Exploit for Heap-based Buffer Overflow in Postgresql

CVE-2026-2005 — PostgreSQL pgcrypto Heap Buffer Overflow Ta...

CVE-2026-19404 389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort cleanallruv replication maintenance

A flaw was found in 389 Directory Server. The CleanAllRUV and Abort CleanAllRUV replication-maintenance extended operations perform no authorization check, allowing an unauthenticated remote attacker to invoke them when nsslapd-allow-anonymous-access is enabled the default, or any authenticated...

CVE-2026-19404

A flaw was found in 389 Directory Server. The CleanAllRUV and Abort CleanAllRUV replication-maintenance extended operations perform no authorization check, allowing an unauthenticated remote attacker to invoke them when nsslapd-allow-anonymous-access is enabled the default, or any authenticated...

CVE-2026-14941

The Customer Reviews for WooCommerce WordPress plugin before 5.116.0 does not perform nonce or capability checks on several settings-related AJAX actions, allowing users with minimal permissions such as Subscribers to invoke administrative settings handlers, update Customer Reviews for WooCommerc...

EUVD-2026-55018

The Customer Reviews for WooCommerce WordPress plugin before 5.116.0 does not perform nonce or capability checks on several settings-related AJAX actions, allowing users with minimal permissions such as Subscribers to invoke administrative settings handlers, update Customer Reviews for WooCommerc...

CVE-2026-15238 Hotel Booking Lite < 6.2.3 - Subscriber+ Customer Data Modification via IDOR

The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not verify record ownership before updating customer records, allowing any authenticated user with a low-privileged account Subscriber and above to modify or overwrite the personal data of any customer by supplying an arbitrary...

CVE-2026-15238

The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not verify record ownership before updating customer records, allowing any authenticated user with a low-privileged account Subscriber and above to modify or overwrite the personal data of any customer by supplying an arbitrary...

CVE-2026-15238

The MotoPress Hotel Booking (and Hotel Booking Lite ) WordPress plugin, in versions before 6.2.3 , is vulnerable to an Insecure Direct Object Reference (IDOR) . The software fails to verify record ownership when updating customer records, which allows any authenticated user with a low-privileged ...

CVE-2026-18666

The Library Management System WordPress plugin before 3.6.7 does not sanitize and escape a user-supplied parameter before using it in a SQL statement, allowing users with a role as low as Subscriber to perform SQL injection and extract arbitrary data from the database, including user password...

CVE-2026-72522

CVE-2026-72522 affects libexpat before 2.8.3, where an out-of-bounds read and infinite loop occur because low surrogates are treated the same as high surrogates in the *_toUtf16 functions. The vulnerability is an availability issue (HIGH impact) with local attack requirements and no confidentiali...

deepslop

DEEPSLOP — PS5 WebKit Exploit Kit 13.60 / WebKit RCE كيت اس...

PT-2026-69450

Name of the Vulnerable Software and Affected Versions automatisch versions prior to commit 41f3c56 Description A server-side request forgery SSRF issue exists where a low-privileged authenticated user with 'manage Flow' permission can force the server to fetch arbitrary URLs and retrieve the full...

PT-2026-69891

Name of the Vulnerable Software and Affected Versions Metabase affected versions not specified Description An authenticated attacker with low privileges can read the entire application database of the software. Recommendations At the moment, there is no information about a newer version that...

CVE-2025-30238: Incorrect Authorization

In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations. An attacker may perform administrative actions such as creating privileged accounts or modifying critical configuration settings...

CVE-2026-72900: Missing Authorization

Metabase allows an authenticated, low-privileged attacker to read the entire Metabase application database...

PT-2026-69974

Name of the Vulnerable Software and Affected Versions ERPNext versions prior to 15.111.0 ERPNext versions prior to 16.22.0 Description The send auto email function in erpnext/accounts/doctype/process statement of accounts/process statement of accounts.py lacks a Process Statement Of Accounts...

PT-2026-69950

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift AI RHOAI MaaS Gateway affected versions not specified Description Improper configuration of the MaaS Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log, and alter all MaaS...

CVE-2026-72727: Improper Neutralization of Input During Web Page Generation

Discourse is an open-source discussion platform. Prior to 026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, a low-privileged user could place crafted content in the moderation review queue that executed stored cross-site scripting when a moderator viewed it on a site with a modified or disabled default...

PT-2026-69867

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.1.6 Discourse versions prior to 2026.5.2 Discourse versions prior to 2026.6.1 Discourse versions prior to 2026.7.0 Description A low-privileged user can submit crafted content to the moderation review queue. Th...

Photon OS 5.0: Runc PHSA-2024-5.0-91-0375

An update of the runc package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0375. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...