User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment Deletion

The WP User Frontend plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check in the FrontendFormAjax::submitpost function. This makes it possible for unauthenticated attackers to delete attachment records through the plugin's AJAX handling when a public...

McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting

McAfee Network Data Loss Prevention User-Agent 9.3.x contains a cross-site scripting vulnerability which allows remote attackers to get session/cookie information via modification of the HTTP request. id: CVE-2017-4011 info: name: McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting...

CVE-2023-0400

Bypass di Trellix Data Loss Prevention DLP https://kcm.trellix.com/corporate/index?page=content&id=SB10394...

D-Link DNS-320 - Remote Code Execution

The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. id: CVE-2019-16057 info: name: D-Link DNS-320 - Remote Code Execution author: DhiyaneshDk severity: critical description: | The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerabl...

CVE-2023-22518

CVE-2023-22518 Vulnerabilità di autorizzazione impropria in Confluence Data Center e Server. Atlassian ha avvisato gli amministratori di una vulnerabilità critica in Confluence. Lo sfruttamento di questo problema può portare alla perdita di dati, quindi gli sviluppatori invitano a installare le...

CVE-2023-37598

CVE-2023-37598 — issabel-pbx 4.0.0-6: Cross-Site Request Forgery CSRF Panoramica ID CVE: CVE-2023-37598 Tipo di vulnerabilità: Cross-Site Request Forgery CSRF Prodotto interessato: issabel-pbx v4.0.0-6 Severità: Media Scoperta da: Sahil Ojha Data di divulgazione: 10/07/2023 Homepage del vendor:...

CVE-2026-42945

CVE-2026-42945 PoCGo चीनी | English nginx HTTP/2 कार्यान्वयन CVE-2026-42945 के लिए जांच एवं उपयोग सहायक उपकरण, जिसका उपयोग अधिकृत वातावरण में भेद्यता की उपस्थिति सत्यापित करने, सुधार प्रभाव की तुलना करने, और नियंत्रित प्रायोगिक वातावरण में PoC व्यवहार को पुनः उत्पन्न करने के लिए किया जाता है।...

interactsh

An OOB interaction gathering server and client library Features • Usage • • • •...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098753)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098753 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix isochronous Ring Underrun/Overrun event handling The TRB pointer of these events...

CVE-2023-22518

CVE-2023-22518 Schwachstelle durch fehlerhafte Autorisierung in Confluence Data Center und Server. Atlassian hat Administratoren vor einer schwerwiegenden Schwachstelle in Confluence gewarnt. Die Ausnutzung dieser Schwachstelle kann zu Datenverlust führen. Die Entwickler empfehlen daher, den Patc...

CVE-2026-71506

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the payments REST API delete endpoint that allows authenticated attackers with invoice-deletion rights to permanently delete any payment record by bypassing the intended payment-issuance rights check. Attackers can exploit...

CVE-2026-76072

Continue CLI through 1.5.47 uses an incomplete denylist in evaluateTerminalCommandSecurity.ts as its sole barrier against destructive shell commands in headless and auto modes. The dangerous-path check covers only /, ~, /usr, /etc, /bin, and /sbin, leaving paths like /home, /root, /var, /opt, and...

firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Data Loss Prevention component...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: virtio-net: Added validation for the used length. This addition ensures that the used length is validated which may come from an untrusted device, to prevent data corruption or loss...

firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Data Loss Prevention component...

firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Data Loss Prevention component...

EUVD-2026-64323

Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik 4.7.2- The list controllers doemtpy endpoints lacks ACL gates, a plain GET empties the target list's table...

SUSE CVE-2026-74983

Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

EUVD-2026-42235

Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import...

CVE-2026-72365

A flaw was found in the netfs component of the Linux kernel. This vulnerability arises from incorrect handling of NETFSRREQOFFLOADCOLLECTION during writethrough operations. This issue could lead to asynchronous OSYNC writes not being properly collected, potentially resulting in data inconsistency...