CVE-2026-5201

CVE-2026-5201 Heap-based buffer overflow in gdk-pixbuf JPEG loader Hi, I'm Kağan Çapar. I discovered a heap-based buffer overflow vulnerability in gdk-pixbuf's JPEG image loader that affects virtually all Linux desktop environments. The vulnerability was assigned CVE-2026-5201 and acknowledged by...

CVE-2021-41730

TENDA Authorization Remote Command Execution Exploit Author: SHENGXI [email protected] Vender: TENDA CVE-2021-41730 - /bin/httpd Firmware version: AC15: =USAC15V1.0BRV15.03.05.20multiTDE01.bin AC6: USAC6V1.0BRV15.03.05.16multiTD01.bin ....... Hardware Link:...

AWS-Tough-Library-Multiple-CVEs

AWS Tough Library Multiple CVEs In March 2025, multiple security vulnerabilities were disclosed in AWS Labs’ Tough library a Rust client implementation of TUF – The Update Framework. These issues are tracked under CVE-2025-2885, CVE-2025-2886, CVE-2025-2887 and CVE-2025-2888, and were fixed in...

CVE-2025-65094

CVE-2025-65094: WBCE CMS is Vulnerable to Privilege Escalation via Group ID Manipulation IDOR Overview Field| Details ---|--- CVE ID| CVE-2025-65094 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products WBCE/WBCECMS Details Summary A low-privileged user in WBCE CMS...

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro = 1.9.26 - Unauthenticated Arbitrary File Upload Description WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation i...

CVE-2024-50482

CVE-2024-50482 Woocommerce Product Design = 1.0.0 - Unauthenticated Arbitrary File Upload Description: The Woocommerce Product Design plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.0. This makes it possibl...

CVE-2025-6058

⚡ WPBookit = 1.0.4 - Unauthenticated Arbitrary File Upload 📝 Description The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the imageuploadhandle function, which is hooked via the addbookingtype route in all versions up to, and...

BIT-LIBPYTHON-2026-19553 SSLContext.wrap_bio() missing validation of server_hostname parameter

ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...

CVE-2026-23008-Solidity-Assembly-Return-Data-Size-Confusion

CVE-2026-23008 – Solidity Assembly Return Data Size Confusion Program Code Solidity // ReturnSizeConfusion.sol contract Victim function callExternaladdress target external returns bytes memory bool success, bytes memory ret = target.callabi.encodeWithSignature"someFunc"; requiresuccess, "call...

CVE-2025-49132-PoC

CVE-2025-49132-PoC Proof-of-Concept for CVE-2025-49132 for Remote Code Execution in Pterodactyl Panel -m check Do something funny python3 poc.py -u -m exploit -p -t Technical Details Analyzing the git diff of LocaleController.php between v1.11.10 and v1.11.11 link, we can see that the controller...

CVE-2026-25126

CVE-2026-25126: PolarLearn Vote Count Manipulation Research: Joshua van Rijswijk Description PoC for CVE-2026-25126 , a high-severity business logic vulnerability in the PolarLearn forum voting API. The endpoint POST /api/v1/forum/vote fails to enforce strict runtime validation of the direction...

CVE-2026-33317

CVE-2026-33317 OP-TEE PKCS11 PoC This repository contains the Normal World proof of concept, reproduction notes, and captured logs for CVE-2026-33317 / GHSA-8cqw-mg7v-c9p9. The official OP-TEE advisory describes missing validation in entrygetattributevalue for PKCS11CMDGETATTRIBUTEVALUE. The bug...

CVE-2025-10147

CVE-2025-10147 Podlove Podcast Publisher = 4.2.6 - Unauthenticated Arbitrary File Upload The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'moveasoriginalfile' function in all versions up to, and including, 4.2.6...

CVE-2024-50473

CVE-2024-50473 Ajar in5 Embed = 3.1.3 - Unauthenticated Arbitrary File Upload Description: The Ajar in5 Embed plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 3.1.3. This makes it possible for unauthenticated...

CVE-2024-7985-PoC

CVE-2024-7985-PoC FileOrganizer = 1.0.9 - Authenticated Subscriber+ Arbitrary File Upload FileOrganizer Exploit - CVE-2024-7985 📌 Overview CVE-2024-7985 - WordPress Plugin FileOrganizer = 1.0.9 is vulnerable to authenticated arbitrary file uploads , allowing attackers with Subscriber+ privileges...

CVE-2021-3656-Demo

CVE-2021-3656: This issue is caused by missing validation of the the virtext VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS Virtual VMLOAD/VMSAVE for the L2 guest. Under these circumstances, the L2 guest is able to run VMLOAD/VMSAVE unintercepted, and...

CVE-2022-1565

WordPress Plugin WP All Import = 3.6.7 - Remote Code Execution RCE Authenticated Ngày: 05 tháng 11 năm 2023 Tác giả khai thác: Việt HÙng https://github.com/phanthibichtram12 Trang chủ của nhà cung cấp: https://www.wpallimport.com/ Link phần mềm: https://wordpress.org/plugins/wp-all-import/advance...

CVE-2026-106569

The ImageMagick image manipulation software is vulnerable to a Denial of Service (DoS) attack in its ASE decoder . Due to missing validation and resource checks, a specially crafted ASE image can cause the application to crash or trigger a long-running operation . This vulnerability affects versi...

CVE-2026-106219

JetBrains TeamCity versions prior to 2026.2.1 are vulnerable to an information disclosure issue due to insufficient validation of Git submodule URLs . This flaw allows an attacker to perform unauthorized reading of local repositories hosted on the server. To remediate this vulnerability, users sh...

EUVD-2026-93302

In the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to NDTPAINTERVALPROBETIMEMS. NDTPAINTERVALPROBETIMEMS sets .type and .min but misses .validationtype, so no validation is applied: ynl --family rt-neigh --do setneightbl \ --json '"name": "arpcache",...