WordPress Link Whisper Free plugin <= 0.9.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin Link Whisper Free versions = 0.9.7...

WordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerability

Content Injection vulnerability discovered by changsheng in WordPress Plugin Broken Link Checker versions = 2.4.14.1...

WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by dzaku in WordPress Plugin Link Whisper Free versions = 0.9.7...

CVE-2026-109687

The Link Whisper Free WordPress plugin (versions ¢= 0.9.7 ) is vulnerable to Blind SQL Injection due to the Improper Neutralization of Special Elements used in an SQL Command . An attacker with high privileges may leverage this flaw to execute unauthorized database queries. No specific remediatio...

WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by mrhaji8 in WordPress Plugin Link Whisper Free versions = 0.9.7...

CVE-2026-108971

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfddecode of the file bootloaderregion.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may b...

EUVD-2026-98294

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfddecode of the file bootloaderregion.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may b...

CVE-2026-108971

A flaw exists in the D-Link DCS-930L (firmware version B1.08B4 ) within the Emergency HTTP Recovery Server component. Specifically, the mpfd_decode function of the bootloader_region.bin file fails to properly verify cryptographic signatures when the firmware argument is manipulated. This vulnerab...

CVE-2026-108971 D-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfddecode of the file bootloaderregion.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may b...

EUVD-2026-98159

Hugo from v0.162.0 before v0.167.0 contains an improper link resolution vulnerability that lets malicious themes or modules expose files outside their root via nested-mount ancestor directories. Attackers controlling a theme can place a symlink or NTFS junction at a virtual ancestor directory,...

EUVD-2026-98201

SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated attacker could craft a malicious link that, when clicked by a victim, loads attacker-controlled content within the trusted application context. Successful exploitation could allo...

CVE-2026-70264: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Microsoft Defender allows an authorized attacker to disclose information locally...

CVE-2026-108971: Improper Verification of Cryptographic Signature

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfddecode of the file bootloaderregion.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may b...

CVE-2026-70190: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-83933: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...

Microsoft Windows Defender: CVE-2026-70264: Microsoft Defender Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Microsoft Defender allows an authorized attacker to disclose information locally...

CVE-2026-83507: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83507: Windows Update Orchestrator Service Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...

CVE-2026-62687: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to disclose information locally...

CVE-2026-104816: Improper Neutralization of Input During Web Page Generation

Misskey is an open source, federated social media platform. From 12.0.0 until 2026.7.0, the RSS components display feed item links from configured feeds without verifying their URL schemes. Missing URL scheme verification allows an attacker who controls feed content to provide an unsafe-scheme li...