CVE-2026-100509 WordPress RepairBuddy plugin <= 4.1225 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Stored XSS.This issue affects RepairBuddy: from n/a through 4.1225...

CVE-2026-100509 WordPress RepairBuddy plugin <= 4.1225 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Stored XSS.This issue affects RepairBuddy: from n/a through 4.1225...

CVE-2026-103085 WordPress WP User Manager plugin <= 2.9.20 - Privilege Escalation vulnerability

Improper Access Control vulnerability in WP User Manager WP User Manager wp-user-manager allows Privilege Abuse.This issue affects WP User Manager: from n/a through 2.9.20...

EUVD-2026-92582

Improper Access Control vulnerability in WP User Manager WP User Manager wp-user-manager allows Privilege Abuse.This issue affects WP User Manager: from n/a through 2.9.20...

CVE-2021-33104

CVE-2021-33104 Intel Advisory - Improper access control in the IntelR OFU software before version 14.1.28 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00769.html...

CVE-2025-15643 WordPress Adsmonetizer plugin <= 3.2.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jose Fernandez Adsmonetizer adsensei-b30 allows Reflected XSS.This issue affects Adsmonetizer: from n/a through 3.2.4...

CVE-2025-15643

The Adsmonetizer plugin (by Jose Fernandez) is vulnerable to Reflected Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. This issue affects versions from n/a through 3.2.4 . An attacker could potentially execute malicious scripts in a user's browse...

CVE-2026-105382

A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function updatesubaccount of the file php/controller.php of the component Account Administration. This manipulation of the argument userid causes improper...

CVE-2026-42700

The GhozyLab Image Slider Widget (image-slider-widget) plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) . This issue is caused by Improper Neutralization of Input During Web Page Generation (CWE-79). The vulnerability affects versions from n/a through 1.1.130 . No specific ...

EUVD-2026-92521

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab Image Slider Widget image-slider-widget allows Stored XSS.This issue affects Image Slider Widget: from n/a through 1.1.130...

CVE-2026-105382 onetwothreeneth HospitalManagementSystem Account Administration controller.php update_subaccount improper authorization

A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function updatesubaccount of the file php/controller.php of the component Account Administration. This manipulation of the argument userid causes improper...

EUVD-2026-92479

A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function updatesubaccount of the file php/controller.php of the component Account Administration. This manipulation of the argument userid causes improper...

CVE-2026-105382 onetwothreeneth HospitalManagementSystem Account Administration controller.php update_subaccount improper authorization

A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function updatesubaccount of the file php/controller.php of the component Account Administration. This manipulation of the argument userid causes improper...

CVE-2026-105382

The onetwothreeneth HospitalManagementSystem is vulnerable to improper authorization in the Account Administration component. Specifically, a flaw in the update_subaccount function within the php/controller.php file allows for the manipulation of the user_id argument. This vulnerability enables r...

CVE-2026-105382 onetwothreeneth HospitalManagementSystem Account Administration controller.php update_subaccount improper authorization

A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function updatesubaccount of the file php/controller.php of the component Account Administration. This manipulation of the argument userid causes improper...

CVE-2026-104893

The project management tool Plane is vulnerable to improper validation in its API. Prior to version 1.4.0 , an authenticated user can use the PATCH /api/users/api-tokens/{token_id}/ endpoint to modify the allowed_rate_limit field without server-side validation or a maximum limit. This allows an a...

c-CVE-2024-0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

CVE-2024-38475

CVE-2024-38475 POC Credit : All credit to this guy: https://blog.orange.tw/ and https://x.com/orange8361 all i did was make a POC script from his research. Introduction : Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesyste...

CVE-2021-26088

PoC for CVE-2021-26088 written in PowerShell Description An improper authentication vulnerability in FSSO Collector may allow an unauthenticated user to bypass any firewall authentication rule and access the protected network via sending specifically crafted UDP login notification packets...

CVE-2026-43499

CVE-2026-43499 Exploitation Notes Severity: HIGH CVSS: 7.8 Impact: Confidentiality, Integrity, Availability Published: 2026-05-21 Technical Summary CVE-2026-43499 is a vulnerability within the Linux kernel, specifically affecting the rtmutex component, which is responsible for managing real-time...