WordPress Depicter — Popup & Slider Builder plugin 4.0.5-4.8.1 - Editor+ Arbitrary File Upload vulnerability

Editor+ Arbitrary File Upload vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Depicter Slider versions 4.0.5-4.8.1...

CVE-2026-98777

A flaw was found in the Linux kernel's Android Binder inter-process communication IPC driver. When an asynchronous transaction supersedes an earlier pending transaction in a frozen process, the kernel frees the outdated transaction without releasing associated file descriptor references. A local...

EUVD-2025-211182

The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. Access is granted based solely on the client's source IP address. An attacker able to spoof an allowed IP address, can bypass this check and gain the ability to edit files on the affected system. The...

CVE-2025-30051

The CGM CLININET application contains a vulnerability where the SysIO.pl configuration file is assigned insecure file permissions. This allows any local account to read the file, which stores sensitive production database login and password information along with RabbitMQ broker credentials . The...

WordPress Music Store – WordPress eCommerce plugin <= 1.4.7 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability discovered by Quentin VILLAIN in WordPress Plugin Music Store versions = 1.4.7...

CVE-2026-113472

The Depicter — Popup & Slider Builder WordPress plugin (versions 4.0.5-4.8.1 ) contains an arbitrary file upload vulnerability in the editor media-upload endpoint. The root cause is insufficient validation, as the plugin only checks the client-supplied MIME type and a case-sensitive block of the ...

CVE-2026-113472 Depicter 4.0.5 - 4.8.1 - Editor+ Arbitrary File Upload via Media Upload

The Depicter — Popup & Slider Builder WordPress plugin before 4.8.2 does not properly validate uploaded files in its editor media-upload endpoint, checking only the client-supplied MIME type and a case-sensitive block of the .php extension, which allows users with the Editor role and above to...

CVE-2026-86018

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated users to bypass the configured maximum attachment file size when using the server-side “Download external file” attachment feature. When server-side attachment...

CVE-2026-86019

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated API users to bypass the configured maximum attachment file size by uploading attachments through the API using base64-encoded file data. The application enforces...

CVE-2026-59188

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.3, Part-DB-server sanitizes SVG files based solely on the user-controlled filename extension rather than actual file content type. An authenticated attacker can upload a malicious SVG with...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

CVE-2026-115497

The Music Store WordPress eCommerce plugin is vulnerable to Directory Traversal in all versions up to and including 1.4.7 . The flaw exists in the 'f' parameter , allowing unauthenticated attackers to read arbitrary files on the server, potentially exposing sensitive information. Successful explo...

CVE-2026-115497 Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter

The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.4.7 via the 'f' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contai...

CVE-2021-22205

CVE-2021-22205 GitLab CE/EE Preauth RCE using ExifTool This project is for learning only, if someone's rights have been violated, please contact me to remove the project, and the lastDO NOT USE IT ILLEGALLY If you have any illegal behavior in the process of using this tool, you will bear all the...

gps-sdr-sim

GPS-SDR-SIM GPS-SDR-SIM generates GPS baseband signal data streams, which can be converted to RF using software-defined radio SDR platforms, such as ADALM-Pluto, bladeRF, HackRF, and USRP. Windows build instructions 1. Start Visual Studio. 2. Create an empty project for a console application. 3. ...

EUVD-2026-108579

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated API users to bypass the configured maximum attachment file size by uploading attachments through the API using base64-encoded file data. The application enforces...

EUVD-2026-108578

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated users to bypass the configured maximum attachment file size when using the server-side “Download external file” attachment feature. When server-side attachment...

EUVD-2026-108577

Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.3, Part-DB-server sanitizes SVG files based solely on the user-controlled filename extension rather than actual file content type. An authenticated attacker can upload a malicious SVG with...

kemon

Kemon An Open Source Pre and Post Callback-based Framework for macOS Kernel Monitoring. Breaking News - 08/28/2019 macOS Catalina 10.15 Beta 7 Release Notes https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes Endpoint Security The kauth API has been...

keyfinder

Overview Installation Keyfinder Usage Key Parsing Simple Example Verbose Output APK Parsing Simple APK Example crt.sh Checking Key File Usage Overview CERT Keyfinder is a utility for finding and analyzing key files on a filesystem as well as contained within Android APK files. CERT Keyfinder...