EUVD-2026-70587

Unauthenticated Broken Access Control in Mail Mint = 1.31.0 versions...

CVE-2026-84755

Mail Mint is a WordPress plugin affected by an unauthenticated Broken Access Control vulnerability in versions 1.31.0 and below . The flaw allows a remote attacker with no prior access to perform unauthorized actions on the plugin, resulting in low confidentiality and low integrity impact with no...

CVE-2026-84755 WordPress Mail Mint plugin <= 1.31.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Mail Mint = 1.31.0 versions...

CVE-2026-84753

CVE-2026-84753 affects the WordPress Mail Mint plugin in versions 1.31.0 and below , where an unauthenticated PHP Object Injection flaw allows a remote attacker to inject arbitrary serialized objects into the application. The vulnerability is rated CVSS 9.8 (CRITICAL) with high impact to confiden...

CVE-2026-84753 WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...

EUVD-2026-70589

Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...

slippy-book-exploit

Slippy-book: استغلال ثغرة اجتياز المسار في تحليل ملفات EPUB لتنفيذ الأوامر عن بُعد CVE-2023-44451 Xreader, CVE-2023-52076Atrilمحجوز: ثغرة RCE تؤثر على توزيعات لينكس الشهيرة بما في ذلك Mint وKali وParrot وManjaro وغيرها. استغلال ثغرة اجتياز المسار في تحليل ملفات EPUB لتنفيذ الأوامر عن بُعد تم اكتش...

CVE-2019-18634-writeup

Analyse de la CVE-2019-18634 https://www.exploit-db.com/exploits/47995 Sudo 1.8.25p - 'pwfeedback' Débordement de tampon PoC L'option pwfeedback de sudo peut être utilisée pour fournir un retour visuel lorsque l'utilisateur saisit son mot de passe. Pour chaque pression de touche, un astérisque es...

CVE-2019-20326

CVE-2019-20326 GNOME gThumb और Linux Mint Pix, Cairo ग्राफिक्स लाइब्रेरी के साथ कई इमेज फ़ॉर्मेट प्रदर्शित करने के लिए cairoio मॉड्यूल का उपयोग करते हैं। gThumb संस्करण 3.8.3 और Pix संस्करण 2.4.5 में, cairoio एक JPEG इमेज के माध्यम से हीप बफ़र ओवरफ़्लो के प्रति संवेदनशील है, जिसकी चौड़ाई या ऊँचाई...

Mintinstall-object-injection

TR Linux mint yazılım yöneticisi v 7.9.5/9 yanlış yapılandırmadan dolayı obje enjeksiyonu ve keyfi kod çalıştırmamıza neden olmaktadır. EN Linux mint software manager v 7.9.5/9 causes us to execute object injection and arbitrary code due to incorrect configuration root@kitploit: mintinsall TR Min...

CVE-2026-78904-Digital-Dinar-Drain

CVE-2026-78904 — استنزاف الدينار الرقمي واجهة برمجة تطبيقات إصدار العملة الرقمية للبنك المركزي — ثغرة منطقية سكّ غير محدود...

CVE-2026-55764

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint-role holder to bypass a finite per-nonce MaxSupply on the semi-fungible token add-quantity path. In core/kapp/systemAccount/systemAcount.go, SFTAddCirculation performed meta.Circulation ...

klever-go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply

Summary On the SFT add-quantity path the only supply bound is SFTAddCirculation, which does meta.Circulation += amount with no overflow guard, then checks if meta.Circulation meta.MaxSupply && meta.MaxSupply != 0. If amount overflows int64 and wraps negative, negative MaxSupply is false, the cap...

CVE-2026-55764

Klever-Go (the Go implementation of the Klever blockchain protocol), prior to 1.7.19 , contains a signed int64 overflow in the semi-fungible token add-quantity path. In core/kapp/systemAccount/systemAcount.go, SFTAddCirculation added amount to meta.Circulation before comparing against MaxSupply, ...

CVE-2026-55764 Klever-Go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint-role holder to bypass a finite per-nonce MaxSupply on the semi-fungible token add-quantity path. In core/kapp/systemAccount/systemAcount.go, SFTAddCirculation performed meta.Circulation ...

PT-2026-83346

Name of the Vulnerable Software and Affected Versions Klever-Go versions prior to 1.7.19 Description Klever-Go, a Go implementation of the Klever blockchain protocol, contains an integer overflow issue in the semi-fungible token SFT add-quantity path. In the SFTAddCirculation function within...

CVE-2026-10059

A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A tenant administrator with namespace-scoped privileges can exploit this vulnerability by creating a namespaced ClusterCurator. This action inadvertently grants the tenant administrator the ability to mint a tok...

CVE-2026-9198

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/autologin mints SUPERUSER tokens to any network caller with /api/v1/validate/code executes user code via exec to achieve full RCE on default Langflow deployments...

CVE-2026-59249 Sign-tolerant HTTP/1 chunk-size parser in Mint enables response smuggling against strict intermediaries on pooled connections

Inconsistent interpretation of HTTP requests HTTP response smuggling vulnerability in elixir-mint mint allows a malicious HTTP/1 server to desynchronize a strict intermediary and the Mint client on the same pooled connection, enabling response-queue poisoning against subsequent requests that shar...

CVE-2026-59249

The CVE concerns the Elixir Mint library (mint) and its HTTP/1.1 decoding path. Specifically, Mint.HTTP1.decode_body/5 parses chunk-size lines using Integer.parse(data, 16), which accepts a leading + or - despite RFC 7230 requiring unsigned hex digits. This leads to a mismatch with RFC-strict int...