WordPress Travelly cross-site scripting vulnerability

WordPress Travelly versions 2.3.6 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from insufficient input sanitization and output escaping of width, height, and zoom attributes in the ttbm-hotel-map shortcode. The ttbmhotelmapshortcode function concatenates thes...

CVE-2026-109384: melograno The Innovative Form Builder – IvyForms: The The Innovative Form Builder – IvyForms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions…

The The Innovative Form Builder – IvyForms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the filterFiletypeAndExt function. This is due to insufficient file type validation due to the absence of a dangerous-extension denylist in the...

A2UI resource management error vulnerability

Versions A2UI 0.10.6 and earlier contain a resource management error vulnerability. This vulnerability stems from improper handling of the DataModel.set function in the file renderers/webcore/src/v09/state/data-model.ts, potentially leading to excessive resource consumption...

PT-2026-129178

Name of the Vulnerable Software and Affected Versions Echo versions prior to 4.15.2 Echo versions prior to 5.1.1 Description The Scheme function in the Echo web framework trusts the X-Forwarded-Proto, X-Forwarded-Protocol, and X-Url-Scheme request headers without validating that the values are...

CVE-2026-111068: justinnealey DesignSetGo: The DesignSetGo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tagName' parameter in all…

The DesignSetGo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tagName' parameter in all versions up to, and including, 2.11.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access...

CVE-2026-118577: maotoumao MusicFreeDesktop: A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8

A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. Impacted is an unknown function of the component Request Forwarder. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit is publicly available and might be...

CVE-2026-118613: Deserialization of Untrusted Data

Ultralytics torchload Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2026-61569: WWBN AVideo-Encoder: AVideo is a video-sharing Platform

AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated streamer login at objects/login.json.php passes the user parameter to Streamer::get in objects/Streamer.php, where it is interpolated into a single-quoted MariaDB SELECT without parameterization or escaping. Although...

CVE-2026-84999: Pie Register Pie Register Premium: The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and…

The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 3.8.4.0 via the pieregfileupload function. This is due to the plugin performing file type validation via wpcheckfiletype and wpcheckfiletypeandext but never checking...

PT-2026-129130

An access control bypass flaw was found in Samba's vfs ceph rgw module in it's openat function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfs ceph rgw module. When a client requests an existing file using...

CVE-2026-99126: Linux: In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Prevent XID null dereference The…

In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Prevent XID null dereference The mpcvalidatexid function sets grp-savedxid2-xid2flag2 to 0x40 to signal XID validation error. If peer XID is NULL or r/w channel pairing mismatch happens, grp-savedxid2 is never...

CVE-2026-103409: Juniper Networks Session Smart Router: A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an…

A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthenticated network-based attacker to obtain administrative privileges by passing crafted URL parameters to an insecure endpoint running as root. Note that this vulnerability can on...

PT-2026-129182

Name of the Vulnerable Software and Affected Versions happy-dom versions prior to 20.14.6 Description Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. The CookieContainer in src/cookie/CookieContainer.ts does not correctly validate or match Domain...

PT-2026-129186

Name of the Vulnerable Software and Affected Versions @graphql-tools/executor-legacy-ws versions prior to 1.1.36 Description In the buildWSLegacyExecutor function within packages/executors/legacy-ws/src/index.ts, the executorConnectionParams object is retained in the closure scope after a...

PT-2026-129230

A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. This issue affects the function find feeds of the file feedfinder2.py. Performing a manipulation results in server-side request forgery. Remote exploitation of the attack is possible. The project was informed of the problem early...

Ultralytics command injection vulnerability

Version 8.4.65 of Ultralytics contains a command injection vulnerability. This flaw arises because the torchsafeload function fails to perform adequate validation on user-supplied strings prior to invoking system calls; as a result, remote attackers can execute arbitrary code after users have...

OpenCATS input validation error vulnerability

Versions prior to OpenCATS 0.10.0 contain a security vulnerability. This vulnerability arises because the manageProfessional function in SettingsUI fails to properly escape input from administrators; it instead reuses the license key input as a PHP define statement within config.php. This may lea...

ROS-20261028-73-0004

The vulnerability in the sshpacketreadpoll2 function within the packet.c file of the OpenSSH cryptographic library is caused by a buffer overflow. Exploitation of this vulnerability enables a remote attacker to cause a denial of service memory read beyond bounds, application termination via...

PT-2026-128224

Name of the Vulnerable Software and Affected Versions Waline versions prior to 1.41.1 Description The login endpoint 'POST /api/token' reads the email field from the request body without type validation and passes it directly into a MongoDB storage query. If the email field is provided as a...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.19. It stems from improper handling by the calipsoskbuffsetattr function when adjusting payloadlen for BIG TCP packets exceeding IPV6MAXPLEN. This may lead to incorrect packet length calculations or arithmetic overflow, affecting nftables,...