CVE-2026-93904

The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to generic SQL Injection via the 'excludeposts' parameter in all versions up to, and including, 4.1.12 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2026-93855 SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection via 'subscriberid' Parameter

The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'subscriberid' parameter in all versions up to, and including, 1.26.1.20 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

CVE-2026-107045

Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 versionCode 62 allows unauthorized attackers to arbitrarily read another's Nostr event database...

PT-2026-132387

Name of the Vulnerable Software and Affected Versions OpenTracks version 6751 Description Insecure permissions in the io.file.importer.ImportActivity component allow unauthorized attackers to inject crafted tracking data into the user's location database by sending a specially crafted SEND messag...

CVE-2026-107015

Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database...

EUVD-2026-113258

Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking data into the victim's location database via a crafted SEND message...

CVE-2026-107021

The helloworld1 AnyMemo application (version 20260730 ) contains a vulnerability due to insecure permissions in the CardProvider content provider component. This flaw allows unauthorized attackers to arbitrarily read flashcards from a user's entire memorization database. The vulnerability is cate...

CVE-2026-93904: dejanmarkovic: The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to generic…

The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to generic SQL Injection via the 'excludeposts' parameter in all versions up to, and including, 4.1.12 due to insufficient escaping on the user supplied parameter and lack of sufficient...

Centereon SQL injection vulnerability

Centreon versions 25.10 through 25.10.15 and 24.10 through 24.10.28 contain an SQL injection vulnerability. This vulnerability arises from SQL injection, allowing authenticated users with ACL management privileges to read and modify the Centreon database...

PT-2026-130653

The Contact Form by Supsystic WordPress plugin before 1.11.1 does not sandbox the template engine used to render its forms and allows stored form-editor content to reach that engine as executable template code, enabling an administrator to perform server-side template injection and execute...

Server Optimizer DoS

Vulnerability of the Server component: The Optimizer for Oracle Database Management System MySQL Server is affected by uncontrolled resource consumption. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Server Optimizer DoS

Vulnerability of the Server component: The Optimizer for Oracle Database Management System MySQL Server is affected by uncontrolled resource consumption. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Server Optimizer DoS

Vulnerability of the Server component: The Optimizer for Oracle Database Management System MySQL Server is affected by uncontrolled resource consumption. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Server Optimizer DoS

Vulnerability of the Server component: The Optimizer for Oracle Database Management System MySQL Server is affected by access control flaws. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Server Optimizer DoS

Vulnerability of the Server component: The Optimizer for Oracle Database Management System MySQL Server is affected by uncontrolled resource consumption. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

PT-2026-130671

This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the password recovery functionality in the web management interface. An unauthenticated remote attacker could exploit this vulnerability by supplying crafted SQL query through input...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libreoffice (UTSA-2026-147021)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147021 advisory. LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a lin...

Radius Synergies Radius Xenia M2M Platform SQL injection vulnerability

The Radius Synergies Radius Xenia M2M Platform contains an SQL injection vulnerability. This vulnerability stems from insufficient input validation in the password recovery functionality within its web management interface. Unauthenticated remote attackers can supply specially crafted SQL queries...

EUVD-2026-113268

Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 versionCode 62 allows unauthorized attackers to arbitrarily read another's Nostr event database...

CVE-2026-107033

Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 versionCode 60 allows unauthorized attackers to arbitrarily read and modify another user's task database...