59209 matches found
RHSA-2026:0935
creationtimestamp| type| source ---|---|--- 2026-01-22 08:58:18+00:00| seen| https://gist.github.com/Darkcrai86/c86d37dd69863dff2516741f9c8f1210...
CVE-2026-24039
creationtimestamp| type| source ---|---|--- 2026-01-22 07:35:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcyofp466g2t...
CVE-2026-24034
creationtimestamp| type| source ---|---|--- 2026-01-22 07:04:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcymnjrzpo2m...
CVE-2026-0920 LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Administrative User Creation in all versions up to, and including, 1.5.6.3. This is due to the 'ajaxregisterhandle' function not restricting what user roles a user can register with. This makes it possible for...
CVE-2026-0920 LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Administrative User Creation in all versions up to, and including, 1.5.6.3. This is due to the 'ajaxregisterhandle' function not restricting what user roles a user can register with. This makes it possible for...
CVE-2026-0920
CVE-2026-0920 affects the WordPress plugin “LA-Studio Element Kit for Elementor” (≤ 1.5.6.3). The root cause is a missing role restriction in the AJAX registration handler (ajax_register_handle), which lets unauthenticated users supply the lakit_bkrole parameter and create an administrator accoun...
CVE-2026-24006
creationtimestamp| type| source ---|---|--- 2026-01-22 05:07:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcyg426q4t2h 2026-01-22 05:09:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcyg7jdntp23 2026-01-24 21:22:29+00:00| seen|...
CVE-2026-23499
creationtimestamp| type| source ---|---|--- 2026-01-22 02:32:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcy5hkrqa62m...
CVE-2026-22822
creationtimestamp| type| source ---|---|--- 2026-01-22 02:27:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcy56mejgh2t 2026-01-23 03:15:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3md2qc4ztbt26 2026-01-23 04:37:15+00:00| seen|...
CVE-2025-27378
creationtimestamp| type| source ---|---|--- 2026-01-22 01:25:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcxzpe5az52v 2026-01-22 04:24:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcydoyxvz32n...
CVE-2026-23630
creationtimestamp| type| source ---|---|--- 2026-01-22 01:14:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcxz3qaqqk2n 2026-08-27 20:35:03+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3mu3p4o3wjm2r...
CVE-2026-23893
creationtimestamp| type| source ---|---|--- 2026-01-22 01:04:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcxyj3ze4u2i 2026-01-22 09:21:41+00:00| seen| https://gist.github.com/Darkcrai86/10ff5ddfe001e215953d00fa8199fd07 2026-02-13 13:12:56+00:00| seen|...
Duplicate
This advisory duplicates another...
Azure Linux 3.0 Security Update: kernel (CVE-2024-46711)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46711 advisory. - In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix ID 0 endp usage after...
Azure Linux 3.0 Security Update: kernel (CVE-2024-43833)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43833 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Fix NULL pointer...
PT-2026-3919
Name of the Vulnerable Software and Affected Versions LA-Studio Element Kit for Elementor versions through 1.5.6.3 Description The LA-Studio Element Kit for Elementor plugin for WordPress is susceptible to unauthorized administrative user creation. This occurs because the ajax register handle...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37849)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37849 advisory. - In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCP...
CVE-2025-68138
creationtimestamp| type| source ---|---|--- 2026-01-21 21:48:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcxnljdnk42c...