filebuster

Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...

Woo Inquiry <= 0.1 - SQL Injection

The Woo Inquiry plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 0.1 due to insufficient escaping on the user supplied parameter 'dbid' and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to...

ChangeDetection.io <= v0.50.33 - Stored XSS via Watch API

changedetection.io = 0.50.34 contains a stored cross site scripting caused by insufficient security checks in the Watch update API, letting attackers execute arbitrary JavaScript when users preview malicious links, exploit requires user interaction id: CVE-2025-62780 info: name: ChangeDetection.i...

ROOT-OS-UBUNTU-2404-CVE-2026-23005 CVE-2026-23005 in linux - Patched by Root

Root has patched CVE-2026-23005 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-21809 CVE-2025-21809 in linux - Patched by Root

Root has patched CVE-2025-21809 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

CVE-2026-106020

Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows Search Order Hijacking. This issue affects EasyIO Neo IO Manager and Tools Installer: 1.1.0.0...

EUVD-2026-118264

Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows Search Order Hijacking. This issue affects EasyIO Neo IO Manager and Tools Installer: 1.1.0.0...

CVE-2026-106020

Johnson Controls EasyIO Neo IO Manager and Tools Installer version 1.1.0.0 are affected by an Improper Neutralization of Input Used for LLM Prompting vulnerability (CWE-1427). This flaw allows for Search Order Hijacking . The vulnerability is associated with a CVSS 4.0 score of 8.6 (High) , where...

ROOT-OS-UBUNTU-2204-CVE-2026-31667 CVE-2026-31667 in linux - Patched by Root

Root has patched CVE-2026-31667 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-64331 CVE-2026-64331 in linux - Patched by Root

Root has patched CVE-2026-64331 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-53088 CVE-2026-53088 in linux - Patched by Root

Root has patched CVE-2026-53088 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

CVE-2026-106020: Johnson Controls EasyIO Neo IO Manager and Tools Installer: Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and…

Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows Search Order Hijacking. This issue affects EasyIO Neo IO Manager and Tools Installer: 1.1.0.0...

CVE-2026-99243

A flaw was found in the Linux kernel's iouring subsystem, which can lead to a Denial of Service DoS. Due to a missing memory barrier during asynchronous workqueue io-wq shutdown, a race condition can occur on systems with weakly ordered processor architectures. A local user can exploit this flaw...

SUSE CVE-2026-99255

In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: don't hide a link from cancellations A task that exits cancels its tracked requests and waits until they are gone. iouringcancelgeneric looks everywhere a request can be, and goes to sleep if it found nothing to...

ROOT-APP-MAVEN-CVE-2024-22259 CVE-2024-22259 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-22259 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-22243 CVE-2024-22243 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-22243 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-22262 CVE-2024-22262 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-22262 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

CVE-2026-99255

In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: don't hide a link from cancellations A task that exits cancels its tracked requests and waits until they are gone. iouringcancelgeneric looks everywhere a request can be, and goes to sleep if it found nothing to...

EUVD-2026-116579

A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the function CheckPassword of the file app/src/server.js of the component Socket IO Handler. Performing a manipulation of the argument peerid results in improper access controls. It is possibl...

CVE-2026-121539

A vulnerability was found in miroslavpejic85 MiroTalk P2P up to 2.0.87/2.1.38. Affected by this issue is the function CheckPassword of the file app/src/server.js of the component Socket IO Handler. Performing a manipulation of the argument peerid results in improper access controls. It is possibl...