24674 matches found
GHSA-7JX5-9FJG-HP4M
creationtimestamp| type| source ---|---|--- 2026-02-27 23:10:11+00:00| seen| https://gist.github.com/alon710/0dcef91400c9361c9eb058c2c8a6df3b...
CVE-2026-27582
Further research determined the situation described is not a vulnerability...
CVE-2026-27580
Further research determined the situation described is not a vulnerability...
CVE-2026-27500
Further research determined the situation described is not a vulnerability...
CVE-2026-1305
The CVE-2026-1305 entry concerns the WordPress plugin Japanized for WooCommerce (WooCommerce for Japan) with an authentication bypass vulnerability. The root cause is a flawed paidy_webhook_permission_check that unconditionally returns true when the webhook signature header is omitted, allowing u...
WordPress Fluent Forms Pro Add On Pack plugin <= 6.1.17 - Missing Authorization to Unauthenticated Payment Status modification vulnerability
Missing Authorization to Unauthenticated Payment Status modification vulnerability discovered by Prickly Cactus in WordPress Plugin Fluent Forms Pro Add On Pack versions = 6.1.17...
GHSA-7GCC-R8M5-44QM
creationtimestamp| type| source ---|---|--- 2026-02-27 02:40:18+00:00| seen| https://gist.github.com/alon710/9c24edd6758ed34c527e00be66673a79...
GHSA-VJF3-2GPJ-233V
creationtimestamp| type| source ---|---|--- 2026-02-27 02:10:20+00:00| seen| https://gist.github.com/alon710/ebc773370e1f1607b2bfdb1617822e65 2026-07-06 07:58:49+00:00| seen| https://gist.github.com/alon710/d7446e83b138301fa78ba45ab4a16d68 2026-07-06 07:59:30+00:00| seen|...
CVE-2026-25085 Copeland XWEB and XWEB Pro Unexpected Status Code or Return Value
A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a legitimate value, resulting in an authentication bypass...
GHSA-WPPC-7CQ7-CGFV
creationtimestamp| type| source ---|---|--- 2026-02-26 22:10:19+00:00| seen| https://gist.github.com/alon710/3876c0d5d37ba696379319dc0ea4cb02...
CVE-2026-26979 Discourse: TL4 users are able to change status of restricted topics
Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, TL4 users are able to close, archive and pin topics in private categories they don't have access to. Versions 2025.12.2, 2026.1.1, and 2026.2.0 patch the issue. No known workarounds are available...
CVE-2026-2679
creationtimestamp| type| source ---|---|--- 2026-02-26 16:37:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfrmyxkigp2k...
GHSA-42WG-38GX-85RH
creationtimestamp| type| source ---|---|--- 2026-02-26 15:40:19+00:00| seen| https://gist.github.com/alon710/ef8daafa48df3faf43c600dde2331d8a...
CVE-2026-26077
Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, several webhook endpoints SendGrid, Mailjet, Mandrill, Postmark, SparkPost in the WebhooksController accepted requests without a valid authentication token when no token was configured. This...
GHSA-76M6-PJ3W-V7MF
creationtimestamp| type| source ---|---|--- 2026-02-26 05:13:40+00:00| seen| https://gist.github.com/rollkoffers-gaston/46391c991c70a7d70cdb0c31d53558a9...
The vulnerability of the raid_status() function in the drivers/md/dm-raid.c module of the Linux operating system’s device driver for multiple devices (RAID and LVM), which allows an attacker to access protected information or cause service failures.
The vulnerability of the raidstatus function in the drivers/md/dm-raid.c module of the Linux device driver for multiple devices RAID and LVM involves buffer overflow attacks. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...
CVE-2026-25164
creationtimestamp| type| source ---|---|--- 2026-02-25 19:58:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfphpzplwj2c 2026-02-27 22:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfuqlwszid2a...
GHSA-X43W-PH7M-PFJX hexchat crate has a Use After Free vulnerability
All versions of this crate have function deregistercommand which can result in use after free. This is unsound. In addition, all versions since 0.3.0 have "safe" macros, which are documented as unsafe to use in threads. In addition, the hexchat crate is no longer actively maintained. If users rel...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the DecodeImage process. An attacker can access sensitive information from adjacent memory by submitting a specially crafted PCD file. Remediation A fix was pushed into the master branch but not yet published...