42006 matches found
CVE-2026-85165 n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement
n8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free identifiers in spread, computed-key, switch-case, or class-extension positions resolve against process globals. Authenticated users with workflow-edit permission can mutate host objects through expression...
WordPress JobSearch plugin <= 3.2.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Phat RiO in WordPress Plugin JobSearch versions = 3.2.0...
WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by endy in WordPress Plugin Mail Mint versions = 1.31.0...
Adrenaline adrenaline-bof-bundle-2026-08-31-171332-c55f015
Adrenaline BOF Kit A C2-agnostic collection of Beacon Object Files BOFs for red team and offensive security operations. BOFs are organized by attack chain phase and designed to be small, modular, and automation-friendly for use in reconnaissance, enumeration, and post-exploitation workflows. Tabl...
WordPress WC Ukraine Shipping plugin <= 1.22.5 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin WC Ukraine Shipping versions = 1.22.5...
CVE-2026-82417
A flaw was found in qs. The qs.stringify function, responsible for serializing objects, does not properly validate the isBuffer property of an object's constructor before attempting to invoke it. An unauthenticated attacker can provide specially crafted input that, when processed and then...
BIT-ELASTICSEARCH-2026-72649 Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution
Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586. A specially crafted trained model artifact could cause attacker-controlled logic to execute with a materially broader system-call surface tha...
CVE-2026-9853
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without being authenticated to the SYS600 system itself. Only the SYS600 system users should be permitted to view and modify...
EUVD-2026-70320
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without being authenticated to the SYS600 system itself. Only the SYS600 system users should be permitted to view and modify...
CVE-2026-9853
CVE-2026-9853 is a vulnerability in Hitachi Energy's SYS600 application that allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without completing SYS600's own authentication. This effectively bypasses the intended ac...
WordPress Rank Math SEO plugin < 1.0.277 - Author+ Robots and Pillar Content Meta Update on Non-Owned Objects vulnerability
Author+ Robots and Pillar Content Meta Update on Non-Owned Objects vulnerability discovered by Project Black in WordPress Plugin Rank Math SEO versions 1.0.277...
SUSE CVE-2026-74381
In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Allow entries in BO caches to be freed When a buffer object is pinned via host1xbopin with a cache, the resulting mapping is kept in the cache so it can be reused on subsequent pins. Each mapping held a reference to...
PT-2026-85119
Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...
PT-2026-85205
Name of the Vulnerable Software and Affected Versions WHMCS versions 4.5.0 through 8.13.7 WHMCS versions 8.13.0 through 8.13.7 WHMCS versions 9.0.0 through 9.0.7 Description A missing authorization issue exists in the 2Checkout payment gateway. This flaw allows an unauthenticated user to retrieve...
CVE-2026-84753: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...
...[ More ]
ILIAS versions prior to 9.22, versions 10.0 through 10.9, and versions 11.0 through 11.2 contain an unauthenticated PHP object injection vulnerability in the Shibboleth logout functionality. An unauthenticated attacker can manipulate stored session data that is subsequently deserialized without...
PT-2026-85096
Name of the Vulnerable Software and Affected Versions Mail Mint versions prior to 1.31.1 Description Mail Mint is subject to PHP Object Injection, a condition where an application deserializes untrusted input, allowing an attacker to inject a PHP Object. While no POP chain a sequence of gadgets...
CVE-2026-84834: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...