WordPress plugin JS Help Desk – AI-Powered Support & Ticketing System SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

CVE-2025-14456

IBM MQ Appliance versions 9.4 CD through 9.4.4.1 are vulnerable to a cryptographic weakness (CWE-327 ) due to the use of weaker than expected cryptographic algorithms . This flaw could allow an attacker to decrypt highly sensitive information . The vulnerability is addressed under known issue DT4...

Malicious Package

Overview polygon-bitquery-api is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

PT-2026-22734

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 12.0 through 12.11.7 WatchGuard Fireware OS versions 12.5.9 through 12.5.16 WatchGuard Fireware OS versions 2025.1 through 2026.1.1 Description A flaw in WatchGuard Fireware OS could allow an attacker to...

CVE-2026-26890

The Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection within the /pharmacy/manage_product.php file. This vulnerability arises from the improper neutralization of special elements used in an SQL command. Exploitation details are not provided in the documents, but a p...

CVE-2026-27653

creationtimestamp| type| source ---|---|--- 2026-02-27 05:00:00+00:00| seen| https://jvn.jp/en/jp/JVN41357120/...

CVE-2025-11383

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-11381

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-21654

creationtimestamp| type| source ---|---|--- 2026-02-26 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-01 2026-02-27 09:24:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mftfaacliq2o 2026-03-02 06:30:32+00:00| seen|...

CVE-2025-15060

creationtimestamp| type| source ---|---|--- 2026-02-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-124/ 2026-02-25 18:11:00+00:00| seen| https://bsky.app/profile/thezdi.bsky.social/post/3mfpbql4q2c2i...

CVE-2025-70329

creationtimestamp| type| source ---|---|--- 2026-02-23 20:30:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkimsrfiy2s 2026-02-23 20:57:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfkk44jbgy2o 2026-02-24 22:00:15+00:00| seen|...

CVE-2026-2933 YiFang CMS Extended Management D_adManage.php update cross site scripting

A weakness has been identified in YiFang CMS up to 2.0.5. This affects the function update of the file app/db/admin/DadManage.php of the component Extended Management Module. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. T...

SUSE: Security Advisory (SUSE-SU-2026:20429-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CGA-5C9W-76VV-MJWG

Bulletin has no description...

WordPress Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent plugin <= 4.1.2 - Missing Authorization to Sensitive Information Exposure vulnerability

Missing Authorization to Sensitive Information Exposure vulnerability discovered by Rafshanzani Suhada in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions = 4.1.2...

Ubuntu: Security Advisory (USN-8028-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-8029-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Paytium: Mollie payment forms & donations plugin <= 4.3.7 - Missing Authorization in 'paytium_notice_dismiss' vulnerability

Missing Authorization in 'paytiumnoticedismiss' vulnerability discovered by WordFence in WordPress Plugin Paytium versions = 4.3.7...

urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)

A flaw was found in urllib3. When processing HTTP redirect responses during data streaming, the library automatically reads and decompresses the full response body without enforcing configured size limits. A malicious server can exploit this by serving an excessively compressed response, bypassin...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-8033-1)

"The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8033-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...