53009 matches found
CVE-2026-76848 TypeORM 0.2.21 through 1.1.0 SQL Injection via SelectQueryBuilder.distinctOn
TypeORM's SelectQueryBuilder.distinctOn accepts an array of strings and stores it on the expression map without validation. For PostgreSQL-family drivers, createSelectDistinctExpression in src/query-builder/SelectQueryBuilder.ts joins that array and interpolates the result into the generated...
CVE-2026-76848 TypeORM 0.2.21 through 1.1.0 SQL Injection via SelectQueryBuilder.distinctOn
TypeORM's SelectQueryBuilder.distinctOn accepts an array of strings and stores it on the expression map without validation. For PostgreSQL-family drivers, createSelectDistinctExpression in src/query-builder/SelectQueryBuilder.ts joins that array and interpolates the result into the generated...
EUVD-2026-64853
TypeORM's SelectQueryBuilder.distinctOn accepts an array of strings and stores it on the expression map without validation. For PostgreSQL-family drivers, createSelectDistinctExpression in src/query-builder/SelectQueryBuilder.ts joins that array and interpolates the result into the generated...
CVE-2026-76848 TypeORM 0.2.21 through 1.1.0 SQL Injection via SelectQueryBuilder.distinctOn
TypeORM's SelectQueryBuilder.distinctOn accepts an array of strings and stores it on the expression map without validation. For PostgreSQL-family drivers, createSelectDistinctExpression in src/query-builder/SelectQueryBuilder.ts joins that array and interpolates the result into the generated...
CVE-2026-76848
TypeORM versions 0.2.21 through 1.1.0 are affected by a SQL injection vulnerability in SelectQueryBuilder.distinctOn . The method accepts an array of strings and, for PostgreSQL-family drivers , interpolates them directly into a SELECT DISTINCT ON (…) clause via createSelectDistinctExpression wit...
CVE-2026-74651
A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. A remote attacker could send specially crafted Wi-Fi management frames containing a short vendor-specific information element. This could lead to an out-of-bounds read, where the system attempts to access memory beyond its allocated...
hexora
hexora Hexora è uno strumento di analisi statica progettato per rilevare pattern dannosi e nocivi nel codice Python. Combina un motore di analisi statica basato su regole con un modello di machine learning che assegna un punteggio ai file sorgente per classificarli come dannosi o benigni. Può...
CVE-2026-0920-
CVE-2026-0920- LA-Studio Element Kit for Elementor 📡 L'exploit arriva qui per primo. Segui @KNxploited su Telegram — il tuo feed d'élite per CVE appena divulgate, PoC funzionanti e ricerca sulla sicurezza di precisione. Aggiornato senza sosta. Creato per chi vuole restare avanti. 🧠 Panoramica...
CVE-2026-28190
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...
CVE-2026-32471
Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...
RUSTSEC-2026-0267 Panic-safety unsoundness in `BitVecCore::clear` (double-free / use-after-free)
BitVecCore::clear drops every occupied element with dropinplace and only afterwards clears the occupancy bits and resets len. If an element's Drop panics, those metadata updates are skipped, so the slot of the already-dropped element stays marked as occupied. BitVecCore::drop calls clear again,...
Panic-safety unsoundness in `BitVecCore::clear` (double-free / use-after-free)
BitVecCore::clear drops every occupied element with dropinplace and only afterwards clears the occupancy bits and resets len. If an element's Drop panics, those metadata updates are skipped, so the slot of the already-dropped element stays marked as occupied. BitVecCore::drop calls clear again,...
CVE-2026-32471
ProLancer Element is a WordPress plugin affected by a subscriber-level SQL injection vulnerability in versions 1.4.8 and below . An authenticated subscriber (low privilege) can exploit this remotely over the network with low complexity and no user interaction. The CVSS 3.1 score is 8.5 (HIGH) , w...
CVE-2026-32471 WordPress ProLancer Element plugin <= 1.4.8 - SQL Injection vulnerability
Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...
EUVD-2026-64799
Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...
CVE-2026-32471 WordPress ProLancer Element plugin <= 1.4.8 - SQL Injection vulnerability
Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...
EUVD-2026-64798
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...
CVE-2026-28190 WordPress ProLancer Element plugin <= 1.4.8 - Broken Access Control vulnerability
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...
CVE-2026-28190
CVE-2026-28190 is a Broken Access Control vulnerability in the ProLancer Element WordPress plugin, affecting versions 1.4.8 and earlier . The flaw allows users with the Subscriber role to perform actions beyond their intended privilege level, resulting in primarily integrity impact and minor avai...