Exploit for Interpretation Conflict in Wordpress

wp2exp2026 🔥 WordPress All-in-One Exploit Framework — De...

skill-scanner v2.0.13

Skill Scanner A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. Combines pattern-based detection YAML + YARA, LLM-as-a-judge , and behavioral dataflow analysis to maximize detection coverage of probable threats while...

Sharp Network Scanner Tool insecure initial configuration

Overview Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation are Windows applications which work as FTP servers and accept scan outputs from MFPs. With the initial configuration, anyone can upload files unlimitedly without authentication. Initialization of a Resource...

CVE-2026-14192: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Stored XSS. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-14202: Observable Response Discrepancy

Observable response discrepancy vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Account Footprinting. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-64630: Incorrect Authorization

A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link...

CVE-2026-58074: Improper Control of Generation of Code

A vulnerability allowing a high-privileged user to execute arbitrary code on the server...

CVE-2026-14175: Unrestricted Upload of File with Dangerous Type

Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-24083: Untrusted Pointer Dereference

Memory Corruption while processing IOCTL device driver requests with invalid arguments...

CVE-2026-24076: Buffer Copy without Checking Size of Input

Memory Corruption when processing registry values with incorrect types using a direct query method...

CVE-2026-15721: Cleartext Storage of Sensitive Information

Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows SQL Injection. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-64633: Improper Control of Generation of Code

A vulnerability allowing remote unauthenticated code execution on the agent host...

CVE-2026-24079: Missing Authentication for Critical Function

Cryptographic Issue while processing registration requests with malformed or missing authentication parameters...

CVE-2026-24078: Exposure of Private Personal Information to an Unauthorized Actor

Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling...

CVE-2026-18650: Missing Authorization

Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Privilege Escalation. This issue affects Liman MYS: from 2.2.3 before 2.3.1...

CVE-2026-64631: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability allowing a low-privileged user to inject SQL and extract database contents...

CVE-2026-18806: External Control of File Name or Path

External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. This issue affects pardus-image-writer: before 0.9.0...

CVE-2026-21366: Integer Overflow or Wraparound

Memory corruption while processing a packet with a size close to the maximum allowed value...

CVE-2026-14194: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Path Traversal. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-18819: Cross-Site Request Forgery (CSRF)

A security vulnerability has been detected in RackTables up to 0.22.0/e5fff9f8aab339798ed47e8c6d7d977ed97a82bd. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly...