304146 matches found
Security update for libheif
This update for libheif fixes the following issue: CVE-2026-62289: integer underflow in Fraction constructor via double clap transform application bsc1273079. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
EUVD-2026-70971
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Automattic WooCommerce allows Blind SQL Injection. This issue affects WooCommerce: from n/a before 11.0...
CVE-2026-57777 WordPress WooCommerce plugin < 11.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Automattic WooCommerce allows Blind SQL Injection. This issue affects WooCommerce: from n/a before 11.0...
CVE-2026-57777
Automattic WooCommerce (WordPress plugin) versions prior to 11.0 are affected by a Blind SQL Injection vulnerability in the plugin's handling of special elements in SQL commands. The vulnerability is rated CVSS 3.1: 7.6 (HIGH) , with an attack vector of network , low complexity , and high privile...
CVE-2026-57777 WordPress WooCommerce plugin < 11.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Automattic WooCommerce allows Blind SQL Injection. This issue affects WooCommerce: from n/a before 11.0...
CVE-2026-57777 WordPress WooCommerce plugin < 11.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Automattic WooCommerce allows Blind SQL Injection. This issue affects WooCommerce: from n/a before 11.0...
Exploit for CVE-2026-85046
CVE-2026-85046 Chrome Zero-Day Vulnerability Exploited in the...
hate_crack v2.36.1
root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...
HTSOC
HTSOC — Integrated SOC System for Event Monitoring, Detection, and Investigation HTSOC is a self-built Security Operations Center system in a lab environment. The system combines log collection, detection with Splunk, alert/case management with TheHive, Observable analysis with Cortex, IOC lookup...
tamago v1.27.1
TamaGo - bare metal Go tamago | https://github.com/usbarmory/tamago Copyright c The TamaGo Authors. All Rights Reserved. Introduction TamaGo is a framework that enables compilation and execution of unencumbered Go applications on bare metal processors AMD64, ARM, ARM64, RISCV64. The projects spaw...
CVE-2026-62928
XING CPTrans-ME-X contains an OS Command Injection CWE-78. Unauthenticated OS command may be injected...
renovate-operator v6.2.0
Renovate: The Kubernetes-Native Way Run Renovate on your own infrastructure with CRD-based scheduling, parallel execution, auto-discovery, and a built-in UI. If you self-host Renovate and already run Kubernetes, this operator gives you the control and observability that plain self-hosted setups...
Multiple vulnerabilities in XING CPTrans-ME-X
Overview CPTrans-ME-X provided by XING Inc. contains multiple vulnerabilities listed below. OS Command Injection CWE-78 - CVE-2026-62928 Improper processing of the input through the administrative port may lead to OS command injection. Exposure of Sensitive System Information to an Unauthorized...
WindowsProtocolTestSuites v4.26.9.0
Windows Protocol Test Suites Windows Protocol Test Suites provide interoperability testing against the implementation of Windows open specifications including File Services, Identity Management, Remote Desktop and etc. Originally developed for in-house testing of the Microsoft Open Specifications...
kontext-cli v1.3.0
Website | Documentation | Dashboard | Discord Stop risky AI-agent actions before they run AI agents do more than suggest code. They run shell commands, read files, call services, change infrastructure, and interact with production systems. Kontext puts local policy between AI agents and the tools...
CVE-2026-62928
XING CPTrans-ME-X contains an OS Command Injection CWE-78. Unauthenticated OS command may be injected...
EUVD-2026-70916
XING CPTrans-ME-X contains an OS Command Injection CWE-78. Unauthenticated OS command may be injected...
CVE-2026-62928
XING CPTrans-ME-X contains an OS Command Injection CWE-78. Unauthenticated OS command may be injected...
CVE-2026-62928
XING CPTrans-ME-X , a rack accessory product, contains an OS Command Injection vulnerability (CWE-78) that allows unauthenticated attackers to inject arbitrary OS commands. The flaw carries a CVSS 9.8 CRITICAL score (v3.0) with high impact on confidentiality, integrity, and availability, indicati...
AFLplusplus v5.03c
American Fuzzy Lop plus plus AFL++ Release version: 5.03c GitHub version: 5.03c Repository: https://github.com/AFLplusplus/AFLplusplus AFL++ is maintained by: Marc "van Hauser" Heuse [email protected] Dominik Maier [email protected] Andrea Fioraldi [email protected] Heiko "hexcoder...