CVE-2026-0844

The Simple User Registration plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 6.7 due to insufficient restriction on the 'profilesavefield' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to...

CVE-2025-7015

creationtimestamp| type| source ---|---|--- 2026-01-29 13:29:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdkvgvabfg2c...

Memory Leak

ImageMagick is vulnerable to a memory leak. The vulnerability is due to improper handling of malformed OpenCL device profile XML files in the LoadOpenCLDeviceBenchmark function, which fails to free allocated string memory when elements are not properly closed, allowing an attacker to trigger memo...

CVE-2026-23566

creationtimestamp| type| source ---|---|--- 2026-01-29 09:23:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdkhos7rmx2t...

CVE-2025-67645

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a broken access control in the Profile Edit endpoint. An authenticated normal user can modify the request parameters pubpid / pid to reference another user’s recor...

CVE-2026-1549

creationtimestamp| type| source ---|---|--- 2026-01-29 03:20:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdjtf3gkux2g...

CVE-2025-15344

creationtimestamp| type| source ---|---|--- 2026-01-29 03:10:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdjst6lk442t...

Bdtask Bhojon All-In-One Restaurant Management System: Code Injection Vulnerability

Bdtask Bhojon All-In-One Restaurant Management System is a restaurant management system developed by the Bangladeshi company Bdtask. The versions of the Bdtask Bhojon All-In-One Restaurant Management System prior to 20260116 contained a code injection vulnerability. This vulnerability stemmed fro...

PT-2026-5310

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...

ROS-20260129-73-0011

A vulnerability in the AVRCP protocol implementation of the Bluetooth protocol stack for Linux BlueZ is related to reading beyond memory buffer boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions by using a specially craft...

PT-2026-43832

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in AppArmor where a NULL pointer dereference occurs when the export binary parameter is disabled at runtime. Profiles loaded before this change retain their raw data in...

ROS-20260129-73-0012

A vulnerability in the Audio Profile AVRCP component of the Bluetooth protocol stack for Linux BlueZ is related to reading outside the valid range. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...

CVE-2026-24897

creationtimestamp| type| source ---|---|--- 2026-01-28 23:21:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdjfzww6iw2h 2026-01-28 23:58:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdji46cqyb2h 2026-02-02 12:10:51+00:00| seen|...

CVE-2026-24889

CVE-2026-24889 — soroban-sdk overflow in slice/gen_range (u64) Affected components: the soroban-sdk Rust SDK (core functions Bytes::slice, Vec::slice, Prng::gen_range for u64). Root cause: arithmetic overflow when handling range bounds, particularly under overflow-checks = false (default for rele...

CVE-2026-24769

creationtimestamp| type| source ---|---|--- 2026-01-28 21:55:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdjb7fmhuu2n...

CVE-2026-24856

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Versions prior to 2.3.1.2 have an undefined behavior issue when floating-point NaN values are converted to unsigned short integer types during ICC profile X...

CVE-2026-24856

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Versions prior to 2.3.1.2 have an undefined behavior issue when floating-point NaN values are converted to unsigned short integer types during ICC profile X...

EUVD-2026-4852

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Versions prior to 2.3.1.2 have an undefined behavior issue when floating-point NaN values are converted to unsigned short integer types during ICC profile X...

CVE-2026-24856 iccDEV has UB runtime error in <icTagTypeSignature>

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Versions prior to 2.3.1.2 have an undefined behavior issue when floating-point NaN values are converted to unsigned short integer types during ICC profile X...

CVE-2025-46691

creationtimestamp| type| source ---|---|--- 2026-01-28 20:58:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdj62tzqbe2h 2026-01-29 06:37:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115977004919406391...