23013 matches found
WordPress WP Maps plugin < 4.9.3 - Subscriber+ Local File Inclusion vulnerability
Subscriber+ Local File Inclusion vulnerability discovered by Mustafa Ahmed in WordPress Plugin WP Maps versions 4.9.3...
WordPress WP eCommerce plugin <= 3.15.1 - Coupon Deletion via CSRF vulnerability
Coupon Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WP eCommerce versions = 3.15.1...
Children’s phones must block nude images by September, UK says
Build something that doesn't exist. Don't collect any data while you do it. Get it wrong and the CEO could face criminal charges. That's close to the ultimatum the UK government handed Apple and Google on June 8. The two companies have three months to introduce device-level protections blocking...
CVE-2023-40200
Authorization bypass through User-Controlled key vulnerability in Essential Plugin WP Logo Showcase Responsive Slider and Carousel allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Logo Showcase Responsive Slider and Carousel: from n/a through 3.6...
SQLite before 3.53.2 Memory Corruption in FTS5 Extension
...
GHSA-C4FP-CXRR-MJ66 vulnerabilities
Vulnerabilities for packages: logstash, kube-fluentd-operator, ruby3.2-rails, ruby4.0-rails, jruby, ruby3.4-rails, kube-logging-operator, ruby3.3-rails...
CVE-2026-47242 vulnerabilities
Vulnerabilities for packages: logstash, kube-fluentd-operator, ruby3.2-rails, ruby4.0-rails, jruby, ruby3.4-rails, kube-logging-operator, ruby3.3-rails...
GHSA-C4FP-CXRR-MJ66 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, logstash-fips, ruby3.2-rails, logstash, ruby4.0-rails, jruby, kube-logging-operator, gitlab-rails-ce, ruby3.4-rails, truffleruby, ruby3.3-rails, gitlab-rails-ce-fips...
CVE-2026-47241 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, logstash-fips, ruby3.2-rails, logstash, ruby4.0-rails, jruby, kube-logging-operator, gitlab-rails-ce, ruby3.4-rails, truffleruby, ruby3.3-rails, gitlab-rails-ce-fips...
CVE-2026-42305
creationtimestamp| type| source ---|---|--- 2026-06-11 01:01:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnxzms4j7p26 2026-06-11 02:54:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mny7xmg4vu2h 2026-06-11 03:37:00+00:00| seen|...
PT-2026-48669
Name of the Vulnerable Software and Affected Versions IBM Security QRadar EDR versions 3.12 through 3.12.24 Description User credentials are stored in plain text, which allows a local privileged user to read this sensitive information. Recommendations At the moment, there is no information about ...
PT-2026-48675
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege...
📄 MEmu Android Emulator 9.2.7.0 Privilege Escalation
MEmu Android Emulator version 9.2.7.0 suffers from a local privilege escalation vulnerability via insecure permissions. CVE-2026-36213 CVE-2026-36213 | Local Privilege Escalation in MEmu Android Emulator 9.2.7.0 via Insecure Service Binary Permissions | Patched in 9.3.2 CVE-2026-36213 — MEmu...
aioHTTP < 3.14.0 Multiple Vulnerabilities
The version of aioHTTP installed on the remote host is prior to 3.14.0. It is, therefore, affected by multiple vulnerabilities: - AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.14.0, using CookieJar.load with untrusted input may allow arbitrary...
CVE-2026-38581
SQL Injection vulnerability in damasac thaipalliativelte through version 3.0 allows remote attackers to execute arbitrary SQL commands via the idFormMain parameter to /substudy/ezform.php line 14 and the id parameter line 49. The parameters are concatenated directly into SQL queries without...
PT-2026-48727
Name of the Vulnerable Software and Affected Versions SolidInvoice versions prior to 2.3.17 Description The company logo upload feature lacks validation for uploaded file types. An authenticated administrator can upload an SVG file containing base64-encoded JavaScript. This script is injected...
PT-2026-48791
ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - 129, the actions/progress video.php endpoint is vulnerable to blind SQL injection. Any unauthenticated user can exploit the ids parameter to execute SQL queries and exfiltrate sensitive data. This issue has been...
Thai Palliative SQL注入漏洞
Thai Palliative is a modified version of the PHP framework developed by DAMASAC KKU. Versions of Thai Palliative 3.0 and earlier have a SQL injection vulnerability. This vulnerability arises from the lack of cleaning or parameterization of the idFormMain parameter and the id parameter, which may...
DEBIAN-CVE-2026-53465
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, a crafted multi-frame can result in a heap buffer over-write when encoding it with the SF3 encoder. This issue has been patched in version 7.1.2-25...
CVE-2026-47165
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, the distributed pixel cache was originally designed to operate without a challenge–response authentication model. This has been changed in versions 6.9.13-48 an...