WordPress Snazzy Social Media Feed plugin <= 2.5 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Abdualrhman Muzamil in WordPress Plugin Snazzy Social Media Feed versions = 2.5...

WordPress Database Addon for Contact Form 7 – CFDB7 plugin <= 1.4.1 - Unauthenticated Limited File Deletion vulnerability

Unauthenticated Limited File Deletion vulnerability discovered by Sawyer in WordPress Plugin Contact Form 7 Database Addon – CFDB7 versions = 1.4.1...

WordPress Printcart Store – Web to Print Product Designer for WooCommerce plugin <= 2.9.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution vulnerability

Unauthenticated Arbitrary File Upload to Remote Code Execution vulnerability discovered by Osman Hussein in WordPress Plugin Printcart Web to Print Product Designer for WooCommerce versions = 2.9.1...

CVE-2024-6460

CVE-2024-6460 Grow by Tradedoubler 2.0.22 - Unauthenticated LFI Usage usage: CVE-2024-6460.py -h -u URL -U USERNAME -P PASSWORD -c COMPONENT Grow by Tradedoubler 2.0.22 - Unauthenticated LFI options: -h, --help show this help message and exit -u URL, --url URL Target WordPress site URL e.g.,...

WordPress BP Profile Search plugin <= 5.9 - Unauthenticated Local File Inclusion to Remote Code Execution vulnerability

Unauthenticated Local File Inclusion to Remote Code Execution vulnerability discovered by snr in WordPress Plugin BP Profile Search versions = 5.9...

CVE-2026-74040

Wazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file overwrite vulnerability in MasterHandler.processfilesfromworker allowing a cluster worker to overwrite protected master files. Attackers controlling a worker can use a trailing-slash basename bypass and missing extravalid enforceme...

CVE-2026-74031

Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the deleterulefile and deletedecoderfile helpers that allows malicious cluster workers to delete arbitrary files via an unvalidated filename parameter. Attackers holding the cluster key can invoke these helpers through...

DEBIAN-CVE-2026-109956

NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths. Attackers controlling the modelfilename or model argument can make the weka JVM write files via -d or probe files via -l...

CVE-2026-11784-Optimole-CSRF

CVE-2026-11784: CSRF to Arbitrary File Overwrite in Optimole WordPress Plugin Summary A Cross-Site Request Forgery CSRF vulnerability in the Optimole plugin for WordPress versions = 4.2.5 allows unauthenticated attackers to silently overwrite existing media library assets via the...

CVE-2026-43637-cornac

CVE-2026-43637: Path Traversal Tar Slip in Cornac via extractarchive Severity: High, CVSS 4.0 8.8 , Critical, CVSS 3.1 9.1assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N Vector v4.0: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H Affected:...

CVE-2026-48908-joomla-sp-page-builder-detection

CVE-2026-48908 — Joomla SP Page Builder Validation and Detection Laboratory validation of CVE-2026-48908 in the Joomla SP Page Builder component, focused on technical evidence, event reconstruction, and defensive detection opportunities. The repository documents a controlled test in which the SP...

CVE-2026-56291

Auto Scanning Version & Exploit CVE-2026-56291 POC Joomla Unauthenticated Arbitrary File Upload leading to RCE in Balbooa Forms FOFA / Shodan FOFA: body="combaforms" Shodan: http.html:"baforms"...

Windows Composite Image File System Elevation of Privilege Vulnerability

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally...

Windows Kernel-Mode Drivers Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...

Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

Windows exFAT File System Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally...

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...

Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges over a network...

Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...