CVE-2018-0202

CVE-2018-0202 Security & Privacy in ComputingFall 2018 Final Group Project, clamscan vulnerability in Cisco's ClamAV 0.99.3 Members: Jay Chow, Harry Luo, Benfang Wang, Johns Hopkins University Information Security Institute Detailed steps on how we installed this vulnerable version of ClamAV...

(0Day) Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Telegram. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the rlottie library. The...

EUVD-2026-97638

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to read fields hidden by field-level SELECT permissions through LIVE SELECT projections. Attackers can project restricted fields from the unreduced $after or $before parameters under an alias to receive...

EUVD-2026-97637

SurrealDB from 3.0.0 before 3.3.0 contains an information disclosure vulnerability that allows record users to read values hidden by field-level SELECT permissions through COMPUTED fields. Attackers can select records whose readable COMPUTED fields derive from hidden fields, or use write RETURN...

CVE-2026-109336

SurrealDB versions prior to 3.3.0 are vulnerable to an authorization bypass where record users can access fields hidden by field-level SELECT permissions . The root cause is a flaw in LIVE SELECT projections , allowing attackers to project restricted fields from unreduced $after or $before parame...

CVE-2026-21123

Improper privilege management in Locksettings prior to the SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile before the first unlock. This vulnerability affects Samsung Mobile devices and results in high confidentiality impact. Remedia...

CVE-2026-109336: Incorrect Authorization

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to read fields hidden by field-level SELECT permissions through LIVE SELECT projections. Attackers can project restricted fields from the unreduced $after or $before parameters under an alias to receive...

CVE-2026-62034

Unauthenticated Cross Site Scripting XSS in Before After Image Comparison – Image comparison for WP = 1.1.21 versions...

CVE-2026-62034

The Before After Image Comparison – Image comparison for WP WordPress plugin, version

CVE-2026-62034 WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Before After Image Comparison – Image comparison for WP = 1.1.21 versions...

EUVD-2026-96469

Unauthenticated Cross Site Scripting XSS in Before After Image Comparison – Image comparison for WP = 1.1.21 versions...

CVE-2026-62034: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Before After Image Comparison – Image comparison for WP = 1.1.21 versions...

PT-2026-109801

Name of the Vulnerable Software and Affected Versions Before After Image Comparison – Image comparison for WP versions prior to 1.1.22 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user by injecting...

CVE-2026-62028

Missing Authorization vulnerability in bPlugins Before After Image Comparison – Image comparison for WP before-after-image-compare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Before After Image Comparison – Image comparison for WP: from n/a through...

WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Before After Image Comparison – Image comparison for WP versions = 1.1.21...

EUVD-2026-95746

Missing Authorization vulnerability in bPlugins Before After Image Comparison – Image comparison for WP before-after-image-compare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Before After Image Comparison – Image comparison for WP: from n/a through...

CVE-2026-62028

The Before After Image Comparison – Image comparison for WP WordPress plugin (versions

CVE-2026-62028 WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Broken Access Control vulnerability

Missing Authorization vulnerability in bPlugins Before After Image Comparison – Image comparison for WP before-after-image-compare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Before After Image Comparison – Image comparison for WP: from n/a through...

WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Asim Alshaya in WordPress Plugin Before After Image Comparison – Image comparison for WP versions = 1.1.21...

PT-2026-108889

Name of the Vulnerable Software and Affected Versions Before After Image Comparison – Image comparison for WP versions prior to 1.1.22 Description An issue exists where missing authorization allows for the exploitation of incorrectly configured access control security levels. Recommendations Upda...