PT-2026-90597

🚨 CVE-2026-78159 The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.3 via the parse array function. This is due to insufficient validation of the widget 'classes' map, allowing a plain-array payload to bypass the is safe...

Malicious code in parse-tree-array-function-decode (npm)

The package parse-tree-array-function-decode was found to contain malicious code...

CVE-2021-32530

OS command injection vulnerability in Array function in QSAN XEVO allows remote unauthenticated attackers to execute arbitrary commands via status parameter. The referred vulnerability has been solved with the updated version of QSAN XEVO v2.1.0...

CVE-2008-1612

The arrayShrink function lib/Array.c in Squid 2.6.STABLE17 allows attackers to cause a denial of service process exit via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239...