CVE-2026-97271: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WPFunnels = 3.13.1 versions...

CVE-2026-97235: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...

CVE-2026-97241: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in BackupEase = 2.2.2 versions...

CVE-2026-97240: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in StifLi Backup Tools = 2.2.7 versions...

CVE-2026-97237: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

CVE-2026-97261: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Notivo = 1.4.2 versions...

CVE-2026-97247: Missing Authorization

Unauthenticated Broken Access Control in Blocksy Companion = 2.1.55 versions...

CVE-2026-97267: Missing Authorization

Subscriber Broken Access Control in Prevent files / folders access = 2.6.7 versions...

CVE-2026-97250: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...

CVE-2026-93770: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.13 versions...

CVE-2024-2997

CVE-2024-2997 スキャナー 概要 CVE-2024-2997 スキャナーは、Webアプリケーションのコマンドインジェクション脆弱性を検出するために設計された高度な脆弱性スキャナーです。このツールは、セキュリティ専門家がアプリケーションの潜在的なセキュリティリスクを特定するのに役立ちます。 免責事項 このツールは教育目的のみ を対象としています。所有しているアプリケーション、またはテストの許可を得たアプリケーションに対してのみ使用してください。作者は、このツールの誤用またはそれによって生じた損害について一切責任を負いません。 特徴 高性能スキャン :...

CVE-2026-102712: Out-of-bounds Read

On the first DTLS ClientHello, the parser copies a device-claimed sessionid length and validates the ciphersuite-list length against the total record length instead of the remaining bytes. An unauthenticated peer drives an OOB source read of up to 255 bytes, and those bytes are echoed verbatim in...

CVE-2026-102710: Improper Privilege Management

Attacker model / Preconditions: a loaded TXMMODULEUSERMODE | TXMMODULEMEMORYPROTECTION module issuing kernel dispatch calls, on a build with TXENABLEEVENTTRACE. A user-mode, memory-protected module can register an arbitrary function pointer as the global trace-full callback. The kernel calls it...

CVE-2026-102714: Out-of-bounds Read

nxicmpv6validateoptions scans the option area with while length 2 common/src/nxicmpv6validateoptions.c:79. An area whose size leaves a one- or two-byte residue exits the loop with that tail unexamined; the residue is not negative, so the function returns NXSUCCESS. Its zero-length rejection never...

CVE-2026-39117: Improper Control of Generation of Code

An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary code via the index.php...

CVE-2026-102726: Out-of-bounds Read

Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read...

CVE-2026-102729: Incorrect Calculation of Buffer Size

gxbinresthemeload sizes its theme buffer for the theme it was asked for, and allocates it even when the resource holds no theme with that id. A theme id at or past the theme count declared by the resource gets a buffer of zero bytes. The load pass then walks past the end of the theme table, takes...

CVE-2026-102724: NULL Pointer Dereference

NULL Pointer Dereference When Evicting the Sole MSRP Attribute...

CVE-2026-101268: Session Fixation

If an attacker is able to convince a victim on a specially crafted link, the victim is logged in to the attacker's customer account. If the victim does not notice this, this might lead to their order details being stored into the attacker's account. The attack only works when the event is availab...

CVE-2026-22101: Exposure of Sensitive Information to an Unauthorized Actor

The access to the service menu is obfuscated, but possible with only physical access. This menu exposes sensitive information such as serial numbers, MAC addresses, and WiFi network and password...