wpbullet

wpBullet A static code analysis for WordPress Plugins/Themes and PHP Installation Simply clone the repository, install requirements and run the script $ git clone https://github.com/webarx-security/wpbullet wpbullet $ cd wpbullet $ pip install -r requirements.txt $ python wpbullet.py Usage...

CVE-2026-112289

Koalixcrm through 1.14.0 contains a stored cross-site scripting vulnerability that allows staff users to inject script by storing malicious task titles rendered unescaped by Task.linktotask. Attackers can embed HTML or script that executes when administrators open the task changelist or change...

CVE-2026-112289: Improper Neutralization of Input During Web Page Generation

Koalixcrm through 1.14.0 contains a stored cross-site scripting vulnerability that allows staff users to inject script by storing malicious task titles rendered unescaped by Task.linktotask. Attackers can embed HTML or script that executes when administrators open the task changelist or change...

KoalixSwitzerland Koalixcrm Cross-site Scripting Vulnerability

KoalixSwitzerland: The Koalixcrm version 1.14.0 and earlier have a cross-site scripting vulnerability. This vulnerability arises from the fact that the Task.linktotask function does not escape the rendered task titles. This allows for storage-type cross-site scripting attacks, potentially allowin...

Exploit for Authentication Bypass by Spoofing in Alibaba Nacos

Nacos User-Agent Authentication Bypass CVE-2021-29441 Vulh...

[SECURITY] Fedora 44 Update: rust-rpki-0.19.3-2.fc44

A library for validating and creating RPKI data...

CVE-2026-53396

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posixacl leak and ignored error in nfsd4createfile nfsd4createfile has two bugs in its ACL handling: The return value of nfsd4acltoattr is silently discarded. When the NFSv4-to-POSIX ACL conversion fails e.g., -EINVAL f...

[SECURITY] Fedora 44 Update: perl-Imager-1.032-1.fc44

Imager is a module for creating and altering images. It can read and write various image formats, draw primitive shapes like lines,and polygons, blend multiple images together in various ways, scale, crop, render text and more...

UBUNTU-CVE-2026-53244

In the Linux kernel, the following vulnerability has been resolved: VFS: fix possible failure to unlock in nfsd4createfile atomiccreate in fs/namei.c drops the reference to the dentry when it returns an error. This behaviour was imported into dentrycreate so that it will drop the reference if an...

CVE-2026-53244

In the Linux kernel, the following vulnerability has been resolved: VFS: fix possible failure to unlock in nfsd4createfile atomiccreate in fs/namei.c drops the reference to the dentry when it returns an error. This behaviour was imported into dentrycreate so that it will drop the reference if an...

CVE-2026-53244 VFS: fix possible failure to unlock in nfsd4_create_file()

In the Linux kernel, the following vulnerability has been resolved: VFS: fix possible failure to unlock in nfsd4createfile atomiccreate in fs/namei.c drops the reference to the dentry when it returns an error. This behaviour was imported into dentrycreate so that it will drop the reference if an...

CVE-2026-53244

CVE-2026-53244 concerns the Linux kernel NFSD component. When exporting a filesystem with the atomic_create hook, an error from atomic_create() could cause nfsd4_create_file() to fail unlocking the parent directory, risking resource exhaustion and potential DoS. The root cause is that dentry hand...

EUVD-2026-39195

In the Linux kernel, the following vulnerability has been resolved: VFS: fix possible failure to unlock in nfsd4createfile atomiccreate in fs/namei.c drops the reference to the dentry when it returns an error. This behaviour was imported into dentrycreate so that it will drop the reference if an...

PT-2026-52339

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A failure to unlock the parent directory occurs in the nfsd4 create file function. This happens when the NFSD exports a filesystem using atomic create and that function returns an error...

CVE-2026-22164

The Imagination Graphics DDK contains a kernel heap OOB write vulnerability in the DevmemIntComputeVirtualIndicesFromLogical function. A non-privileged user can trigger this by conducting improper GPU system calls while creating specific resource types and providing a set of parameters to the aff...

CVE-2026-8676

An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond...

WS-2023-0356

Store DOM XSS when create survey in limesurvey before 6.2.9+230925...

EUVD-2026-31969

An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond...

cPanel input validation vulnerability

cPanel is a web-based automated hosting platform developed by cPanel Inc. This platform is primarily used for automating the management of websites and servers. cPanel has a vulnerability related to input validation errors, which stem from insufficient input validation in the plugin parameter...

CVE-2026-38669

The content management system wCMS v.1.4 , developed by Vedegis , is vulnerable to a Cross-Site Scripting (XSS) flaw. This vulnerability occurs when users are creating a new blog , stemming from the improper neutralization of input during web page generation. Exploitation details and specific rem...