95176 matches found
PT-2026-63608
Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions...
PT-2026-63859
Unauthenticated Arbitrary File Deletion in Participants Database = 2.7.8.3 versions...
PT-2026-63877
Contributor SQL Injection in Quiz And Survey Master = 11.2.0 versions...
Alibaba Cloud Linux 3 : 0218: perl-DBI:1.641 (ALINUX3-SA-2026:0218)
The remote Alibaba Cloud Linux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0218 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-10879: DBI versions before 1.648...
PT-2026-63606
Database-update requests lacked consistent token and Super User checks, this could cause unauthorized updates...
PT-2026-63863
Unauthenticated Cross Site Scripting XSS in Form Vibes – Database Manager for Forms = 1.5.2 versions...
PT-2026-64189
Name of the Vulnerable Software and Affected Versions CodeAstro Online Classroom version 1.0 Description Remote SQL injection is possible due to improper handling of the aid argument within the '/OnlineClassroom/loginlinkadmin.php' endpoint. SQL injection is a technique where an attacker inserts...
PT-2026-63595
The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injection via the 'tc event filter' parameter in all versions up to, and including, 3.6.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S...
PT-2026-63850
Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...
CVE-2026-15448: Improper Neutralization of Special Elements used in an SQL Command
The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injection via the 'tcorderstatusfilter' parameter in all versions up to, and including, 3.6.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existi...
PT-2026-64200
Name of the Vulnerable Software and Affected Versions Heimdall Data Database Proxy affected versions not specified Description Remote authenticated attackers can execute arbitrary code with root privileges on affected installations. The issue stems from the lack of proper neutralization of CRLF...
CVE-2026-59555: Improper Limitation of a Pathname to a Restricted Directory
Unauthenticated Arbitrary File Deletion in Participants Database = 2.7.8.3 versions...
CVE-2026-59525: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Participants Database = 2.7.8.3 versions...
CVE-2026-61947: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Form Vibes – Database Manager for Forms = 1.5.2 versions...
PT-2026-63864
Unauthenticated SQL Injection in WPDM – Premium Packages = 6.2.0 versions...
PT-2026-63874
Contributor SQL Injection in MapSVG = 8.14.0 versions...
PT-2026-63819
Subscriber Broken Access Control in Participants Database = 2.7.8.4 versions...
PT-2026-63849
Unauthenticated SQL Injection in Participants Database = 2.7.8.3 versions...
CVE-2026-15761: Improper Neutralization of Special Elements used in an SQL Command
The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injection via the 'tceventfilter' parameter in all versions up to, and including, 3.6.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...