223965 matches found
CVE-2026-17032
CVE-2026-17032 concerns Supsystic Multiple Pro Plugins. The issue arises from a vendor update server compromise, allowing unauthenticated attackers to deploy a second-stage payload that exfiltrates credentials and sensitive data and grants full control of affected sites. The records indicate a cr...
CVE-2026-53985
Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's servicecontrol event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sending a single restartservice command. Attackers can...
CVE-2021-20334
creationtimestamp| type| source ---|---|--- 2026-08-06 16:15:35+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-218-01 2026-08-10 04:02:55+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3msp7qvoyw624...
Malicious code in streak-map-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ae48e032b5494c8939d41973598b9dd35d5954ccf6850cd633e7992995cc6b The package advertises itself as a dependency-free day/streak math library, but its main entrypoint dist/index.mjs contains a top-level async IIFE th...
MAL-2026-13459 Malicious code in streak-map-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ae48e032b5494c8939d41973598b9dd35d5954ccf6850cd633e7992995cc6b The package advertises itself as a dependency-free day/streak math library, but its main entrypoint dist/index.mjs contains a top-level async IIFE th...
EUVD-2026-54095
Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's servicecontrol event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sending a single restartservice command. Attackers can...
CVE-2026-53985
CVE-2026-53985 affects Ground Station prior to version 0.6.0. It describes an unauthenticated denial-of-service in the Socket.IO server’s service_control event handler, allowing an unauthenticated network peer to forcibly terminate the ground-station process by sending a restart_service command. ...
CVE-2026-53985 Ground Station prior to 0.6.0 Unauthenticated DoS via service_control Socket.IO
Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's servicecontrol event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sending a single restartservice command. Attackers can...
CVE-2026-66712
Unauthenticated Broken Access Control in Simple Membership = 4.7.8 versions...
CVE-2026-66708
Unauthenticated Broken Access Control in Total Upkeep = 1.17.2 versions...
CVE-2026-66699
Custom role Broken Access Control in Dokan = 5.0.10 versions...
CVE-2026-66701
Unauthenticated Broken Access Control in Profile Builder = 3.16.5 versions...
CVE-2026-66678
Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field = 6.1.1 versions...
CVE-2026-65554
Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 versions...
CVE-2026-65541
Unauthenticated Broken Access Control in Staff Training = 1.0.7 versions...
CVE-2026-65504
Unauthenticated Broken Access Control in BOX NOW Delivery Croatia = 3.3.0 versions...
CVE-2026-32548
Unauthenticated Broken Access Control in SureCart = 4.6.2 versions...
CVE-2026-25403
Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
