CVE-2026-62063

Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1...

EUVD-2026-90797

Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.0...

Ivanti-CVE-2025-0282

Ivanti-CVE-2025-0282 Ivanti Remote code execution Thanks @Abdualhadi khalifa...

Exploit for Insufficient Granularity of Access Control in Microsoft

BlueHammer Defender Compromise-Audit A defensive Metasplo...

METIS

METIS - Marco Modular de Explotación e Inteligencia de Amenazas ███╗ ███╗███████╗████████╗██╗███████╗ ████╗ ████║██╔════╝╚══██╔══╝██║██╔════╝ ██╔████╔██║█████╗ ██║ ██║███████╗ ██║╚██╔╝██║██╔══╝ ██║ ██║╚════██║ ██║ ╚═╝ ██║███████╗ ██║ ██║███████║ ╚═╝ ╚═╝╚══════╝ ╚═╝ ╚═╝╚══════╝ Un marco de...

CVE-2026-103534 David-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access control

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

CVE-2026-103534: Improper Access Control

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

Linux Distros Unpatched Vulnerability : CVE-2026-102804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in Nothings stb up to 2c980bb59875b0d32144a71867fbdebb2f77cd20. The impacted element is the function hexwaveinit in the library...

PT-2026-104020

Name of the Vulnerable Software and Affected Versions EasyIO FS32 versions prior to 3.0b63 Description Johnson Controls EasyIO FS32 contains hard-coded credentials, which allows an attacker to exploit these default credentials to gain unauthorized access to the system. Recommendations Update Easy...

CVE-2026-27874: Use of Hard-coded Credentials

: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-103232

A SQL injection vulnerability exists in the AdithyaYelloju Restaurant-Management-System (up to version 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c ). The flaw is located in the mysqli_query function within the admin/table_booking.php file, where manipulation of the Name argument allows for unauthori...

DEBIAN-CVE-2026-103226

A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function type1callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicl...

CVE-2026-103226

A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function type1callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicl...

EUVD-2026-89962

A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function type1callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicl...

METIS

METIS - Modular Exploitation & Threat Intelligence Framework...

CVE-2026-102912 SourceCodester Online Leave Management System page reports sql injection

A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument datestart/dateend leads to sql injection. Remote exploitation of the attack is possible. The exploit i...

CVE-2026-102847 gedelumbung HospitalManagement Guest Book buku_tamu.php kirim cross site scripting

A flaw has been found in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function kirim of the file application/modules/web/controllers/bukutamu.php of the component Guest Book. This manipulation of the argument nama/email/pesan causes...

CVE-2026-102847 gedelumbung HospitalManagement Guest Book buku_tamu.php kirim cross site scripting

A flaw has been found in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function kirim of the file application/modules/web/controllers/bukutamu.php of the component Guest Book. This manipulation of the argument nama/email/pesan causes...

CVE-2026-102847

The gedelumbung HospitalManagement software is vulnerable to Cross-Site Scripting (XSS) due to a flaw in the Guest Book component. Specifically, the kirim function within the file application/modules/web/controllers/buku_tamu.php fails to properly handle the nama , email , and pesan arguments. Th...

CVE-2026-102804 Nothings stb stb_hexwave.h hexwave_init integer overflow

A vulnerability was detected in Nothings stb up to 2c980bb59875b0d32144a71867fbdebb2f77cd20. The impacted element is the function hexwaveinit in the library stbhexwave.h. Performing a manipulation of the argument width/oversample results in integer overflow. Remote exploitation of the attack is...