EUVD-2026-96376

Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bayarcash WooCommerce: from n/a through 4.4.2...

EUVD-2026-96378

Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GIFT4U: from n/a through 1.1.3...

CVE-2026-103357 WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GIFT4U: from n/a through 1.1.3...

CVE-2026-106609 WordPress Bayarcash WooCommerce plugin <= 4.4.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bayarcash WooCommerce: from n/a through 4.4.2...

CVE-2026-103357 WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GIFT4U: from n/a through 1.1.3...

CVE-2026-98380

A flaw was found in the Linux kernel's traffic control subsystem. A local attacker with network configuration privileges can exploit a race condition during traffic control action deletion to cause a Denial of Service DoS by crashing the system. Due to missing error validation during action...

inspector-gadget

inspector-gadget Go Go Gadget Exploit! ..--"\ |""--.. .-' \ | '-. / |...----'\ |,,..--""--.. | '\ .--'.I. ''--..' ''",JGS/|,---' ,' .::-. ', ' ,'-;oIo;-', ' - | = | | | ; .. ; ..-;|\ - /|;-. -' / \// \ '- / ; /-'; \ ; .--| |O O |'-./ ; |/ \ ;OO/ | | \ II / | \ / |O O \ / / | \ / | \ / /\ \ /...

CVE-2026-98336

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. A local user with network administration privileges can cause a denial of service DoS by configuring hardware traffic control TC offloading on virtual Access Point Virtual Local Area Network APVLAN interfaces. Because...

EUVD-2026-96303

ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-party apps may call the interfaces through reflection and retrieve relevant information...

CVE-2026-93950

Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.108...

CVE-2026-108504

ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information...

Improper Access Control

code.vikunja.io/api is vulnerable to improper access control. The vulnerability is due to insufficient access restrictions on the link-share hash field in single-share read endpoints, which allows an attacker with read-only access to obtain the secret credential, generate a link-share JWT, and...

phpsploit

Framework C2 completo che persiste silenziosamente sul webserver tramite una riga di PHP polimorfica Manutenibilità codeclimate Creato da nil0x42 e contributori !https://assets.kitploit.com/production/public/readmes/320/aca304368ddb3...

EUVD-2026-96294

ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information...

CVE-2026-108504 Unauthorized information retrieval vulnerability in ZTE Z80 Ultra product

ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information...

CVE-2026-108504 Unauthorized information retrieval vulnerability in ZTE Z80 Ultra product

ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information...

CVE-2026-108504

The ZTE Z80 Ultra product contains an unauthorized information disclosure vulnerability due to insufficient access control for methods within the framework. An attacker can exploit this flaw to read device-related information . No specific remediation steps or exploit details are provided in the ...

CVE-2026-93950 WordPress Motors theme <= 1.4.108 - Broken Access Control vulnerability

Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.108...

CVE-2026-93950

The StylemixThemes Motors WordPress theme (versions up to and including 1.4.108 ) is susceptible to a Broken Access Control vulnerability. The issue arises from Missing Authorization , specifically allowing for the exploitation of Incorrectly Configured Access Control Security Levels . This vulne...

CVE-2026-93950 WordPress Motors theme <= 1.4.108 - Broken Access Control vulnerability

Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.108...