17657 matches found
PT-2026-46359
Unauthenticated Local File Inclusion in Medeus = 1.14 versions...
CVE-2026-10860: Incorrect Authorization
A logic error in the MISP CRUD component delete handler allowed validation failures to be bypassed when requests used the HTTP DELETE method. Due to missing parentheses in the delete condition, the expression was evaluated as $validationError === null && POST || DELETE, meaning a DELETE request...
PT-2026-46368
Unauthenticated Local File Inclusion in Skyward = 1.10 versions...
PT-2026-46379
Unauthenticated Local File Inclusion in ITactics = 1.0 versions...
PT-2026-46356
Unauthenticated Local File Inclusion in Putter = 1.17 versions...
PT-2026-46367
Unauthenticated Local File Inclusion in WineShop = 3.17 versions...
PT-2026-46351
Unauthenticated Local File Inclusion in Abelle = 1.22 versions...
MISP 安全漏洞
MISP is a set of open-source software solutions developed by MISP. This product is used for collecting, storing, distributing, and sharing network security metrics. It also includes functions such as analyzing threats to network security and malware analysis. MISP has a security vulnerability,...
PT-2026-46342
Unauthenticated Local File Inclusion in Fortius = 2.3.0 versions...
PT-2026-46323
Unauthenticated Local File Inclusion in Imba = 1.5.0 versions...
PT-2026-46332
Unauthenticated Local File Inclusion in LuxMed | Medicine & Healthcare Doctor WordPress Theme = 1.2.2 versions...
PT-2026-46373
Unauthenticated Local File Inclusion in Eventicity = 1.5 versions...
PT-2026-46375
Unauthenticated Local File Inclusion in Resurs = 1.3 versions...
PT-2026-46345
Subscriber SQL Injection in Events Schedule - WordPress Events Calendar Plugin = 2.7.2 versions...
PT-2026-46366
Unauthenticated Local File Inclusion in Grecko = 5.17 versions...
PT-2026-46362
Unauthenticated Local File Inclusion in Granola = 1.13 versions...
PT-2026-46348
Subscriber Privilege Escalation in Genemy = 1.6.6 versions...
PT-2026-46326
Name of the Vulnerable Software and Affected Versions Raider Spirit versions prior to 1.1.3 Description An unauthenticated Local File Inclusion LFI exists, which allows an attacker to include and read local files on the server without requiring authentication. Recommendations Update to a version...