463826 matches found
PT-2026-116549
The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching it server-side and writing the response to a publicly accessible location under an attacker-chosen filename, allowing users with the Salon Staff role or higher to force the server...
CVE-2026-110976: Missing Authorization
The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs to the requesting user before converting it to an attachment and permanently deleting it, allowing users with the Editor role and above to delete arbitrary posts of any type,...
CentOS Linux 6 [TuxCare] Security Update: rsync Multiple Vulnerabilities (CENTOS6:CLSA-2026:1791971338)
The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1791971338 advisory. - rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destinatio...
Linux Distros Unpatched Vulnerability : CVE-2026-98760
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: tipd: fix uninitialized typecpartnerdesc in tps6598xconnect tps6598xconnect passes a stack-allocated typecpartnerdesc to typecregisterpartner after...
go-git 5.19.1 Reference Name Path Traversal
go-git version 5.19.1 contains a path traversal issue in filesystem-backed loose-reference storage. This proof of concept safely demonstrates a crafted reference name overwriting a temporary .git/config file. https://packetstorm.news/download/236148...
WordPress WooCommerce Designer Pro 1.9.26 Arbitrary File Upload
WordPress WooCommerce Designer Pro versions 1.9.26 and prior contain an unauthenticated arbitrary file upload vulnerability in the wcdpsavecanvasdesignajax handler that may allow remote code execution. https://packetstorm.news/download/236146...
MLflow 3.17.1 and Prior StartTrace Path Traversal
MLflow version 3.17.1 and prior versions using the FileStore tracking backend contain a path traversal vulnerability in the StartTraceV3 API. The proof of concept submits a traversal trace ID and demonstrates trace files written outside the intended trace directory...
Vite 6.2.3 Arbitrary File Read
Vite versions before 4.5.11, 5.4.16, 6.0.13, 6.1.3, and 6.2.4 contain server.fs.deny bypasses that may expose arbitrary files through the development server. This proof of concept identifies exposed Vite servers and validates filesystem reads. https://packetstorm.news/download/236143...
Roundcube Webmail 1.6.10 PHP Object Deserialization
Roundcube Webmail version 1.6.10 contains a post-authentication PHP object deserialization vulnerability that can allow arbitrary command execution. Included are a CTF environment and proof of concept exploit. https://packetstorm.news/download/236152...
CentOS Linux 7 [TuxCare] Security Update: rsync Multiple Vulnerabilities (CENTOS7:CLSA-2026:1791972286)
The CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1791972286 advisory. - rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an attacker who c...
CVE-2026-78497: Improper Neutralization of Directives in Dynamically Evaluated Code
JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval. The pattern given to test, match, or the match and = conditions of select is placed in a qr'...' literal and compiled as source text, so a ? ... code block in it run...
Security update for pgvector (important)
openSUSE security update: security update for pgvector ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22065-1 Rating: important References: bsc1284129 Cross-References: CVE-2026-103484 CVSS scores: CVE-2026-103484 SUSE : 8.8...
Exploit for Deserialization of Untrusted Data in Roundcube Webmail
CVE-2025-49113 — ROUNDMAIL INCIDENT Roundcube PHP 객체 역직렬화 R...
Exploit for CVE-2026-53995
CVE-2026-53995: MLflow starttracev3 - TraceInfo.from...
yova_ps5
YOVA PS5 - Relapse Exploit Suite YOVA PS5 is a modern, hi...
cups: cups: Arbitrary code execution via newline injection in printer status messages
A flaw was found in CUPS. A remote attacker controlling a network printer can achieve arbitrary code execution by returning crafted printer status messages containing newline characters. The CUPS Internet Printing Protocol IPP backend fails to sanitize line breaks in status attributes, allowing...
cups: cups: Arbitrary file overwrite via insecure temporary file handling
A flaw was found in CUPS. Insecure temporary file handling allows a local attacker with print administrative privileges to overwrite arbitrary system files. When configuring a printer, the print service creates a temporary file with a predictable name in a shared directory without verifying wheth...
WSO2 Enterprise Integrator command injection vulnerability
WSO2 Enterprise Integrator has a command injection vulnerability. This vulnerability stems from improper input validation in the Management Console’s handling of JDBC user storage configurations. It may allow attackers to execute arbitrary code on affected servers with WSO2 product privileges...
