56634 matches found
PT-2026-46322
Unauthenticated Local File Inclusion in Modernee = 1.6.0 versions...
PT-2026-46369
Unauthenticated Local File Inclusion in Choreo = 1.6 versions...
PT-2026-46346
Unauthenticated Local File Inclusion in Wanium = 1.9.8 versions...
PT-2026-46220
A vulnerability was determined in mjperpinosa stumasy. The impacted element is an unknown function of the file application/PHP/objects/profiles/change profile image.php. Executing a manipulation of the argument pr profile image can lead to unrestricted upload. The attack may be launched remotely...
PT-2026-46342
Unauthenticated Local File Inclusion in Fortius = 2.3.0 versions...
PT-2026-46337
Unauthenticated Local File Inclusion in Dazzle = 1.0.0 versions...
PT-2026-46377
Unauthenticated Local File Inclusion in Etude = 1.6 versions...
PT-2026-46372
Unauthenticated Local File Inclusion in Spike = 1.2 versions...
PT-2026-46399
A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats path of the file /bin/rstats of the component Web UI. Executing a manipulation can lead to os command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be...
PT-2026-46353
Unauthenticated Local File Inclusion in Preservation = 1.10 versions...
PT-2026-46348
Subscriber Privilege Escalation in Genemy = 1.6.6 versions...
PT-2026-46347
Subscriber Broken Access Control in Genemy = 1.6.6 versions...
PT-2026-46371
Unauthenticated Local File Inclusion in Eros = 1.3 versions...
PT-2026-46180
Name of the Vulnerable Software and Affected Versions modelscope ms-swift versions prior to 4.2.1 Description The PIL Image Cache Key Handler component contains an issue where the Template. save pil image function in the swift/template/base.py file uses a weak hash. Exploitation requires local...
PT-2026-46367
Unauthenticated Local File Inclusion in WineShop = 3.17 versions...
PT-2026-46366
Unauthenticated Local File Inclusion in Grecko = 5.17 versions...
PT-2026-46387
Name of the Vulnerable Software and Affected Versions WP Meta Sort Posts versions prior to 1.0 Description The WP Meta Sort Posts plugin for WordPress is subject to Cross-Site Request Forgery CSRF, a type of attack where an unauthorized user tricks a victim into performing actions they did not...
PT-2026-46345
Subscriber SQL Injection in Events Schedule - WordPress Events Calendar Plugin = 2.7.2 versions...