The Opal Estate Pro – Property Management <= 1.7.5 - Unauthenticated Privilege Escalation

The Opal Estate Pro plugin ≤ 1.7.5 is vulnerable to privilege escalation. Due to missing role restrictions in the onregisteruser function, users can register with any role. This allows unauthenticated attackers to create administrator accounts. id: CVE-2025-6934 info: name: The Opal Estate Pro –...

GHSA-HH9P-6WH2-4MFC vulnerabilities

Vulnerabilities for packages: awx, checkov, opal...

GHSA-JM78-9FVV-MHGR vulnerabilities

Vulnerabilities for packages: awx, checkov, opal...

GHSA-WVPP-8HX9-P66J vulnerabilities

Vulnerabilities for packages: awx, checkov, opal...

GHSA-4GMW-GG2M-W46P vulnerabilities

Vulnerabilities for packages: awx, checkov, opal...

GHSA-9RJ7-RF2P-W77R vulnerabilities

Vulnerabilities for packages: awx, checkov, opal...

GHSA-HMQ2-W58F-27JC vulnerabilities

Vulnerabilities for packages: awx, checkov, opal...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Added a null pointer check in opaleventinit. kasprintf returns a pointer to dynamically allocated memory; this pointer may be NULL in case of failure...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: A null pointer check was added in opalpowercapinit. The kasprintf function returns a pointer to dynamically allocated memory; this pointer may be NULL in case of failure...

CVE-2026-44244 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, awx, opal, mlflow-fips...

GHSA-V87R-6Q3F-2J67 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, awx, opal, mlflow-fips...

CVE-2026-42284 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, checkov, opal, open-webui, awx, mlflow, mlflow-fips...

CVE-2026-42215 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, checkov, opal, open-webui, awx, mlflow, mlflow-fips...

Exploit for CVE-2025-6934

CVE-2025-6934 🛡️ CVE-2025-6934 - Unauthenticated Privilege Es...

Exploit for CVE-2025-6934

CVE-2025-6934-Opal-E...

CVE-2026-23949 vulnerabilities

Vulnerabilities for packages: localstack, tritonserver-backend-vllm-cuda-12.9, dask-kubernetes, datadog-agent-fips, apache-beam-python-3.11-sdk, dbt-bigquery, opal, duplicity, pypy-3.10, wazuh-manager-fips, tensorflow-gpu-jupyter, ansible-operator-fips, superset, pypy-3.11, tensorflow-cpu-jupyter...

Azure Linux 3.0 Security Update: kernel (CVE-2023-52696)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-52696 advisory. - In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer chec...

Exploit for CVE-2025-6934

CVE-2025-6934 This repository contains a P...

CVE-2025-67525

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in OpalWP ekommart ekommart allows PHP Local File Inclusion.This issue affects ekommart: from n/a through 4.3.1...

EUVD-2025-202115

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in OpalWP Fashion fashion2 allows PHP Local File Inclusion.This issue affects Fashion: from n/a through 5.3.0...