EUVD-2026-64792

Unauthenticated Broken Access Control in Notification Master Real-Time WordPress Notifications With Email, SMS, Webhooks & More = 1.7.1 versions...

CVE-2026-28153

Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More plugin (versions

UnConfuserEx

UnConfuserEx Fork aprimorado do UnconfuserEx com suporte melhorado para variantes modernas do ConfuserEx2, recuperação anti-tamper, remoção de compressor, restauração de fluxo de controle e reconstrução de recursos. https://github.com/user-attachments/assets/de2c7fd9-6736-4f39-83c0-3c25aa9c1f24 S...

CVE-2026-78272

CVE-2026-78272 is a Subscriber Broken Access Control vulnerability in the Fluent Support Pro WordPress plugin, affecting versions

CVE-2026-78272 WordPress Fluent Support Pro plugin <= 2.3.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...

EUVD-2026-64836

Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...

CVE-2026-78258 WordPress Booking and Rental Manager plugin <= 2.7.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Booking and Rental Manager = 2.7.5 versions...

EUVD-2026-64833

Unauthenticated Broken Access Control in Booking and Rental Manager = 2.7.5 versions...

CVE-2026-78258

CVE-2026-78258 is an unauthenticated Broken Access Control vulnerability in the Booking and Rental Manager WordPress plugin (for WooCommerce), affecting versions 2.7.5 and earlier . The flaw allows remote attackers to access data without proper authorization, resulting in a low confidentiality im...

EUVD-2026-64829

Unauthenticated Broken Access Control in RepairBuddy = 4.1223 versions...

CVE-2026-78291 WordPress RepairBuddy plugin <= 4.1223 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in RepairBuddy = 4.1223 versions...

CVE-2026-78291

CVE-2026-78291 is an unauthenticated Broken Access Control vulnerability in the WordPress plugin RepairBuddy (also referenced as Computer Repair Shop ), affecting versions 4.1223 and earlier . Discovered by Supakiad S. (m3ez) via Patchstack, the flaw allows a remote, unauthenticated attacker to m...

ThreatPad

ThreatPad Eine kollaborative Echtzeit-Notizplattform, entwickelt für Cyber Threat Intelligence CTI und Sicherheitsoperationsteams. ThreatPad kombiniert die Geschwindigkeit moderner Produktivitätstools mit CTI-spezifischen Fähigkeiten: IOC-Autoextraktion, STIX 2.1-Export, strukturierte...

MCPDebugger

Server MCP Debugger di Fatmike Introduzione Questo progetto è un MCP Debugger Server leggero e fatto in casa, sviluppato per apprendimento e sperimentazione. Il MCP Debugger Server espone funzionalità di debug come strumenti MCP, consentendo a client MCP esterni di controllare l'esecuzione,...

WordPress Drag and Drop Multiple File Upload for Contact Form 7 plugin < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass vulnerability

Unauthenticated RCE via Control Character Filename Bypass vulnerability discovered by Jakub Herman in WordPress Plugin Drag and Drop Multiple File Upload – Contact Form 7 versions 1.3.9.9...

llm-censorship-steering

LLM-Zensursteuerung Dieses Repository enthält die Codeimplementierung für Steering the CensorShip: Uncovering Representation Vectors for LLM "Thought" Control von Hannah Cyberey und David Evans. Wir stellen eine Methode vor, die „Steering Vectors“ aus den Interna von LLMs findet, um das Ausmaß de...

WordPress RepairBuddy plugin <= 4.1223 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Supakiad S. m3ez in WordPress Plugin RepairBuddy versions = 4.1223...

apxutil

Uno strumento per manipolare file di archivio dei PLC Schneider Electric Questo strumento può estrarre e riassemblare file di "archivio" PLC, utilizzati da diversi PLC Schneider Electric, tra cui almeno M580, M340 e Quantum. I file di archivio con estensione .sta sono in realtà un archivio zip...

CVE-2026-33146

CVE-2026-33146 Una condivisione pubblica sembrava pulita nell'albero delle pagine, ma l'endpoint di ricerca raccontava un'altra storia. In Docmost, le pagine figlie con restrizioni nascoste ai visitatori della condivisione pubblica potevano comunque trapelare attraverso i risultati di ricerca del...

WordPress Fluent Support Pro plugin <= 2.3.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Support Pro versions = 2.3.1...