17886 matches found
PT-2026-46372
Unauthenticated Local File Inclusion in Spike = 1.2 versions...
PT-2026-46328
Unauthenticated PHP Object Injection in Reisen = 1.4.1 versions...
PT-2026-46363
Unauthenticated Local File Inclusion in Printo = 1.11 versions...
PT-2026-46387
Name of the Vulnerable Software and Affected Versions WP Meta Sort Posts versions prior to 1.0 Description The WP Meta Sort Posts plugin for WordPress is subject to Cross-Site Request Forgery CSRF, a type of attack where an unauthorized user tricks a victim into performing actions they did not...
PT-2026-46373
Unauthenticated Local File Inclusion in Eventicity = 1.5 versions...
PT-2026-46368
Unauthenticated Local File Inclusion in Skyward = 1.10 versions...
PT-2026-46339
Unauthenticated Local File Inclusion in Snow Club = 1.1 versions...
MISP security vulnerabilities
MISP is a set of open-source software solutions developed by MISP. This product is used for collecting, storing, distributing, and sharing network security metrics. It also includes functions such as analyzing threats to network security and malware analysis. MISP has a security vulnerability,...
PT-2026-46354
Unauthenticated Local File Inclusion in Gat = 1.16 versions...
PT-2026-46379
Unauthenticated Local File Inclusion in ITactics = 1.0 versions...
PT-2026-46362
Unauthenticated Local File Inclusion in Granola = 1.13 versions...
PT-2026-46343
Unauthenticated PHP Object Injection in Plumbing = 1.6 versions...
PT-2026-46326
Name of the Vulnerable Software and Affected Versions Raider Spirit versions prior to 1.1.3 Description An unauthenticated Local File Inclusion LFI exists, which allows an attacker to include and read local files on the server without requiring authentication. Recommendations Update to a version...
CVE-2026-10860: Incorrect Authorization
A logic error in the MISP CRUD component delete handler allowed validation failures to be bypassed when requests used the HTTP DELETE method. Due to missing parentheses in the delete condition, the expression was evaluated as $validationError === null && POST || DELETE, meaning a DELETE request...
PT-2026-46369
Unauthenticated Local File Inclusion in Choreo = 1.6 versions...
PT-2026-46358
Unauthenticated Local File Inclusion in Top Dog = 1.0.5 versions...
JoomSky Joomla com_jsjobs: Path traversal vulnerability
JoomSky Joomla comjsjobs is a recruitment and job management component provided by JoomSky Inc. Version 1.2.6 of JoomSky Joomla comjsjobs contains a path traversal vulnerability. This vulnerability arises from improper handling of custom user field parameters, which may allow authenticated...
PT-2026-46334
Unauthenticated Local File Inclusion in Ingenioso = 1.14.0 versions...