EUVD-2016-10889

WordPress Plugin Photocart Link 1.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insufficient input validation in decode.php. Attackers can supply base64-encoded file paths in the 'id' parameter to the decode.php endpoin...

CVE-2016-20077 WordPress Plugin Photocart Link 1.6 Local File Inclusion via decode.php

WordPress Plugin Photocart Link 1.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insufficient input validation in decode.php. Attackers can supply base64-encoded file paths in the 'id' parameter to the decode.php endpoin...

CVE-2026-8386

creationtimestamp| type| source ---|---|--- 2026-06-15 11:52:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mod7vq67zq2d 2026-07-16 12:00:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-8386.yaml 2026-07-17...

GHSA-CHGR-C6PX-7XPP

creationtimestamp| type| source ---|---|--- 2026-06-15 11:41:32+00:00| seen| https://gist.github.com/alon710/7781242dd6423ae75e05b31377b89606...

GHSA-VC8P-8PXG-RFWG

creationtimestamp| type| source ---|---|--- 2026-06-15 10:41:12+00:00| seen| https://gist.github.com/alon710/324e2f3b899f3fc7cc3244012ed256f9...

EUVD-2026-36704

The Wertheim SafeController 5400, Controller 5400 - AssemblyVersion 6.11.8130.22320, uses RS-485 communication between the server and the microcontroller without cryptographic protection. An attacker with access to the communication path between the server and the microcontroller can sniff RS-485...

CVE-2026-12043

creationtimestamp| type| source ---|---|--- 2026-06-15 09:09:54+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mocwsccpbm2r...

CVE-2026-49765

creationtimestamp| type| source ---|---|--- 2026-06-15 08:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mocts5wrkx2d 2026-06-15 21:39:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moeape3ncj2p 2026-06-16 05:01:02+00:00| seen|...

CVE-2026-12219

creationtimestamp| type| source ---|---|--- 2026-06-15 08:14:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moctpsxxop2b...

CVE-2026-12216

creationtimestamp| type| source ---|---|--- 2026-06-15 07:56:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocspir3xf2m...

CVE-2026-49113

creationtimestamp| type| source ---|---|--- 2026-06-15 07:16:13+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mocqgz2rtq2p 2026-06-17 00:35:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moh2yktud42v...

EUVD-2026-36699

The WP MAPS PRO WordPress plugin before 6.1.1 registers an unauthenticated AJAX action which, given a valid nonce that is publicly emitted on any frontend page enqueuing its map script, unconditionally creates an administrator account and returns a magic-login URL granting interactive admin acces...

CVE-2026-49781

creationtimestamp| type| source ---|---|--- 2026-06-15 05:16:22+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mocjqov2dg2u 2026-06-15 21:14:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe7cnqii524 2026-06-16 03:00:46+00:00| seen|...

CVE-2026-12207

creationtimestamp| type| source ---|---|--- 2026-06-15 04:33:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moche6j44n27...

CVE-2026-12211

creationtimestamp| type| source ---|---|--- 2026-06-15 04:28:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moch3a2xrd2b...

CVE-2026-12210

creationtimestamp| type| source ---|---|--- 2026-06-15 04:23:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocgsbltkd2z...

CVE-2025-31272

creationtimestamp| type| source ---|---|--- 2026-06-15 04:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mocfjgoaes2d...

CVE-2026-38812

creationtimestamp| type| source ---|---|--- 2026-06-15 01:42:25+00:00| seen| https://gist.github.com/jjcjgo/36a5d07c3a66d2df8981075dad926ecd...

CVE-2026-47162

creationtimestamp| type| source ---|---|--- 2026-06-15 01:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moc3ivsjqx2n 2026-06-21 22:43:05+00:00| seen| https://bsky.app/profile/canartuc.com/post/3motgzrwjm222...

EUVD-2026-36668

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzmate. Executing a manipulation can lead to improper authorization in handler for custom url scheme. The attack can only be executed locally. The exploit has been...