EUVD-2026-92589

Improper Validation of Specified Quantity in Input vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Input Data Manipulation.This issue affects BuildKit – Product Builder for WooCommerce – Custom PC Builder: from n/a through 1.0....

CVE-2026-97275

The VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin (versions n/a through 1.0.28 ) is vulnerable to Improper Validation of Specified Quantity in Input (CWE-1284). This flaw allows for Input Data Manipulation , which can be used to bypass intended logic within the ...

CVE-2026-97275 WordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - Bypass Vulnerability vulnerability

Improper Validation of Specified Quantity in Input vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Input Data Manipulation.This issue affects BuildKit – Product Builder for WooCommerce – Custom PC Builder: from n/a through 1.0....

CVE-2026-100509 WordPress RepairBuddy plugin <= 4.1225 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Stored XSS.This issue affects RepairBuddy: from n/a through 4.1225...

CVE-2026-100509

The RepairBuddy (computer-repair-shop) WordPress plugin, developed by Webful Creations , is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This vulnerability affects version 4.1225 and all preceding versions. Exploitation of thi...

CVE-2026-100509 WordPress RepairBuddy plugin <= 4.1225 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Stored XSS.This issue affects RepairBuddy: from n/a through 4.1225...

CVE-2026-93317 Container blob cache can accept unverified content

An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity...

CVE-2026-93317 Container blob cache can accept unverified content

An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity...

CVE-2026-93317

The buildkit software (referenced via the Moby project) is vulnerable to a flaw where an unauthenticated attacker controlling a registry or OCI-layout blob source can provide blob contents that do not match the claimed digest. This allows the resulting snapshot to be cached under the incorrect di...

EUVD-2026-92529

An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity...

CVE-2026-93317 Container blob cache can accept unverified content

An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity...

Php-unit-CVE-2017-9841

Vulnerabilità di esecuzione di codice remoto in phpunit CVE-2017-9841 Composer è uno strumento di gestione dei pacchetti PHP. Utilizzando Composer per installare un pacchetto, verrà creata una cartella vendor nella directory corrente e tutti i file verranno inseriti al suo interno. Di solito ques...

CVE-2025-15643 WordPress Adsmonetizer plugin <= 3.2.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jose Fernandez Adsmonetizer adsensei-b30 allows Reflected XSS.This issue affects Adsmonetizer: from n/a through 3.2.4...

CVE-2025-15643

The Adsmonetizer plugin (by Jose Fernandez) is vulnerable to Reflected Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. This issue affects versions from n/a through 3.2.4 . An attacker could potentially execute malicious scripts in a user's browse...

CVE-2026-42700

The GhozyLab Image Slider Widget (image-slider-widget) plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) . This issue is caused by Improper Neutralization of Input During Web Page Generation (CWE-79). The vulnerability affects versions from n/a through 1.1.130 . No specific ...

EUVD-2026-92521

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab Image Slider Widget image-slider-widget allows Stored XSS.This issue affects Image Slider Widget: from n/a through 1.1.130...

Wordpress-CVE-2020-35749

Wordpress Plugin Simple Job Board 2.9.3 Exploit per la vulnerabilità LFI CVE-2020-35749 Riepilogo Il plugin WordPress Simple Job Board è soggetto a una vulnerabilità di directory traversal perché non verifica sufficientemente l'input fornito dall'utente. Lo sfruttamento di questo problema può...

c-CVE-2024-0044

CVE 2024 0044 CVE-2024-0044, identificata nella funzione createSessionInternal del file PackageInstallerService.java, è una vulnerabilità ad alta severità che interessa le versioni Android 12 e 13. Questa vulnerabilità consente a un attaccante di effettuare un attacco "run-as any app", portando a...

CVE-2026-23744-poc

CVE-2026-23744 — Exploit RCE Remote Code Execution per mcpJam Un proof-of-concept in Python 3 per CVE-2026-23744 , una vulnerabilità di esecuzione arbitraria di comandi che colpisce mcpJam v1.4.2. Questa utility automatizza la consegna del payload codificando trasparentemente i comandi in Base64...

CVE-2020-5398

CVE-2020-5398 - RFD Reflected File Download Angriff auf Spring MVC In Spring Framework, Versionen 5.2.x vor 5.2.3, Versionen 5.1.x vor 5.1.13 und Versionen 5.0.x vor 5.0.16 ist eine Anwendung anfällig für einen Reflected File Download RFD Angriff, wenn sie einen „Content-Disposition“-Header in de...