25090 matches found
PT-2026-50359
Unauthenticated PHP Object Injection in WP Activity Log = 5.6.3.1 versions...
PT-2026-50299
Unauthenticated Deserialization of untrusted data in Slimstat Analytics 5.4.0 versions...
PT-2026-50333
Unauthenticated Broken Authentication in WooCommerce Dropshipping = 5.2.4 versions...
PT-2026-50313
CP Client Arbitrary File Download in Client Portal Pro = 5.6.2 versions...
PT-2026-50402
Unauthenticated Local File Inclusion in Atomlab = 2.4.5 versions...
PT-2026-50291
Unauthenticated SQL Injection in WPJobster = 6.3.5 versions...
PT-2026-50326
Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...
PT-2026-50305
Unauthenticated PHP Object Injection in Mildhill = 1.5 versions...
Fedora 45 : krita (2026-4084e20f7e)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4084e20f7e advisory. Automatic update for krita-6.0.2.1-1.fc45. Changelog Wed Jun 17 2026 Than Ngo - 6.0.2.1-1 - Fix rhbz2481429, Update to 6.0.2.1 - Fix rhbz2476570,...
Fedora 45 : buildah / containers-common / podman / skopeo (2026-2419096432)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-2419096432 advisory. Automatic update for buildah-1.44.0-1.fc45, podman-6.0.0rc1-1.fc45, skopeo-1.23.0-1.fc45, containers- common-0.68.0-1.fc45. Changelog for buildah Wed May 27...
Microsoft Office Buffer Overflow Code Execution
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
MAL-2026-5938 Malicious code in speed4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0766e347295e7a13e0604a89de30f662a24b690598f1e4b01edaac5400178347 [email protected] is not a functional Node package. package.json declares main: sw.js, but sw.js is a browser ServiceWorker importScripts'./8cfc2/hgshm.js...
Malicious code in speed4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0766e347295e7a13e0604a89de30f662a24b690598f1e4b01edaac5400178347 [email protected] is not a functional Node package. package.json declares main: sw.js, but sw.js is a browser ServiceWorker importScripts'./8cfc2/hgshm.js...
MINI-M852-G67V-25WG
Bulletin has no description...
CVE-2026-48055
Streambert (Electron-based desktop app) has a Zip Slip vulnerability in its subtitle extraction logic affecting versions up to 2.4.0. The code concatenates raw archive entry names to a temporary directory, enabling path traversal and arbitrary file writes if a malicious ZIP with traversal sequenc...
CVE-2026-35327
creationtimestamp| type| source ---|---|--- 2026-06-16 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1923 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8...
CVE-2025-69162 WordPress Grecko theme <= 5.17 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Grecko = 5.17 versions...
CVE-2026-35319
Technical details for CVE-2026-35319 are not provided in the supplied documents; no affected products, versions, or exploit information are disclosed here. Monitor for updates.