EUVD-2026-62400

nnn does not sanitize the path variable. An attacker can create a directory on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim enters that directory in nnn and uses the batch copy or move workflow, the...

WordPress Batch-Move Posts plugin <= 1.5 - Broken Authentication vulnerability leading to Unauthenticated Stored Cross-Site Scripting (XSS)

Broken Authentication vulnerability leading to Unauthenticated Stored Cross-Site Scripting XSS discovered Noman Riffat in WordPress Batch-Move Posts plugin versions = 1.5. Solution Plugin closed. Deactivate and delete...