CVE-2024-50482

CVE-2024-50482 WooCommerce Product Design = 1.0.0 - Nicht authentifizierter beliebiger Dateiupload Beschreibung: Das WooCommerce Product Design Plugin für WordPress ist anfällig für beliebige Dateiuploads aufgrund fehlender Dateityp-Validierung in allen Versionen bis einschließlich 1.0.0. Dies...

CVE-2026-23008-Solidity-Assembly-Return-Data-Size-Confusion

CVE-2026-23008 – Confusão de Tamanho de Dados de Retorno em Assembly Solidity Código do Programa Solidity root@kitploit: // ReturnSizeConfusion.sol contract Victim function callExternaladdress target external returns bytes memory bool success, bytes memory ret =...

CVE-2026-5201

CVE-2026-5201 Overflow del buffer basato su heap nel caricatore JPEG di gdk-pixbuf Ciao, sono Kağan Çapar. Ho scoperto una vulnerabilità di overflow del buffer basato su heap nel caricatore di immagini JPEG di gdk-pixbuf che colpisce praticamente tutti gli ambienti desktop Linux. Alla vulnerabili...

CVE-2025-65094

CVE-2025-65094: WBCE CMS è vulnerabile all'escalation dei privilegi tramite manipolazione dell'ID del gruppo IDOR Panoramica Campo| Dettagli ---|--- CVE ID| CVE-2025-65094 Gravità| ALTA Avviso| Visualizza avviso Scoperto da| Lukasz Rybak Prodotti interessati WBCE/WBCECMS Dettagli Riepilogo Un...

CVE-2024-50473

CVE-2024-50473 Ajar in5 Embed = 3.1.3 - Upload Arbitrário de Arquivos Não Autenticado Descrição: O plugin Ajar in5 Embed para WordPress está vulnerável a uploads arbitrários de arquivos devido à falta de validação do tipo de arquivo em todas as versões até, e incluindo, 3.1.3. Isso possibilita qu...

CVE-2025-6058

⚡ WPBookit = 1.0.4 - Caricamento Arbitrario di File Non Autenticato 📝 Descrizione Il plugin WPBookit per WordPress è vulnerabile al caricamento arbitrario di file a causa della mancata validazione del tipo di file nella funzione imageuploadhandle, che viene agganciata tramite la route...

CVE-2024-7985-PoC

CVE-2024-7985-PoC FileOrganizer = 1.0.9 - Authenticated Subscriber+ Arbitrary File Upload FileOrganizer Exploit - CVE-2024-7985 📌 Übersicht CVE-2024-7985 - WordPress Plugin FileOrganizer = 1.0.9 ist anfällig für authentifizierte beliebige Datei-Uploads , die es Angreifern mit Subscriber+ -Rechten...

CVE-2026-80722

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211processrxtwtaction only partially validates a received S1G TWT setup frame before queueing it. An individual agreement can therefore reach...

CVE-2026-80674

CVE-2026-80674 is a critical (CVSS 9.8) vulnerability in the Linux kernel NTFS driver . The ntfs_read_locked_inode() function copies a resident $ATTRIBUTE_LIST into the inode's attribute list via a plain memcpy() with no validation . Subsequent attribute-list walks (ntfs_external_attr_find(), ntf...

CVE-2026-80595 Input: ims-pcu - add response length checks

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response length checks The driver processes response data from device buffers without verifying that the device actually sent enough data. This can lead to out-of-bounds reads or processing stale data. Add...

CVE-2026-80595

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response length checks The driver processes response data from device buffers without verifying that the device actually sent enough data. This can lead to out-of-bounds reads or processing stale data. Add...

CVE-2026-80592 samples/damon/mtier: fail early if address range parameters are invalid

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early if address range parameters are invalid The comment on top of struct damonregion clearly says that For any use case, @ar should be non-zero positive size. which is now verified in...

CVE-2026-80591 f2fs: fix listxattr handling of corrupted xattr entries

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a...

CVE-2021-41730

TENDA Authorization Remote Command Execution Exploit-Autor: SHENGXI [email protected] Hersteller: TENDA CVE-2021-41730 - /bin/httpd Firmware-Version: AC15: =USAC15V1.0BRV15.03.05.20multiTDE01.bin AC6: USAC6V1.0BRV15.03.05.16multiTD01.bin ....... Hardware-Link:...

Spring Framework 6.1.x < 6.1.29 / 6.2.x < 6.2.20 / 7.0.x < 7.0.8.1 maxPartSize Ignored in PartEventHttpMessageReader

The version of Spring Framework installed on the remote host is 6.1.x prior to 6.1.29, 6.2.x prior to 6.2.20, or 7.0.x prior to 7.0.8.1. It is, therefore, affected by a vulnerability: - The PartEventHttpMessageReader in Spring WebFlux does not enforce the maxPartSize limit when maxInMemorySize is...

PT-2026-83135

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A flaw exists where the source-address critical option in the Permissions returned by certain authentication callbacks is not validated against the client's remo...

CVE-2026-54085 Wazuh: Missing input validation in multiple active response scripts allows argument injection

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multiple active response scripts pass attacker-influenced alert fields to privileged system commands without validating their format, allowing...

CVE-2026-54085

Wazuh (open-source XDR/SIEM platform), versions 4.2.0 through 4.14.6 , contains missing input validation in multiple active response scripts that pass attacker-influenced alert fields to privileged system commands running as root. Five scripts (route-null.c, netsh.c, pf.c, npf.c, ipfw.c ) omit th...

CVE-2026-81528

A MongoDB C driver document-replacement code path omits the element-name/shape validation that the equivalent write paths apply, so a value supplied as a replacement is forwarded to the server without neutralization of query-language special elements. An application that passes untrusted,...

AWS-Tough-Library-Multiple-CVEs

AWS Tough लाइब्रेरी में कई CVE मार्च 2025 में, AWS Labs के Tough लाइब्रेरी TUF – द अपडेट फ्रेमवर्क का Rust क्लाइंट इम्प्लीमेंटेशन में कई सुरक्षा कमजोरियों का खुलासा हुआ। ये मुद्दे CVE-2025-2885, CVE-2025-2886, CVE-2025-2887 और CVE-2025-2888 के अंतर्गत ट्रैक किए गए हैं, और इन्हें Tough संस्करण...