CVE-2026-102389 WordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in WPMU DEV Broken Link Checker broken-link-checker allows Code Injection.This issue affects Broken Link Checker: from n/a through 2.4.14.1...

EUVD-2026-102050

Improper Control of Generation of Code 'Code Injection' vulnerability in WPMU DEV Broken Link Checker broken-link-checker allows Code Injection.This issue affects Broken Link Checker: from n/a through 2.4.14.1...

CVE-2026-102389

The WPMU DEV Broken Link Checker plugin (versions ≤ 2.4.14.1 ) is vulnerable to a Code Injection (CWE-94) vulnerability. This flaw allows for Content Injection because of the Improper Control of Generation of Code . While the base severity is rated as MEDIUM (6.5) with a HIGH confidentiality impa...

Is this link safe? Find out with Malwarebytes Scam Link Check

Maybe it’s a text saying your package couldn’t be delivered, with a link to reschedule. Or an email from your bank asking you to verify your account. Or perhaps it’s an invitation from someone you know to view a document. The message looks real enough, but something about the link feels fishy. Do...

OSIB

OWASP Open Security Information Base OSIB Project Page: https://owasp.org/www-project-open-security-information-base Software Repository: https://github.com/OWASP/OSIB Provided Tools: mkdocsmacroosib.py manually insallable python module osibmacro.py macro to copy that imports the python module...

Holistic-Deconstruction-of-CVE-2019-5736-

= doi.org/10.5281/zenodo.18304765 = orcid.org/0009-0007-7728-256X README.md 💀 CVE-2019-5736: runc Container Breakout Deconstruction Advanced Purple Teaming & Forensic Analysis of Host Root Escape 🛡️ Overview This repository contains a high-fidelity deconstruction and Proof-of-Concept PoC for...

CVE-2026-41091-PoC-Exploit

CVE-2026-41091 - RedSun SolarFlare - Microsoft Defender LPE Exploit Legal Disclaimer & Responsible Use This tool is provided for educational and authorized penetration testing purposes only. The authors and contributors are not responsible for any misuse or damage caused by this software. Users a...

CVE-2026-53882

An improper link resolution before file access 'link following' vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in...

EUVD-2026-101982

An improper link resolution before file access 'link following' vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in...

Security Bulletin: Cargo in IBM Open SDK for Rust on AIX uses a vulnerable version of gix crates

Summary Vulnerabilites were discovered in the gix family of crates used by the cargo package manager in IBM Open SDK for Rust on AIX 1.94.0.1 and 1.96.0.0. Vulnerability Details CVEID:CVE-2026-82248 DESCRIPTION: gix-worktree-state before 0.33.0 part of gitoxide allows writing files outside the...

webkit-vulnerability

webkit-vulnerability CVE-2016-4657 web-kit vulnerability for ios 9.3, nintendo switch browser vulnerability iknow whats running in your mind nintendo switch has no no browser, but when you neetd to use a wifi which needs to be conformed by logging in to the browser CVE-2016-45657 webkit in safari...

CVE-2026-15090

The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'linkurl' parameter in all versions up to, and including, 7.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

CVE-2026-15090 Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameter

The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'linkurl' parameter in all versions up to, and including, 7.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

EUVD-2026-101847

The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'linkurl' parameter in all versions up to, and including, 7.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

CVE-2026-15090

The Link Library plugin for WordPress is vulnerable to a time-based SQL Injection in all versions up to and including 7.9.2 . The root cause is insufficient escaping on the link_url parameter and a lack of sufficient preparation on the existing SQL query. This flaw allows unauthenticated attacker...

D-Link NAS - Command Injection via Group Parameter

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument group leads to os command injection. i...

EUVD-2026-101745

Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens. Attackers can start an OAuth sign-in with a victim's email and submit the returned state ...

CVE-2026-111216: Improper Neutralization of Special Elements used in an OS Command

Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with gateway edit privileges to execute commands as root by injecting shell metacharacters into an IPv6 link-local zone index. Attackers can set a gateway Monitor IP whose unvalidated...

CVE-2026-110862

Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens. Attackers can start an OAuth sign-in with a victim's email and submit the returned state ...

CVE-2026-110862 Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic Link

Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens. Attackers can start an OAuth sign-in with a victim's email and submit the returned state ...