91234 matches found
CVE-2026-18630: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows SQL Injection. This issue affects Talassoft Industrial Management Software: from V.4 before V.16...
CVE-2026-51788: Uncontrolled Resource Consumption
An issue in cleverangeauth v.0.1.10 allows a remote attacker to cause a denial of service via the accountverification function and the accounts/models.py component...
CVE-2024-7953: Improper Access Control
A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If exploited, a threat actor could create, modify, and delete their own project...
CVE-2026-18780: Cross-Site Request Forgery (CSRF)
Cross-Site request forgery CSRF vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Cross Site Request Forgery. This issue affects Talassoft Industrial Management Software: from V.4 before V.16...
ship-safe v9.7.5
The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute Ship Safe CLI Ship Safe runs locally in your repo and works in two layers. A...
CVE-2026-81778: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in Kalles Addons = 1.0.6 versions...
CVE-2026-81758: Missing Authorization
Subscriber Broken Access Control in OwnerRez API = 1.2.6 versions...
CVE-2026-81296: Missing Authorization
Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack = 6.2.12 versions...
CVE-2026-81764: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Email Essentials = 6.0.6 versions...
CVE-2026-82228: Authentication Bypass by Spoofing
Unauthenticated Bypass Vulnerability in SiteGround Security = 1.6.6 versions...
CVE-2026-81763: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Throws SPAM Away = 3.8.2 versions...
CVE-2026-81298: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in LeadConnector = 4.0.5 versions...
CVE-2026-81297: Incorrect Privilege Assignment
Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack = 6.2.12 versions...
CVE-2026-81293: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...
CVE-2026-81287: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Charitable = 1.8.12.1 versions...
CVE-2023-31308: Improper Validation of Array Index
A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read...
CVE-2026-83492: Improper Input Validation
Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affects Kubio AI Website Builder: before 2.9.1...
CVE-2026-49003: Improper Authentication
Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing the monitoring module to crash and become paralyzed; simultaneously, they can obtain root privileges to steal configuration passwords such as SNMP, thereby tampering with critical system parameter...
CVE-2026-81756: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms = 5.1.24 versions...