📄 WordPress User Registration and Membership 4.1.2 Authentication Bypass

Proof of concept exploit for WordPress User Registration and Membership plugin versions 4.1.2 and below. These versions contain a critical authentication bypass vulnerability that allows unauthenticated attackers to gain unauthorized access to user accounts, including administrative privileges, b...

PT-2026-6791

Name of the Vulnerable Software and Affected Versions UTT 进取 520W version 1.7.7-180627 Description A flaw exists in UTT 进取 520W. A buffer overflow can occur in the strcpy function within the file /goform/formIpGroupConfig when the groupName argument is manipulated. This issue is remotely...

openSUSE Security Advisory (SUSE-SU-2026:0371-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2026-6798

Name of the Vulnerable Software and Affected Versions Trilium Notes versions prior to 0.101.0 Description Trilium Notes is a cross-platform note taking application. A timing attack in the sync authentication endpoint allows unauthenticated remote attackers to recover HMAC authentication hashes...

CVE-2026-23796

Quick.Cart allows a user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. This behaviour enables an attacker to fix a session ID for a victim and later hijack the authenticated session. The vendor was notified early about this...

CVE-2026-25198

CVE-2026-25198 affects web2py, specifically versions 2.27.1-stable+timestamp.2023.11.16.08.03.57 and earlier, with an open redirect vulnerability. The underlying issue allows an attacker to redirect a user to an arbitrary website via specially crafted URLs, enabling phishing risk. The connected d...

PT-2026-6572

Name of the Vulnerable Software and Affected Versions ZOC Terminal version 7.25.5 Description ZOC Terminal version 7.25.5 contains a script processing issue that allows local attackers to crash the application. This occurs when loading a maliciously crafted REXX script file. An attacker can...

Amazon Linux 2 : cni-plugins, --advisory ALAS2-2026-3134 (ALAS-2026-3134)

The version of cni-plugins installed on the remote host is prior to 1.7.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3134 advisory. net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in brace-expansion-1.1.11.tgz

Summary IBM Watson Discovery Cartridge affected by vulnerability in brace-expansion-1.1.11.tgz Vulnerability Details CVEID:CVE-2025-5889 DESCRIPTION: A vulnerability was found in juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0. It has been rated as problematic. Affected by this issue ...

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2127 more potentially affected by CVE-2026-25536 via @modelcontextprotocol/sdk (>=1.10.0, <=1.25.3)

@modelcontextprotocol/sdk NPM version =1.10.0, =0.3.3, =1.0.0, =1.14.1, =1.0.0, =1.2.1, =0.1.4, =0.0.1, =0.0.1, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =10.1.0-rc.1, =10.2.1 and more Source cves: CVE-2026-25536 Source advisory: OSV:GHSA-345P-7CG4-V4C7...

@n8n/backend-test-utils (>=1.0.0-rc.0, <=1.0.3), @n8n/db (>=1.0.0-rc.0, <=1.0.3) +2 more potentially affected by CVE-2026-25051 via n8n-core (>=2.0.0, <=2.0.2)

n8n-core NPM version =2.0.0, =1.0.0-rc.0, =1.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.0.1 Source cves: CVE-2026-25051 Source advisory: SNYK:JS-N8NCORE-15223562...

4m-node-server (>=0.0.1, <=0.0.8), @2109-t5/server (>=1.0.0, <=1.0.9) +989 more potentially affected by CVE-2026-23897 via apollo-server (>=0.1.5, <=3.13.0)

apollo-server NPM version =0.1.5, =0.0.1, =1.0.0, =0.5.0, =0.0.1, =0.1.1, =0.0.1, =1.0.7, =0.4.0-alpha.0, =10.4.0, =9.0.0, =10.0.0, =11.2.0 and more Source cves: CVE-2026-23897 Source advisory: SNYK:JS-APOLLOSERVER-15208674...

@24hr/rawb-search (>=0.5.0, <=0.29.10), @a11ywatch/a11ywatch (>=0.0.1, <=0.3.82) +574 more potentially affected by CVE-2026-23897 via apollo-server (>=2.0.0, <=3.12.0)

apollo-server NPM version =2.0.0, =0.5.0, =0.0.1, =0.1.1, =0.4.0-alpha.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0-SNAPSHOT1, =0.3.0-SNAPSHOT1, =0.3.0-SNAPSHOT1, =0.4.3, =2018.8.29-0, =2018.8.28-0, =2018.10.8-2 and more Source cves: CVE-2026-23897 Source advisory: OSV:GHSA-MP6Q-XF9X-FWF7...

@react-portable/core (>=0.4.0, <=0.11.2), storybook-framework-qwik (>=0.3.0, <=0.4.0) potentially affected by CVE-2026-25150 via @builder.io/qwik-city (>=1.2.6, <=1.4.1)

@builder.io/qwik-city NPM version =1.2.6, =0.4.0, =0.3.0, =0.4.0 Source cves: CVE-2026-25150 Source advisory: SNYK:JS-BUILDERIOQWIKCITY-15202068...

CVE-2025-62501

SSH Hostkey misconfiguration vulnerability in TP-Link Archer AX53 v1.0 tmpserver modules allows attackers to obtain device credentials through a specially crafted man‑in‑the‑middle MITM attack. This could enable unauthorized access if captured credentials are reused.This issue affects Archer AX53...

CVE-2025-58077

Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 tmpserver modules allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code via a specially crafted set of network packets containing an excessive number of host entries This iss...

CVE-2026-22228 Improper Input Validation Leading to DoS on TP-Link Archer BE230

An authenticated user with high privileges may trigger a denial‑of‑service condition in TP-Link Archer BE230 v1.2 by restoring a crafted configuration file containing an excessively long parameter. Restoring such a file can cause the device to become unresponsive, requiring a reboot to restore...

CVE-2026-25059

OpenList Frontend is a UI component for OpenList. Prior to 4.1.10, the application contains path traversal vulnerability in multiple file operation handlers in server/handles/fsmanage.go. Filename components in req.Names are directly concatenated with validated directories using stdpath.Join. Thi...

@amedia/brick-mcp (>=0.0.0-vEXPORT-20260113150210, <=0.1.5), @andesite-lab/andesite-core (>=1.60.2, <=1.61.0) +263 more potentially affected by CVE-2026-25223 via fastify (>=5.0.0, <=5.7.1)

fastify NPM version =5.0.0, =0.0.0-vEXPORT-20260113150210, =1.60.2, =2.0.1, =1.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.35, =0.0.82, =0.0.1, =0.0.6, =0.1.68, =6.0.0-alpha.1, =0.2.305, =1.0.6, =1.0.22 and more Source cves: CVE-2026-25223 Source advisory: OSV:GHSA-JX2C-RXCM-JVMQ...

@activepieces/piece-snowflake (>=0.2.1, <=0.3.0), @bhanu17/nextjs-starter (>=1.2.0, <=2.2.14) +95 more potentially affected by CVE-2026-3449 via @tootallnate/once (2.0.0)

@tootallnate/once NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @tootallnate/once and may be impacted: - @activepieces/piece-snowflake =0.2.1, =1.2.0, =0.0.18, =0.2.0, =0.0.6, =0.0.1, =50.32.5-depup.0, =0.6.0, =0.4.2, =0.1.10,...