EUVD-2026-111730

The Customer Engagement System WordPress plugin before 2.0.2 does not restrict access to its MailChimp interest-group lookup or validate the API key supplied to it, allowing unauthenticated users to make the server open connections to arbitrary internal hosts and ports and infer from response...

CVE-2026-111031 Welcart e-Commerce < 2.12.6 - Unauthenticated Open Redirect via 'usces_referer' Parameter

The Welcart e-Commerce WordPress plugin before 2.12.6 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect users to arbitrary external websites...

CVE-2026-111031

The Welcart e-Commerce WordPress plugin, in versions prior to 2.12.6 , is vulnerable to an unauthenticated open redirect . The flaw exists because the software fails to properly validate a user-supplied URL before utilizing it for a redirect, specifically via the 'usces_referer' parameter. This a...

WordPress Welcart e-Commerce plugin < 2.12.6 - Unauthenticated Open Redirect vulnerability

Unauthenticated Open Redirect vulnerability discovered by Osman Hussein in WordPress Plugin Welcart e-Commerce versions 2.12.6...

ThinkPHP < 3.2.4 - Remote Code Execution

ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via the s parameter in index.php through the invokefunction functionality. id: CVE-2019-9082 info: name: ThinkPHP 3.2.4 - Remote Code Execution author: 0xanis severity: high description: |...

kernel: selinux: check connect-related permissions on TCP Fast Open

A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux module. When using TCP Fast Open, SELinux failed to properly check connect-related permissions. This oversight could allow a local attacker to bypass SELinux network access controls, potentially enabling unauthorized network...

kernel: selinux: check connect-related permissions on TCP Fast Open

A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux module. When using TCP Fast Open, SELinux failed to properly check connect-related permissions. This oversight could allow a local attacker to bypass SELinux network access controls, potentially enabling unauthorized network...

kernel: selinux: check connect-related permissions on TCP Fast Open

A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux module. When using TCP Fast Open, SELinux failed to properly check connect-related permissions. This oversight could allow a local attacker to bypass SELinux network access controls, potentially enabling unauthorized network...

PT-2026-129178

Name of the Vulnerable Software and Affected Versions Echo versions prior to 4.15.2 Echo versions prior to 5.1.1 Description The Scheme function in the Echo web framework trusts the X-Forwarded-Proto, X-Forwarded-Protocol, and X-Url-Scheme request headers without validating that the values are...

PT-2026-127847

The Customer Engagement System WordPress plugin before 2.0.2 does not restrict access to its MailChimp interest-group lookup or validate the API key supplied to it, allowing unauthenticated users to make the server open connections to arbitrary internal hosts and ports and infer from response...

PT-2026-128149

In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between st remove and st open st remove drops the probe reference on the scsi tape with kref put and only afterwards removes its index from st index idr. If that was the last reference, scsi tape...

PT-2026-127896

Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation...

CVE-2026-82411: maykinmedia open-object: Open Object provides an API and admin interface to manage objects and object types

Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2, and 4.1.1, a token scoped to read one ObjectType can read the full versioned record of an object of any other ObjectType via the history-detail endpoint GET...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146873)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146873 advisory. In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TCP Fast Open Similar to Landlock, SELinux was not...

TorBot

████████╗ ██████╗ ██████╗ ██████╗ ██████╗ ████████╗ ╚══██╔══╝██╔═══██╗██╔══██╗ ██╔══██╗██╔═████╗╚══██╔══╝ ██║ ██║ ██║██████╔╝ ██████╔╝██║██╔██║ ██║ ██║ ██║ ██║██╔══██╗ ██╔══██╗████╔╝██║ ██║ ██║ ╚██████╔╝██║ ██║ ██████╔╝╚██████╔╝ ██║ ╚═╝ ╚═════╝ ╚═╝ ╚═╝ ╚═════╝ ╚═════╝ ╚═╝ Open Source Intelligence...

ats-realip-plugin-acl

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · ats-realip-plugin-acl ats-realip-plugin-acl Class: Privilege leftover Reach: Remote Apache Traffic Server 10.2.0 b1df7334 - Apache Software Foundation experimental realip plus the documented acl.subjects: PLUGIN...

DEBIAN-CVE-2026-116774

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From 0.60.0 until 0.65.0, channel-open parsing accepts a peer-declared maximumpacketsize of zero and passes it into ChannelTx::pollwritable in russh/src/channels/io/tx.rs. The Channel::data,...

CVE-2026-116774

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From 0.60.0 until 0.65.0, channel-open parsing accepts a peer-declared maximumpacketsize of zero and passes it into ChannelTx::pollwritable in russh/src/channels/io/tx.rs. The Channel::data,...

UBUNTU-CVE-2026-116774

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From 0.60.0 until 0.65.0, channel-open parsing accepts a peer-declared maximumpacketsize of zero and passes it into ChannelTx::pollwritable in russh/src/channels/io/tx.rs. The Channel::data,...

Open Redirect

Overview mcp is a Model Context Protocol SDK Affected versions of this package are vulnerable to Open Redirect via the SSE and streamable HTTP transports, which follow redirects without restricting them to the MCP endpoint's origin. An attacker who can position a redirect for example via a...