EUVD-2026-75266

The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration form, reading the permitted-role allow-list from an arbitrary attacker-controlled post instead. A user able to create a post Contributor...

CVE-2026-81431 Registration Form for WooCommerce 1.1.0 - 1.1.2 - Contributor+ Privilege Escalation via Unvalidated tgwcfb_id

The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration form, reading the permitted-role allow-list from an arbitrary attacker-controlled post instead. A user able to create a post Contributor...

CVE-2021-37975

このリポジトリには README がありません。...

CVE-2021-31805

CVE-2021-31805 远程代码执行 S2-062 CVE-2021-31805 由于 Apache Struts2 对 S2-061 CVE-2020-17530 的修复不完整，某些标签属性仍可执行 OGNL 表达式，该漏洞允许攻击者构造恶意数据以远程执行任意代码。 CVE202131805POCEXP.py POC pocsuite -r CVE202131805POCEXP.py -u url EXP pocsuite -r CVE202131805POCEXP.py -u url --attack --command "command" 免责声明...

CVE-2021-31805-POC

CVE-2021-31805-POC 漏洞信息 Apache Struts 是一个免费的开源 MVC 框架，用于创建优雅的现代 Java Web 应用程序。它支持约定优于配置，可使用插件架构进行扩展，并附带支持 REST、AJAX 和 JSON 的插件。 近日Apache官方公布S2-062远程代码执行漏洞安全公告，漏洞编号为 CVE-2021-31805： 针对 CVE-2020-17530 发布的修复不完整。因此，从 Apache Struts 2.0.0 到 2.5.29，如果开发人员通过使用 %… 语法应用强制 OGNL...

perl-DBI security update

An update is available for perl-DBI. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list DBI is a database access Application Programming Interface API for the Perl...

RLSA-2026:65887 Important: perl-DBI security update

DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fixes: DBI: Incomplete fix for...

PT-2026-89611

🚨 CVE-2026-78569 IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner. 🎖@cveNotify...

AlmaLinux 10 : perl-DBI (ALSA-2026:65887)

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:65887 advisory. DBI: Incomplete fix for CVE-2026-14380 DBI: Arbitrary code execution via caller-influenced Profile attribute CVE-2026-19546 Tenable has extracted the preceding...

RockyLinux 10 : perl-DBI (RLSA-2026:65887)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:65887 advisory. DBI: Incomplete fix for CVE-2026-14380 DBI: Arbitrary code execution via caller-influenced Profile attribute CVE-2026-19546 Tenable has extracted the preceding...

PT-2026-89390

Summary There is a medium severity vulnerability in Traefik's handling of request headers whose name aliases another header name. Go canonicalizes header names on dashes only, so X-Auth-User, X Auth User and X.Auth.User are three distinct headers to Traefik, while backends that derive variable...

AlmaLinux 9 : perl-DBI (ALSA-2026:66179)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:66179 advisory. DBI: Incomplete fix for CVE-2026-14380 DBI: Arbitrary code execution via caller-influenced Profile attribute CVE-2026-19546 Tenable has extracted the preceding...

CVE-2026-80921

In the Linux kernel, the following vulnerability has been resolved: K...

PT-2026-89386

AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 master, 2026-08-23 incompletely sanitizes sensitive user fields in the APIName=video response. Video rows include columns joined from the video owner's user record, and API::get api video calls removeSensitiveUserFields only when th...

perl-DBI security update

1.643-26.4 - Fix CVE-2026-19546: incomplete fix for CVE-2026-14380 in DBI::Profile Resolves: RHEL-236830...

PT-2026-89294

The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration form, reading the permitted-role allow-list from an arbitrary attacker-controlled post instead. A user able to create a post Contributor...

CVE-2026-87549

Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.3...

CVE-2026-87436

Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36...

CVE-2026-87446

Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010...

Oracle Linux 10 : ELSA-2026-65887-0: / perl-DBI (ELSA-2026-658870)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-658870 advisory. 1.643-26.4 - Fix CVE-2026-19546: incomplete fix for CVE-2026-14380 in DBI::Profile Resolves: RHEL-236830 Tenable has extracted the preceding description bloc...