2873 matches found
PT-2026-66517
Name of the Vulnerable Software and Affected Versions Apache Kyuubi versions 1.7.0 through 1.11.1 Description Improper handling of REST batch multipart uploads allows a remote attacker to use path traversal sequences in the client-supplied filename. This can lead to the server writing controlled...
Tame Dependabot: Group your updates, slow the cadence, keep security fast
If you maintain an active repository, you know the feeling. You open your notifications on a Monday morning and there they are: five, 10, sometimes a dozen Dependabot pull requests, each bumping a single dependency by a single patch version. Individually, every one of them is helpful. Collectivel...
Fedora 43 : wordpress (2026-46346e9637)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-46346e9637 advisory. Version 6.9.5 Security updates - A facilitated SQL injection issue - A REST API batch-route confusion and SQL injection issue leading to Remote Code Executio...
Malicious code in api-node-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8133fdea40df12d51091c8ce094062f366f0c30be0d17667a827ed00b75f78a On npm install, the package's postinstall hook node test.js executes an attacker-controlled workflow against the installer's host. It recursively sca...
[20260808] - Core - Improper ACL checks for batch copy actions
An improper access check allows unauthorized users to perform copy batch operations on uneditable items...
BIT-WORDPRESS-MULTISITE-2026-63030 WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the authornotin WPQuery SQL Injection CVE-2026-60137, could allow an attacker to perform SQL Injection and achieve Remote Code Execution...
BIT-WORDPRESS-2026-63030 WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the authornotin WPQuery SQL Injection CVE-2026-60137, could allow an attacker to perform SQL Injection and achieve Remote Code Execution...
SUSE CVE-2026-64525
In the Linux kernel, the following vulnerability has been resolved: xfrm: move policybydst RCU sync from per-netns .exit to .preexit The struct pernetoperations docstring in include/net/netnamespace.h explicitly warns against blocking RCU primitives in .exit handlers: Exit methods using blocking...
UBUNTU-CVE-2026-64416
In the Linux kernel, the following vulnerability has been resolved: mm: swapcgroup: fix NULL deref in lookupswapcgroupid on swapless host lookupswapcgroupid passes swapcgroupctrltype.map to swapcgroupidlookup without checking that the type was ever registered via swapcgroupswapon. On a swapless...
EUVD-2026-48960
In the Linux kernel, the following vulnerability has been resolved: mm: swapcgroup: fix NULL deref in lookupswapcgroupid on swapless host lookupswapcgroupid passes swapcgroupctrltype.map to swapcgroupidlookup without checking that the type was ever registered via swapcgroupswapon. On a swapless...
CVE-2026-64416 mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host
In the Linux kernel, the following vulnerability has been resolved: mm: swapcgroup: fix NULL deref in lookupswapcgroupid on swapless host lookupswapcgroupid passes swapcgroupctrltype.map to swapcgroupidlookup without checking that the type was ever registered via swapcgroupswapon. On a swapless...
OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal
Summary The /api/fs/batchrename handler validates and authorizes only the requested source directory. It rejects path separators in newname, but it does not validate srcname. The handler concatenates srcdir and attacker-controlled srcname, then passes the result to the filesystem rename layer,...
GHSA-95CV-R8X4-VH75 OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal
Summary The /api/fs/batchrename handler validates and authorizes only the requested source directory. It rejects path separators in newname, but it does not validate srcname. The handler concatenates srcdir and attacker-controlled srcname, then passes the result to the filesystem rename layer,...
wp2shell
wp2shell-poc Independent proof-of-concept for the unauthentic...
Exploit for Interpretation Conflict in Wordpress
CVE-2026-63030 + CVE-2026-60137 — WP2Shell WordPress Core Pre-Au...
PT-2026-67593
Summary The /api/fs/batch rename handler validates and authorizes only the requested source directory. It rejects path separators in new name, but it does not validate src name. The handler concatenates src dir and attacker-controlled src name, then passes the result to the filesystem rename laye...
CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin
...
Exploit for Interpretation Conflict in Wordpress
CVE-2026-63030 / CVE-2026-60137 — "wp2shell" WordPress Core RC...