CVE-2026-39599 WordPress WDS MCP Content Manager plugin <= 3.10.4 - Broken Access Control vulnerability

Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...

CVE-2026-39599

The WDS MCP Content Manager WordPress plugin affects versions

EUVD-2026-92953

Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...

CVE-2026-39599 WordPress WDS MCP Content Manager plugin <= 3.10.4 - Broken Access Control vulnerability

Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Struts Patch-Gap Auditor A small Python tool that finds Apach...

XworkStruts-RCE

XworkStruts-RCE CVE-2017-5638 XworkStruts RCE 취약점 테스트 스크립트 Apache Struts 2 2.3.x2.3.32 이전 및 2.5.x2.5.10.1 이전의 Jakarta Multipart 파서는 파일 업로드 시도 중 잘못된 예외 처리와 오류 메시지 생성으로 인해, 원격 공격자가 조작된 Content-Type, Content-Disposition 또는 Content-Length HTTP 헤더를 통해 임의의 명령을 실행할 수 있습니다. 이 취약점은 2017년 3월에 cmd= 문자열을 포함한...

CVE-2026-26980

CVE-2026-26980 ★ CVE-2026-26980 TryGhost Ghost CMS Content API SQL Injection PoC ★ https://github.com/user-attachments/assets/e7fab29e-8382-4ecc-986c-68852c28a32c 개요 CVE-2026-26980은 TryGhost Ghost CMS Content API에서 발생하는 인증되지 않은 SQL Injection 취약점입니다. 취약한 경로는 slug:... 순서가 처리될 때 공개 Content API 필터 처리...

CLEANSTART-2026-LH05062 HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported `Content-Encoding` header va...

Security vulnerability affects the sonarqube package. HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported Content-Encoding header value in the response message...

CLEANSTART-2026-MX72137 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute

Security vulnerability affects the temporal-server package. CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute...

CLEANSTART-2026-NX24657 Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name

Security vulnerability affects the rundeck package. Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name...

Linux Distros Unpatched Vulnerability : CVE-2026-84429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. django.utils.http.parseheaderparameters was subject to a potential...

PT-2026-106412

Contributor Remote Code Execution RCE in Content Visibility for Divi Builder = 5.03 versions...

PT-2026-107279

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 0.17.8 Description The @backstage/backend-defaults package contains improper input validation within cloud storage URL readers. An attacker possessing write access to a cloud storage bucket utilized by the framework...

PT-2026-106721

Cross-site Scripting XSS in the Forums feature of OpenText Content Management Content Server could allow a bad actor to inject malicious code into a Forums web page...

PT-2026-106327

Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...

Rocky Linux 8 [CIQ] Security Update: idm-jss / idm-jss-debuginfo / idm-jss-javadoc / idm-ldapjdk / etc (crlsa-2026_75573)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202675573 advisory. pki-core: Dogtag/PKI: certprofile-import allows code execution via unsanitized profile content ExternalProcessConstraint CVE-2026-76561 Tenable has extracted the...

SUSE SLES16: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:23981-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23981-1 advisory. Update to Firefox Extended Support Release 153.4.0 ESR MFSA 2026-100, bsc1282929: - CVE-2026-96869: Information disclosure in the...

PT-2026-106733

An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. django.utils.http.parse header parameters was subject to a potential denial-of-service attack due to quadratic time complexity when parsing a value with many separators inside a quoted parameter. An...

cve-2023-41564-research

CVE-2023-41564 취약점 개요 CVE-2023-415641는 Cockpit이라는 CMSmodule'assets'-extend // 省略 'upload' = functionstring|array $param = 'files', array $meta = , bool $isUpload = true $file...

CVE-2023-41436-CSZ-CMS-Stored-XSS---Pages-Content

CSZ CMS 저장형 XSS v1.3.0 저자: Sergio CVE: 2023-41436 설명: CSZCMS v.1.3.0의 교차 사이트 스크립팅 취약점으로 인해 로컬 공격자가 Pages Content Menu 구성 요소의 Additional Meta Tag 매개변수에 조작된 스크립트를 통해 임의 코드를 실행할 수 있습니다. Attack Vectors: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L CVSS3 점수: 5.4 - 중간 개념 증명POC: 패널에 로그인한 후, 일반 메뉴에서 "Pages Conten...