EUVD-2026-91908

The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and sensitive information disclosure in versions up to, and including, 4.8.3 via the resend-activation and email-activation endpoints. The endpoints are dispatched from...

CVE-2026-97337

The Simple Membership plugin for WordPress is vulnerable to unauthorized data modification and sensitive information disclosure in versions up to and including 4.8.3 . The root cause is a missing authorization check (including no nonce, capability, or ownership verification) on the resend-activat...

CVE-2026-97337: Missing Authorization

The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and sensitive information disclosure in versions up to, and including, 4.8.3 via the resend-activation and email-activation endpoints. The endpoints are dispatched from...

PT-2026-104561

In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorithm and authAttrs fields disagreed about whether authenticated attributes were present. RFC 5652 sec. 9.1 pairs the two, requiring that authAttrs be present whenever...

PT-2026-104512

Name of the Vulnerable Software and Affected Versions Simple Membership plugin for WordPress versions prior to 4.8.4 Description Unauthorized modification of data and sensitive information disclosure occur via the 'resend-activation' and 'email-activation' endpoints. These endpoints are dispatche...

PT-2026-104530

Name of the Vulnerable Software and Affected Versions TillKit WordPress plugin versions prior to 1.0.5 Description The plugin creates a privileged POS account upon activation that uses a hard-coded, publicly known PIN. The system does not require this PIN to be changed before use and authenticate...

Linux Distros Unpatched Vulnerability : CVE-2026-86536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift all JS bindings. This issue affects Apach...

Linux Distros Unpatched Vulnerability : CVE-2026-71888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorithm and authAttrs fields disagreed about...

cve-2021-44228-qingteng-patch

Correctif log4j2 de Qinteng https://github.com/qingtengyun/cve-2021-44228-qingteng-patch Corrige CVE-2021-44228 de log4j2, utilise l'API d'instrumentation de la JVM pour modifier le bytecode existant chargé dans la JVM. Sans redémarrer le processus Java, modifie la méthode lookup de la classe...

CVE-2024-55271

نظام إدارة الصالة الرياضية CVE-2024-55271 نظام إدارة صالة رياضية مبني باستخدام PHP وMySQL. المدقق Shoaib Alam - ملف لينكد إن الوصف ثغرة CSRF في قسم تحديث الملف الشخصي تم تحديد ثغرة من نوع Cross-Site Request Forgery CSRF في نظام إدارة الصالة الرياضية. هذه المشكلة موجودة في وظيفة تحديث الملف الشخصي...

Driver-kaldereta

Kaldereta Pilote en mode noyau non signé qui effectue des modifications de mémoire Fonctionnalités obtenir l'identifiant de processus obtenir l'adresse de base d'une image modifier la protection d'une région mémoire allouer une région mémoire libérer la mémoire lire/écrire à partir d'une adresse...

CVE-2024-11848

CVE-2024-11848 NitroPack = 1.17.0 - Autorisation manquante pour la mise à jour limitée d'options Abonné+ authentifié Description Le plugin NitroPack pour WordPress est vulnérable à une modification non autorisée des données en raison d'un manque de vérification des capacités sur l'action AJAX...

CVE-2026-104873

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From 0.1.45 until 0.4.4, the langgraph-sdk resource-scoped authorization decorators @auth.on.threads, @auth.on.assistants, and @auth.on.crons ignore the...

DEVVORTEX

DEVVORTEX HackTheBox : Devvortex — Write-Up de la machine Un walkthrough technique complet détaillant la compromission de la machine Devvortex sur HackTheBox. Ce parcours illustre le fuzzing de sous-domaines , l'énumération de l'API Joomla , la modification de template pour l'accès initial,...

h-encore

h-encore h-encore , où h signifie hacks et homebrews, est le deuxième jailbreak public pour la PS Vita™ qui prend en charge les derniers firmwares 3.65, 3.67 et 3.68. Il vous permet d'effectuer des modifications au niveau du kernel et de l'utilisateur, de changer la vitesse d'horloge, d'installer...

CVE-2026-15598

CVE-2026-15598 Une faille a été identifiée dans antv layout 2.0.0. Cela affecte la fonction setNestedValue dans la bibliothèque lib/util/object.js. L'exécution d'une manipulation de l'argument path peut conduire à une modification non contrôlée des attributs du prototype de l'objet. L'attaque peu...

WordPress Alt Text AI – Automatically generate image alt text for SEO and accessibility plugin <= 1.10.41 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Content Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post Content Modification vulnerability discovered by Webbernaut in WordPress Plugin Download Alt Text AI versions = 1.10.41...

CVE-2026-65540

CVE-2026-65540 Popup for CF7 with Sweet Alert Hello document.getElementById'csrf'.submit; 2. Log in to WordPress as an administrator 3. Visit the malicious page 4. Optional Navigate to http://TARGET/wp-admin/admin.php?page=cf7-simplepopup — confirm the Width field now contains...

AZL-105401 CVE-2026-86536 affecting package thrift 0.24.0-1

Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift all JS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0 and re-generate JS code, which fixes the issue...

UBUNTU-CVE-2026-86536

Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift all JS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0 and re-generate JS code, which fixes the issue...