CVE-2026-14900 Cost Calculator Builder PRO <= 4.0.3 - Unauthenticated Remote Code Execution via 'orderDetails' Parameter

The Cost Calculator Builder PRO plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.0.3 via the jstophp function. This is due to insufficient sanitization of the orderDetails.originalValue field, which is injected verbatim into a calculator formula...

CVE-2026-14900

The Cost Calculator Builder PRO plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.0.3 via the jstophp function. This is due to insufficient sanitization of the orderDetails.originalValue field, which is injected verbatim into a calculator formula...

EUVD-2026-50268

The Cost Calculator Builder PRO plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.0.3 via the jstophp function. This is due to insufficient sanitization of the orderDetails.originalValue field, which is injected verbatim into a calculator formula...

CVE-2026-14900

The CVE-2026-14900 entry concerns the WordPress plugin Cost Calculator Builder PRO (versions up to 4.0.3). The root cause is insufficient sanitization of the orderDetails[*].originalValue field, which is injected verbatim into a calculator formula string passed to PHP eval() inside the js_to_php(...

CVE-2026-64271

A flaw was found in the Linux kernel's touchwin input driver. A malicious, malfunctioning, or counterfeit Touchwindow peripheral can exploit an unbounded heap out-of-bounds write vulnerability by streaming specific non-zero bytes. This prevents the packet index from resetting, allowing the...

CVE-2026-64387

A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability, a double-free error, occurs when the client attempts to free the same memory buffer twice during a directory query operation. An attacker could potentially exploit this flaw to cause memory corruption,...

CVE-2026-64502

A flaw was found in the Linux kernel's adsigmadelta driver. This vulnerability exists within the clearpendingevent function, affecting certain registerless devices or those with specific configurations. When specific conditions are met during device operation, an internal memory operation attempt...

CVE-2026-64259

A flaw was found in the Linux kernel's fuse-uring component. A local attacker could exploit a race condition by sending specially crafted requests before they are fully processed. This could lead to a use-after-free vulnerability, potentially allowing for arbitrary code execution or denial of...

CVE-2026-64322

A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. The udfloadsparablemap function incorrectly validates the length of the sparing table, treating it as a byte count instead of an entry count. This allows a local attacker, by providing a specially crafted UDF image, to...

CVE-2026-64421

A flaw was found in the Linux kernel's imx8-isi media driver. This use-after-free vulnerability occurs during the removal of the driver due to an incorrect order of cleanup operations. A local attacker could potentially exploit this to cause a denial of service or achieve arbitrary code execution...

CVE-2026-63232

A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment reinforcement endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...

CVE-2026-63233

A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment overall answer endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...

CVE-2026-63234

A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the manual mark assessment endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...

CVE-2026-13423

The Streamit WordPress theme through 4.5.0 does not perform any authorization or nonce verification on one of its unauthenticated AJAX routes, which invokes an attacker-supplied PHP function with an attacker-supplied argument array, allowing unauthenticated attackers to call arbitrary functions f...

CVE-2026-64366

A flaw was found in the Linux kernel's Wacom Human Interface Device HID driver. This vulnerability occurs in the wacomwacqueueinsert function when handling incoming reports. Improper management of the kernel's internal buffer kfifo can lead to a slab-out-of-bounds write, allowing an attacker to...

CVE-2026-64440

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. A remote attacker, by operating a malicious Access Point AP, can send a specially crafted 802.11 AssocResponse frame. This can trigger an out-of-bounds write vulnerability in the HTcapshandler function, leading to memory corruption...

CVE-2026-63234 SQL injection and unsafe deserialisation vulnerability

A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the manual mark assessment endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...

CVE-2026-63234

A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the manual mark assessment endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...

EUVD-2026-50129

A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the manual mark assessment endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...

CVE-2026-63234

The provided records identify CVE-2026-63234 in Koollab LMS as a SQL injection and unsafe deserialization vulnerability. An authenticated attacker can abuse the manual mark assessment endpoint to influence data passed to unserialize() , enabling writing a webshell to a publicly accessible locatio...