59153 matches found
CVE-2026-0929 RegistrationMagic < 6.0.7.2 - Subscriber+ Form Creation
The RegistrationMagic WordPress plugin before 6.0.7.2 does not have proper capability checks, allowing subscribers and above to create forms on the site...
CVE-2026-0929
The CVE-2026-0929 entry concerns the WordPress plugin RegistrationMagic, affected versions before 6.0.7.2. The root cause is missing capability checks, permitting subscribers and above to create forms on a site. Impact is unauthorised form creation, with CVSSv3.1 base score 4.3 (Medium) and privi...
CVE-2026-0929 RegistrationMagic < 6.0.7.2 - Subscriber+ Form Creation
The RegistrationMagic WordPress plugin before 6.0.7.2 does not have proper capability checks, allowing subscribers and above to create forms on the site...
CVE-2026-26368
creationtimestamp| type| source ---|---|--- 2026-02-16 03:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116078072833203160 2026-02-16 03:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mex2o6xnnc2m 2026-02-16 22:38:14+00:00| seen|...
CVE-2026-2523
A vulnerability was detected in Open5GS up to 2.7.6. The affected element is the function smfgnhandlecreatepdpcontextrequest of the file /src/smf/gn-handler.c of the component SMF. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit is now...
CVE-2026-2523 Open5GS SMF gn-handler.c smf_gn_handle_create_pdp_context_request assertion
A vulnerability was detected in Open5GS up to 2.7.6. The affected element is the function smfgnhandlecreatepdpcontextrequest of the file /src/smf/gn-handler.c of the component SMF. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit is now...
CVE-2026-2462
creationtimestamp| type| source ---|---|--- 2026-02-16 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0173/...
PT-2026-8313
The RegistrationMagic WordPress plugin before 6.0.7.2 does not have proper capability checks, allowing subscribers and above to create forms on the site...
WordPress plugin RegistrationMagic 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
CVE-2026-26369
creationtimestamp| type| source ---|---|--- 2026-02-15 23:30:15+00:00| seen| https://infosec.exchange/users/offseq/statuses/116077246133807686 2026-02-15 23:30:16+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mewowaxbxu2h 2026-02-16 15:00:19+00:00| seen|...
CVE-2026-2550
creationtimestamp| type| source ---|---|--- 2026-02-15 18:20:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116076028593114133 2026-02-16 10:30:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/116079842760845874 2026-02-16 10:30:38+00:00| seen|...
CVE-2025-69633
creationtimestamp| type| source ---|---|--- 2026-02-15 02:27:57+00:00| published-proof-of-concept| https://t.me/realcodeb0ss/321 2026-02-17 16:20:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf2xtwdib52c...
CVE-2025-71220
In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdsessionrpcclose on error path in createsmb2pipe When ksmbdiovpinrsp fails, we should call ksmbdsessionrpcclose...
CVE-2025-71220
In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdsessionrpcclose on error path in createsmb2pipe When ksmbdiovpinrsp fails, we should call ksmbdsessionrpcclose...
CVE-2026-23123
In the Linux kernel, the following vulnerability has been resolved: interconnect: debugfs: initialize srcnode and dstnode to empty strings The debugfscreatestr API assumes that the string pointer is either NULL or points to valid kmalloc memory. Leaving the pointer uninitialized can cause problem...
CVE-2026-1843
creationtimestamp| type| source ---|---|--- 2026-02-14 09:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mesnu4u5c72a 2026-02-14 09:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116068163886097864...
CVE-2026-2469
creationtimestamp| type| source ---|---|--- 2026-02-14 07:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mesh67myzn27 2026-02-17 17:10:31+00:00| seen| https://gist.github.com/alon710/d45dbb1daa1ba15aaeff33353e6910aa...
CVE-2026-26056
Yoke is a Helm-inspired infrastructure-as-code IaC package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller ATC component of Yoke. It allows users with CR create/update permissions to execute arbitrary WASM code in the ATC controller context by injecting a...