CVE-2026-109925 Productive Commerce < 1.1.54 - Unauthenticated SQLi via Wishlist and Compare Handlers

The Productive Commerce WordPress plugin before 1.1.54 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-109925 Productive Commerce < 1.1.54 - Unauthenticated SQLi via Wishlist and Compare Handlers

The Productive Commerce WordPress plugin before 1.1.54 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-104338 Razorpay for WooCommerce < 4.8.9 - Unauthenticated User Context Switch via 1cc Coupon Route

The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not perform an authorization check on one of its REST routes and derives the acting user's identity from an unauthenticated request parameter, allowing an unauthenticated attacker to cause the request to execute as an arbitrary user...

CVE-2026-104337 Razorpay for WooCommerce < 4.8.9 - Unauthenticated Order Data Disclosure via 1CC Coupon Apply

The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not verify ownership of an order before returning a coupon discount computed against that order, allowing unauthenticated attackers to disclose the monetary value of arbitrary customer orders by enumerating order IDs...

CVE-2026-104338 Razorpay for WooCommerce < 4.8.9 - Unauthenticated User Context Switch via 1cc Coupon Route

The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not perform an authorization check on one of its REST routes and derives the acting user's identity from an unauthenticated request parameter, allowing an unauthenticated attacker to cause the request to execute as an arbitrary user...

CVE-2026-104337 Razorpay for WooCommerce < 4.8.9 - Unauthenticated Order Data Disclosure via 1CC Coupon Apply

The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not verify ownership of an order before returning a coupon discount computed against that order, allowing unauthenticated attackers to disclose the monetary value of arbitrary customer orders by enumerating order IDs...

Exploit for CVE-2026-19868

sonicwall-sonicos-scanner Local triage for CVE-2026-19868...

Malicious code in twitch-stream-py (PyPI)

Source: kam193 bbb2267e685c94eee0456daa9e10960e5cacd1e010a93ecd34c9cd5effe07c9c Clone of a legitimate package with injected code that downloads and executes a script from a remote location. During analysis, the remote code was no longer accessible. The campaign was originally discovered by...

Malicious code in pyuserfox (PyPI)

Source: kam193 23edaa0c720d313b1598b1391f83081eab817e337c65033b28755ad7f46af0dd During import, package silently download and executes remote code. There is no other action. During analysis, the remote code was no longer accessible. The campaign was originally discovered by Threx-code. --- Categor...

Malicious code in pyuserox (PyPI)

Source: kam193 9554cf718372c4b1b545c805969d454a5baa65b62274339b1a00fd80ce6e7a86 During import, package silently download and executes remote code. There is no other action. During analysis, the remote code was no longer accessible. The campaign was originally discovered by Threx-code. --- Categor...

Exploit for CVE-2026-98260

TimerRoot Android front end for CVE-2026-98260 POSIX CPU...

Exploit for Write-what-where Condition in Linux Linux_Kernel

Temporary Root Guide for Meizu 20 Pro Locked BL On a ME...

Exploit for Out-of-bounds Write in Linux Linux_Kernel

CVE-2023-6931 — Hisense HITV205N Xiaomi TOUCH Lite Temporary...

CVE-2026-115732

Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows a client that holds a CA-signed certificate whose name extends or shortens an authorized hostname to be authorized as that host. This enables...

CVE-2026-123876

A flaw was found in the default seccomp profile used by Podman via containers-common. Deny rules for AFVSOCK and NETLINKAUDIT compared socket arguments with unmasked 64-bit equality. Because the kernel truncates those int arguments to 32 bits, setting upper bits can bypass the deny rules...

Avanpost FAM Authentication Bypass

The vulnerability related to the password recovery mechanism in the Avanpost FAM Server component of the Avanpost FAM authentication tool involves improper control over the password recovery process. Exploitation of this vulnerability enables a remote attacker to authenticate to the system by...

CVE-2026-123095

mpv 0.29.0 before 0.42.0 contains a playlist injection vulnerability in the bundled ytdlhook script that allows remote attackers to add unchecked entries by embedding newlines in playlist URLs. Attackers controlling a feed or page can bypass urlissafe to open file:// or av:// inputs, reading loca...

CVE-2026-99284

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker in skbzerocopy skbzerocopy moves frag descriptors from @from into @to and takes a reference on each frag, but it does not copy skbshinfofrom-flags into skbshinfoto-flags. A destination sk...

1C-Bitrix Before and After Photos Code Execution

Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system CMS like 1C-Bitrix. Website management involves unlimited uploading of dangerous files. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...

Bestechic BES2300 Bluetooth Audio SoC Heap Buffer Overflow DoS

The vulnerability of the avrcpindicateprocessdataind function in the microprogramming-based audio chipset of Bestechnic BES2300 Bluetooth Audio SoC is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafte...