Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...
CVE-2026-65582 WordPress AI Hub theme <= 1.3.10 - Arbitrary File Download vulnerability
Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...
CVE-2026-65582
CVE-2026-65582 affects the WordPress AI Hub theme (versions <= 1.3.10). The available documents describe a Subscriber Arbitrary File Download vulnerability in AI Hub
CVE-2026-65582 WordPress AI Hub theme <= 1.3.10 - Arbitrary File Download vulnerability
Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...
EUVD-2026-57980
Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...
CVE-2026-61980
Unauthenticated Arbitrary File Download in OMGF Pro = 5.2.7 versions...
CVE-2026-61980 WordPress OMGF Pro plugin <= 5.2.7 - Arbitrary File Download vulnerability
Unauthenticated Arbitrary File Download in OMGF Pro = 5.2.7 versions...
CVE-2026-61980
CVE-2026-61980 describes an Unauthenticated Arbitrary File Download in OMGF Pro plugin for WordPress, version
EUVD-2026-57977
Unauthenticated Arbitrary File Download in OMGF Pro = 5.2.7 versions...
CVE-2026-61980 WordPress OMGF Pro plugin <= 5.2.7 - Arbitrary File Download vulnerability
Unauthenticated Arbitrary File Download in OMGF Pro = 5.2.7 versions...
WordPress OMGF Pro plugin <= 5.2.7 - Arbitrary File Download vulnerability
Arbitrary File Download vulnerability discovered by daroo in WordPress Plugin OMGF Pro versions = 5.2.7...
CVE-2026-3835
The Prevent Direct Access – Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access of protected files due to insufficient token validation in the getadvancefilebyurl method in all versions up to, and including, 2.8.8.8 The method uses a SQL LIKE operator for token looku...
