22277 matches found
CVE-2026-11840
Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection...
EUVD-2026-57740
Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection...
CVE-2026-11840 SQL Injection
Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection...
CVE-2026-66430: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.10 versions...
PT-2026-71690
Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file app/Library/updater/NinjaTableDataSync.php that established a backdoor REST API endpoint,...
CVE-2026-73669: Missing Authentication for Critical Function
The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication. An unauthenticated attacker with network access to the MQTT service on a vulnerable system can read data and control connected lights. Fixed in...
CVE-2026-11840: Improper Neutralization of Special Elements used in an SQL Command
Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection...
PT-2026-71543
Unauthenticated Arbitrary File Download in OMGF Pro = 5.2.7 versions...
PT-2026-71419
Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation...
CVE-2026-61980: Improper Limitation of a Pathname to a Restricted Directory
Unauthenticated Arbitrary File Download in OMGF Pro = 5.2.7 versions...
CVE-2026-73533: Embedded Malicious Code
Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file app/Library/updater/NinjaTableDataSync.php that established a backdoor REST API endpoint,...
CVE-2026-73532: Embedded Malicious Code
Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a requireonce directive added to fluentformpro.php,...
CVE-2026-66429: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.10 versions...
PT-2026-71586
Subscriber Privilege Escalation in Directories Pro = 2.0.5 versions...
PT-2026-71550
Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.10 versions...
PT-2026-71689
Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a require once directive added to fluentformpro.php...
PT-2026-71397
Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection...
CVE-2026-66661: Incorrect Privilege Assignment
Subscriber Privilege Escalation in Directories Pro = 2.0.5 versions...
