CVE-2026-84169

The UPI QR Code Payment Gateway WordPress plugin, affecting versions through 1.4.3 , contains a vulnerability where it fails to verify if a payment-confirmation request belongs to the specific order and customer it claims to confirm. This lack of authorization allows unauthenticated attackers to ...

CVE-2026-84169 UPI QR Code Payment Gateway <= 1.4.3 - Unauthenticated Cross-Order Payment-Status Forgery

The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actually belongs to the order and customer it claims to confirm, allowing unauthenticated attackers to mark an arbitrary order as paid without making any payment...

WordPress UPI QR Code Payment Gateway plugin <= 1.4.3 - Unauthenticated Cross-Order Payment-Status Forgery vulnerability

Unauthenticated Cross-Order Payment-Status Forgery vulnerability discovered by Pedro Pinho in WordPress Plugin UPI QR Code Payment Gateway versions = 1.4.3...

CVE-2026-84169 UPI QR Code Payment Gateway <= 1.4.3 - Unauthenticated Cross-Order Payment-Status Forgery

The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actually belongs to the order and customer it claims to confirm, allowing unauthenticated attackers to mark an arbitrary order as paid without making any payment...

OpenSC

OpenSC documentation Wiki is available online Please take a look at the documentation before trying to use OpenSC. Build and test status of specific cards: Cards| Status ---|--- CAC| Coolkey|...

By-Poloss..-..CVE-2026-12432-PoC

CVE-2026-12432: WP Full Stripe Free = 8.4.4 Publicado : 26 de junio de 2026 Última actualización : 27 de junio de 2026 Investigador : Netwurm - VTDR e.V.i.G. Descripción de la Vulnerabilidad El plugin WP Full Stripe Free para WordPress es vulnerable a Autorización Faltante en versiones hasta, e...

CVE-2026-85483

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-92834

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-85087

Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-105098

A security flaw exists in Omega Solution CoinEx Crypto 2025 within the Support Ticket API component. Specifically, an unknown function in the /ticket/customer file is vulnerable to information disclosure when an attacker remotely manipulates the status/page/count arguments. While a public exploit...

EUVD-2026-92066

A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket/customer of the component Support Ticket API. The manipulation of the argument status/page/count results in information disclosure. The attack can be executed remotely. Th...

CVE-2026-105098 Omega Solution CoinEx Crypto Support Ticket API customer information disclosure

A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket/customer of the component Support Ticket API. The manipulation of the argument status/page/count results in information disclosure. The attack can be executed remotely. Th...

Rudder Server < 1.3.0-rc.1 - SQL Injection

Rudder-server is part of RudderStack, an open source Customer Data Platform CDP. Versions of rudder-server prior to 1.3.0-rc.1 are vulnerable to SQL injection. This issue may lead to Remote Code Execution RCE due to the rudder role in PostgresSQL having superuser permissions by default. Version...

PT-2026-104602

A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket/customer of the component Support Ticket API. The manipulation of the argument status/page/count results in information disclosure. The attack can be executed remotely. Th...

CVE-2026-105098: Exposure of Sensitive Information to an Unauthorized Actor

A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket/customer of the component Support Ticket API. The manipulation of the argument status/page/count results in information disclosure. The attack can be executed remotely. Th...

Linux Distros Unpatched Vulnerability : CVE-2026-92834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0...

Linux Distros Unpatched Vulnerability : CVE-2026-85087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0...

Linux Distros Unpatched Vulnerability : CVE-2026-85483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: k9s, helm-set-status, k8sgpt, manifest-tool, flux-helm-controller, helm-push, kyverno-notation-aws, kube-arangodb, helm-mapkubeapis, cert-manager-cmctl, opentofu, rancher-helm, kargo, maru, gitness, cluster-api-helm-controller, tigera-operator, xeol...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: k9s, helm-set-status, k8sgpt, manifest-tool, flux-helm-controller, helm-push, kyverno-notation-aws, kube-arangodb, helm-mapkubeapis, cert-manager-cmctl, opentofu, rancher-helm, kargo, maru, gitness, cluster-api-helm-controller, tigera-operator, xeol...