CVE-2026-24990

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

CVE-2026-24990: Missing Authorization

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through = 2.2.8...

PT-2026-6236

Name of the Vulnerable Software and Affected Versions Fahad Mahmood WP Docs versions through 2.2.8 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for exploitation of the system. Recommendations Update...

WordPress plugin WP Docs 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: sbomqs, metacontroller, osv-scanner, vault-benchmark, actions-runner-controller, crossplane-provider-aws-sns, container-object-storage-interface, crossplane-provider-aws-cloudfront, stakater-reloader, calico, terraform-mcp-server, authservice, octo-sts, croc,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, crossplane-provider-aws-cloudfront, licenseclassifier, terraform-mcp-server, protoc-gen-go-grpc, kbld, rabbitmq-cluster-operator, kubernetes-dashboard-api, rabbitmq-default-user-credential-updater, kube-logging-operator, paranoia,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, crossplane-provider-aws-cloudfront, licenseclassifier, terraform-mcp-server, protoc-gen-go-grpc, kbld, rabbitmq-cluster-operator, kubernetes-dashboard-api, rabbitmq-default-user-credential-updater, kube-logging-operator, paranoia,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, crossplane-provider-aws-cloudfront, licenseclassifier, terraform-mcp-server, protoc-gen-go-grpc, kbld, rabbitmq-cluster-operator, kubernetes-dashboard-api, rabbitmq-default-user-credential-updater, kube-logging-operator, paranoia,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, crossplane-provider-aws-cloudfront, licenseclassifier, terraform-mcp-server, protoc-gen-go-grpc, kbld, rabbitmq-cluster-operator, kubernetes-dashboard-api, rabbitmq-default-user-credential-updater, kube-logging-operator, paranoia,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: sbomqs, metacontroller, osv-scanner, vault-benchmark, actions-runner-controller, crossplane-provider-aws-sns, container-object-storage-interface, crossplane-provider-aws-cloudfront, stakater-reloader, calico, terraform-mcp-server, authservice, octo-sts, croc,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: sbomqs, metacontroller, osv-scanner, vault-benchmark, actions-runner-controller, crossplane-provider-aws-sns, container-object-storage-interface, crossplane-provider-aws-cloudfront, stakater-reloader, calico, terraform-mcp-server, authservice, octo-sts, croc,...

Directory Traversal

Overview @backstage/plugin-techdocs-node is a Common node.js functionalities for TechDocs, to be shared between techdocs-backend plugin and techdocs-cli Affected versions of this package are vulnerable to Directory Traversal via the TechdocsGenerator function when processing documentation from...

CVE-2026-25153 @backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks

Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities for TechDocs. In versions of @backstage/plugin-techdocs-node prior to 1.13.11 and 1.14.1, when TechDocs is configured with runIn: local, a malicious actor who...

Malicious Package

Overview docs-ux is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview acp-docs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview cosmos-hub-docs-site is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview fabric-shim-docs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-206360

The default password for the extended admin user mode in the application U9ExosAdmin.exe "Kaba 9300 Administration" is hard-coded in multiple locations as well as documented in the locally stored user documentation...

[SECURITY] Fedora 42 Update: python3.12-3.12.12-3.fc42

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...

[SECURITY] Fedora 43 Update: python3.12-3.12.12-3.fc43

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...