PT-2026-99491

Name of the Vulnerable Software and Affected Versions UpdraftPlus: WP Backup & Migration Plugin versions prior to 1.26.8 UpdraftPlus: WP Backup & Migration Plugin versions prior to 2.26.8.26 Description A missing capability check in a routine that outputs stored remote storage settings into admin...

CVE-2026-97164: Improper Limitation of a Pathname to a Restricted Directory

Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in clear cache task in Event Gallery extension 6.5.0 - Using the images parameter of the cache.process task, you can recursively delete any directories that the web server is authorized to write to...

PT-2026-99716

Name of the Vulnerable Software and Affected Versions Nezha versions 2.2.11 through 2.3.0 Description The service sentinel worker in service/singleton/servicesentinel.go contains an incomplete fix for a nil dereference issue. An authenticated user with the member role who owns an agent can trigge...

PT-2026-99715

Name of the Vulnerable Software and Affected Versions Nezha versions 2.0.10 through 2.3.2 Description The software uses a restricted HTTP client to validate user-configurable notification and DDNS webhook URLs. However, the denylist fails to cover specific IPv6 transition ranges, namely the 6to4...

CVE-2026-100861: Server-Side Request Forgery (SSRF)

heym before 0.0.105 fails to apply egress guards to integration services that use credential-supplied base URLs, allowing authenticated users to bypass SSRF protections. Attackers can configure credentials pointing to loopback, private, or cloud-metadata addresses and read internal service...

CVE-2026-101087: Server-Side Request Forgery (SSRF)

Nezha versions 2.0.10 through 2.3.2 use a restricted HTTP client to validate user-configurable notification and DDNS webhook URLs, but the denylist did not cover IPv6 transition ranges — specifically the 6to4 prefix 2002::/16 and the local-use IPv4/IPv6 translation prefix 64:ff9b:1::/48. Because...

CVE-2026-100836: Improper Validation of Array Index

Contrast through 1.20.0 contains a panic vulnerability in the transit-engine endpoint's ciphertextContainer.UnmarshalJSON function that fails to validate decoded ciphertext length before slicing. An authenticated workload with a valid mesh certificate can trigger a runtime panic by submitting a...

PT-2026-99534

Name of the Vulnerable Software and Affected Versions Event Gallery versions prior to 6.5.0 Description An authenticated user can perform arbitrary path deletion through the clear cache task. By manipulating the images parameter within the cache.process task, it is possible to recursively delete...

CVE-2026-100855: Missing Authorization

AzuraCast before 0.23.6 contains a missing permission check vulnerability in the GET /api/station/stationid/file/id/play endpoint that allows authenticated users to download media files from any station. Attackers can enumerate media files using sequential IDs and exfiltrate the complete media...

CVE-2026-82841: Exposure of Sensitive Information to an Unauthorized Actor

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.8, UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 2.26.8.26 does not have any capability check in a routine that outputs its stored remote storage settings into admin pages when the site is left in a...

Exploit for CVE-2026-97160

CVE-2026-97160 — UP Plugin PHP Code Injection Joomla Python...

CVE-2026-78582

Kibana is vulnerable to a Missing Authorization (CWE-862) flaw that allows an authenticated user with Synthetics privileges in a single space to permanently delete Synthetics monitors shared in other spaces where they lack access. If a monitor is associated with a private location, the operation ...

magento-instant-purchase-custom-price

abraxaslabs.tech · github.com/abraxas ·&...

Exploit for Unrestricted Upload of File with Dangerous Type in Zohocorp Manageengine_Applications_Manager

CVE-2020-14008 — ManageEngine Applications Manager Remote Code...

CVE-2026-97160

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...

CVE-2026-97160 Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...

CVE-2026-97160

The UP (Universal Plugin) for Joomla (path: plugins/content/up/) is vulnerable to PHP code injection in versions 5.0.0–5.2.0 and 6.0.0–6.0.29 . The root cause is the use of eval() (CWE-94) to process {up php=...} shortcodes. While typically requiring high privileges, older builds allow article au...

EUVD-2026-87778

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...

CVE-2026-97160 Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...

CVE-2026-100718

Froxlor through 2.3.10 does not enforce the mail.allowexternaldomains policy in the EmailSender.add API command. When an administrator has enabled the allowed-sender feature but disabled external allowed-sender domains mail.enableallowsender = 1, mail.allowexternaldomains = 0, an authenticated...