CVE-2016-20077 WordPress Plugin Photocart Link 1.6 Local File Inclusion via decode.php

WordPress Plugin Photocart Link 1.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insufficient input validation in decode.php. Attackers can supply base64-encoded file paths in the 'id' parameter to the decode.php endpoin...

CVE-2016-20077 WordPress Plugin Photocart Link 1.6 Local File Inclusion via decode.php

WordPress Plugin Photocart Link 1.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insufficient input validation in decode.php. Attackers can supply base64-encoded file paths in the 'id' parameter to the decode.php endpoin...

CVE-2016-20073 Answer My Question 1.3 Plugin WordPress SQL Injection via modal.php

Answer My Question 1.3 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' POST parameter. Attackers can submit crafted SQL statements to the modal.php endpoint to extract...

CVE-2016-20073 Answer My Question 1.3 Plugin WordPress SQL Injection via modal.php

Answer My Question 1.3 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' POST parameter. Attackers can submit crafted SQL statements to the modal.php endpoint to extract...

CVE-2016-20071 WordPress 404 Redirection Manager Plugin 1.0 SQL Injection

The 404 Redirection Manager plugin version 1.0 for WordPress contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through unsanitized user input. Attackers can craft GET requests with SQL injection payloa...

CVE-2026-34028

The CVE-2026-34028 entry concerns Wertheim SafeController Software (AssemblyVersion 6.15.8328.28014). It exposes web-accessible file paths that lack authorization, allowing an unauthenticated attacker to directly download files via HTTP endpoints such as /Resources/CompanyId_[ID]/Audio/ and /Safe...

CVE-2026-49113

creationtimestamp| type| source ---|---|--- 2026-06-15 07:16:13+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mocqgz2rtq2p 2026-06-17 00:35:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moh2yktud42v...

CVE-2026-12204

creationtimestamp| type| source ---|---|--- 2026-06-15 04:02:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocfmoby2d2m...

CVE-2026-12207 medkey-org medkey HTTP REST API PatientController.php actionGetPatientById resource injection

A security flaw has been discovered in medkey-org medkey up to fc09b7ba9441ff590b72d428d5380834216b09ed. Impacted is the function actionGetPatientById of the file app\modules\medical\port\rest\controllers\PatientController.php of the component HTTP REST API. The manipulation of the argument ID...

CVE-2026-47162

creationtimestamp| type| source ---|---|--- 2026-06-15 01:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moc3ivsjqx2n 2026-06-21 22:43:05+00:00| seen| https://bsky.app/profile/canartuc.com/post/3motgzrwjm222...

PT-2026-49202

Name of the Vulnerable Software and Affected Versions ash authentication versions 0.1.0 through 4.13.x ash authentication versions 5.0.0-rc.0 through 5.0.0-rc.9 Description An authentication bypass by spoofing allows account takeover of local users during OAuth2 or OIDC sign-in. The issue occurs...

PT-2026-49199

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, exposes web-accessible file paths that are not protected by an authorization scheme. An unauthenticated attacker can directly access HTTP endpoints to download files from locations such as /Resources/CompanyId ID/Audio/ and...

PT-2026-49215

WordPress Plugin Photocart Link 1.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insufficient input validation in decode.php. Attackers can supply base64-encoded file paths in the 'id' parameter to the decode.php endpoin...

MINI-82JQ-MQPJ-PJ6R

Bulletin has no description...

MINI-W9QM-324F-QQ2V

Bulletin has no description...

MINI-6GCP-H839-PQ8M

Bulletin has no description...

CVE-2026-54412

creationtimestamp| type| source ---|---|--- 2026-06-14 20:07:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mobl44ylsv2f 2026-06-15 00:01:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moby5ha7xq2w...

CVE-2026-53807

creationtimestamp| type| source ---|---|--- 2026-06-14 17:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mobamt2x672p...

CVE-2026-47965

creationtimestamp| type| source ---|---|--- 2026-06-14 01:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo7kywnwup2y...

SUSE SLES15 Security Update : openssh (SUSE-SU-2026:2375-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2375-1 advisory. This update for openssh fixes the following issues - CVE-2026-3497: information disclosure or denial of service due to uninitialize...