CVE-2026-14554 Check & Log Email < 2.0.15 - Admin+ SQL Injection via d and s Parameters

The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with administrator privileges to perform SQL injection attacks...

CVE-2026-43831

Full details and mitigation steps are currently restricted and will be published at a later date...

EUVD-2026-51387

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43831 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43831

CVE-2026-43831 involves a stack-based buffer overflow within the log message functionality . Successful exploitation by an unauthenticated attacker could lead to code execution . While several sources indicate that full details and mitigation steps are currently restricted, the vulnerability has ...

CVE-2026-43831

Full details and mitigation steps are currently restricted and will be published at a later date...

SUSE CVE-2025-52490

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollectinfooptions.log and syncgateway.log, there are cleartext passwords in redacted and unredacted output...

SUSE CVE-2025-68152

Juju is an open source application orchestration engine that enables any application operation on any infrastructure at any scale through special operators called 'charms'. From versions 2.9 to before 2.9.56 and 3.6 to before 3.6.19, it is possible that a compromised workload machine under a Juju...

PT-2026-66697

The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with administrator privileges to perform SQL injection attacks...

PT-2026-66673

Successful exploitation of the vulnerability could allow an unauthenticated attacker to exploit a stack-based buffer overflow in the log message functionality to conduct code execution...

IBM Langflow OSS authorization issue vulnerability (CNVD-2026-31200)

IBM Langflow OSS is an open-source low-code visualization AI workflow building tool developed by IBM. It enables developers to quickly build, deploy, and iterate AI agents and RAG applications by dragging and dropping components. Additionally, it supports deep customization using Python to...

CVE-2026-14554: Improper Neutralization of Special Elements used in an SQL Command

The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with administrator privileges to perform SQL injection attacks...

IBM App Connect Enterprise information leakage vulnerability (CNVD-2026-31544)

IBM App Connect Enterprise is an enterprise-level application connection platform used for system integration. It supports connections and conversions between applications, data, and APIs. There is an information leakage vulnerability in IBM App Connect Enterprise. This vulnerability stems from t...

Malicious code in @node-console-log/log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c7960f4102ec63a2f4a105b1fee65edcb12399050dbeb3b94c7c6b6a1fff61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @node-console-log/log is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-11216 Malicious code in @node-console-log/log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c7960f4102ec63a2f4a105b1fee65edcb12399050dbeb3b94c7c6b6a1fff61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11225 Malicious code in @relforce-dev/console-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdf30366d8098d04f78ab20d628d2e82537efc7c80f07c9d89db861a343a57f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-66418

OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to inject arbitrary HTML and script payloads by submitting a crafted username in a failed login POST request, which is recorded verbatim in the audit log. When an...

UBUNTU-CVE-2026-55777

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...

UBUNTU-CVE-2026-54715

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. In version 1.10.2, parsebrowser assumes the matched browser token begins with Opera and moves a trailing version substring to match plus five, allowing a crafted User-Age...