CVE-2026-34900: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in GiveWP = 4.14.2 versions...

CVE-2026-49062: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation. This issue affects Faust.Js: from n/a through 1.8.7...

CVE-2026-49106: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact = 1.1.6 versions...

CVE-2026-39478: Deserialization of Untrusted Data

Contributor PHP Object Injection in Anti-Malware Security and Brute-Force Firewall = 4.23.87 versions...

CVE-2026-40799: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in Simple Cloudflare Turnstile = 1.38.0 versions...

CVE-2026-42639: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in GD Rating System = 3.6.2 versions...

CVE-2026-34902: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WooCommerce Product Table Lite = 4.6.3 versions...

CVE-2026-39447: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Simply Schedule Appointments = 1.6.10.6 versions...

CVE-2026-40762: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in WPGraphQL 2.11.1 versions...

CVE-2026-39450: Authentication Bypass Using an Alternate Path or Channel

Subscriber Broken Authentication in FunnelKit Automations = 3.7.3 versions...

CVE-2026-24637: Improper Neutralization of Special Elements used in an SQL Command

Contributor SQL Injection in PowerPress Podcasting = 11.15.10 versions...

TechMyst-Toolkit

TechMyst-Toolkit "An automated Bug...

web-vulnerability-scanner

No d...

Exploit for CVE-2026-20230

CVE-2026-20230 Scanner A Python-based scanner and validation...

CVE-2026-6676: Out-of-bounds Write

Heap buffer out-of-bounds write vulnerability in Avira Antivirus engine when scanning a malformed POSIX tar archive may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before...

CVE-2025-9032: Out-of-bounds Read

Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70....

CVE-2025-9033: Out-of-bounds Read

Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.76...

CVE-2025-14098: Out-of-bounds Write

Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a malformed MS-DOS executable file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux...

CVE-2026-41158: Use After Free

Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physical pages. Physical memory allocated and freed, without the deferred free mechanism can lead to those resources being used for read/write by the GPU after the kernel module has freed...

CVE-2026-41155: Improper Isolation or Compartmentalization

An attacker could cooperatively pass data from one secure GPU process to another secure GPU process through shared secure memory allocations in the kernel module. Additionally, an attacker could disrupt the operation of another secure GPU process leading to image corruption / GPU hardware recover...