CVE-2026-4786

CVE-2026-4786 notes incomplete mitigation of CVE-2026-4519. The issue arises when a URL contains "%action" allowing bypass of mitigation for certain browser types in Python's webbrowser.open(), enabling potential commands injected into the underlying shell. Connected CVE-4519 details indicate the...

OliveTin has Unauthenticated Action Termination via KillAction When Guests Must Login

Summary OliveTin allows an unauthenticated guest to terminate running actions through KillAction even when authRequireGuestsToLogin: true is enabled. In the tested release 3000.10.2, guests are correctly blocked from dashboard access, but an still call the KillAction RPC directly and successfully...

CVE-2019-15825

The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass...