CVE-2026-75860 JSON Options <= 0.0.4 - Unauthenticated Arbitrary Options Update

The JSON Options WordPress plugin through 0.0.4 does not have any capability check or nonce verification on one of its actions, which runs on every request and is available to unauthenticated users, allowing them to update arbitrary WordPress options. This can be leveraged to enable user...

CVE-2026-75860

The JSON Options WordPress plugin (versions through 0.0.4) exposes an unauthenticated action on every request without capability checks or nonce verification, allowing arbitrary option updates. An attacker can enable user registration and set the default role to administrator, achieving privilege...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-140.14.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-140.14.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...

GHSA-PPH6-FVMV-FJRC vulnerabilities

Vulnerabilities for packages: exim...

GHSA-Q496-Q274-JGH9 vulnerabilities

Vulnerabilities for packages: exim...

connectwise-automate-AiTM-rce

ConnectWise Automate 中间人攻击远程代码执行 目录 背景 时间线 思考与经验 负责任的披露 PoC 代码 提供给 ConnectWise 的报告 摘要 易受攻击的配置 影响 技术细节 1. HTTP 传输 2. 协议安全性不足（缺少加密和验证） 2.1 依赖检查和下载时验证不足 2.2 缺乏重放保护 2.3 自更新时验证不足 3. RMM 命令控制接管 缓解措施 背景 在一次渗透测试中，我发现了 ConnectWise Automate 远程监控与管理（RMM）代理中的多个漏洞。ConnectWise...

CVE-2026-72522 affecting package expat for versions less than 2.8.3-1

CVE-2026-72522 affecting package expat for versions less than 2.8.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70460 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70460 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73071 affecting package vim for versions less than 9.2.0957-1

CVE-2026-73071 affecting package vim for versions less than 9.2.0957-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70463 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70463 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70461 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70461 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70455 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70455 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73076 affecting package vim for versions less than 9.2.0957-1

CVE-2026-73076 affecting package vim for versions less than 9.2.0957-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73078 affecting package vim for versions less than 9.2.0957-1

CVE-2026-73078 affecting package vim for versions less than 9.2.0957-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70459 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70459 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-4224 affecting package python3 for versions less than 3.12.14-1

CVE-2026-4224 affecting package python3 for versions less than 3.12.14-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73077 affecting package vim for versions less than 9.2.0957-1

CVE-2026-73077 affecting package vim for versions less than 9.2.0957-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70464 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70464 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

Security update for gitea-tea (important)

openSUSE security update: security update for gitea-tea ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21603-1 Rating: important References: bsc1234598 bsc1235367 bsc1239493 bsc1241819 bsc1251471 bsc1251663 bsc1253576 Cross-References: CVE-2024-453...