CVE-2026-97337

The Simple Membership plugin for WordPress is vulnerable to unauthorized data modification and sensitive information disclosure in versions up to and including 4.8.3 . The root cause is a missing authorization check (including no nonce, capability, or ownership verification) on the resend-activat...

EUVD-2026-91908

The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and sensitive information disclosure in versions up to, and including, 4.8.3 via the resend-activation and email-activation endpoints. The endpoints are dispatched from...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the apply action in StorageMgmtController. The callStoragePerl function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerabili...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the addModifyZTDProxy function in NmsController. The function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerability by...

cve-2021-44228-qingteng-patch

칭텅 log4j2-patch https://github.com/qingtengyun/cve-2021-44228-qingteng-patch log4j2의 CVE-2021-44228을 수정합니다. JVM이 제공하는 Instrumentation API를 사용하여 JVM에 로드된 기존 바이트코드를 변경합니다. Java 프로세스를 재시작하지 않고 org.apache.logging.log4j.core.lookup.JndiLookup 클래스의 lookup 메서드를 수정하여 항상 Patched JndiLookup::lookup을 반환하도록...

CVE-2024-55271

체육관 관리 시스템 CVE-2024-55271 PHP와 MySQL로 구축된 체육관 관리 시스템입니다. 감사자 Shoaib Alam - LinkedIn 프로필 설명 프로필 업데이트 섹션의 CSRF 취약점 체육관 관리 시스템에서 교차 사이트 요청 위조CSRF 취약점이 확인되었습니다. 이 문제는 사용자 패널의 프로필 업데이트 기능에 존재합니다. 이 애플리케이션은 현재 Anti-CSRF 토큰을 구현하지 않아 교차 사이트 요청 위조CSRF 공격에 취약합니다. 이 보안 취약점은 특히 /profile.php 엔드포인트에 영향을 미칩니다...

Driver-kaldereta

Kaldereta 执行内存修改的未签名内核模式驱动程序 功能特性 获取进程 ID 获取映像的基地址 更改内存区域的保护属性 分配内存区域 释放内存 从地址读取/写入 从带偏移的地址读取/写入 从内存读取到缓冲区 从缓冲区写入到内存 模拟鼠标事件 模拟键盘事件 特征码扫描 手动映射 x64 安装配置 安装 Windows Driver Kit 使用 KDMapper 加载 .sys 文件 支持 如果您需要任何帮助，请通过 Discord 联系我们 想要捐赠？https://www.buymeacoffee.com/stephenasuncion 许可证...

CVE-2024-11848

CVE-2024-11848 NitroPack = 1.17.0 - 인증된 구독자 이상 사용자의 제한된 옵션 업데이트를 허용하는 인증 누락 취약점 설명 WordPress용 NitroPack 플러그인은 버전 1.17.0 이하의 모든 버전에서 'nitropackdismissnoticeforever' AJAX 액션에 대한 기능 검사가 누락되어 데이터 무단 수정에 취약합니다. 이로 인해 구독자 수준 이상의 인증된 공격자가 임의의 옵션을 고정 값 '1'로 업데이트하여 특정 옵션예: 사용자 등록 활성화을 활성화하거나 서비스 거부 상태로 이어...

DEVVORTEX

DEVVORTEX HackTheBox: Devvortex — マシン攻略記 HackTheBoxのDevvortex マシンの侵害を詳細に解説する包括的な技術ウォークスルー。この経路では、初期アクセスのためのサブドメインファジング 、Joomla API列挙 、テンプレート改変 、ラテラルムーブメントのためのデータベースハッシュ抽出とクラッキング 、そしてrootへの権限昇格のためのApport-CLI CVE-2023-1326の悪用を実演する。 エグゼクティブサマリー ターゲットOS: Linux 難易度: Easy ドメイン: devvortex.htb サブドメイン:...

h-encore

h-encore h-encore 에서 h 는 hacks와 homebrews를 의미하며, 최신 펌웨어 3.65, 3.67 및 3.68을 지원하는 PS Vita™용 두 번째 공개 탈옥입니다. 커널 및 사용자 수정, 클럭 속도 변경, 플러그인 설치, 홈브류 실행 등을 할 수 있습니다. Write-up h-encore 익스플로잇 체인에 대한 기술적 설명은 여기에서 확인할 수 있습니다. Changelog h-encore 2.0 변경 사항: 부트스트랩 메뉴를 자동으로 종료하고 우회하는 기능이 추가되었습니다. h-encore 를 실행할 때...

CVE-2026-15598

CVE-2026-15598 antv layout 2.0.0 に脆弱性が特定されました。 これはライブラリ lib/util/object.js の関数 setNestedValue に影響します。引数 path を操作すると、オブジェクトのプロトタイプ属性が不適切に制御された変更を受ける可能性があります。この攻撃はリモートから実行可能です。プロジェクトは問題を issue レポートを通じて早期に通知されましたが、まだ応答していません。...

WordPress Alt Text AI – Automatically generate image alt text for SEO and accessibility plugin <= 1.10.41 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Content Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post Content Modification vulnerability discovered by Webbernaut in WordPress Plugin Download Alt Text AI versions = 1.10.41...

CVE-2026-65540

CVE-2026-65540 Popup for CF7 with Sweet Alert Hello document.getElementById'csrf'.submit; 2. Log in to WordPress as an administrator 3. Visit the malicious page 4. Optional Navigate to http://TARGET/wp-admin/admin.php?page=cf7-simplepopup — confirm the Width field now contains...

CVE-2026-94646

A vulnerability exists in Apache Thrift nodejs bindings prior to version 0.25.0 due to improper input validation and prototype pollution . This condition allows an attacker to modify base JavaScript object properties, causing the application to fail when processing incoming data. A remote attacke...

CVE-2026-103505

A flaw was found in the AWS Elastic File System EFS Container Storage Interface CSI Driver. A remote authenticated user with permissions to create persistent storage volumes can supply crafted comma-separated values within volume configuration attributes. This improper input handling allows the...

Security Bulletin: Multiple vulnerabilities in IBM® SDK Java™ affect IBM Cloud Pak System due to the July 2026 CPU

Summary Multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is...

CVE-2026-86325

A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the...

CVE-2026-15999

The bc-csharp library by Bouncy Castle Inc. is vulnerable to improper validation of integrity check values in its AES-CCM implementation in versions before 2.7.0 . The CcmParameters class accepts arbitrary values for the authentication tag (aes-ICVlen), and CcmBlockCipher only validates this leng...

EUVD-2026-91204

Improper validation of integrity check value in the AES-CCM implementation CcmParameters and CcmBlockCipher in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an on-path attacker to modify CCM-encrypted content without detection via an AlgorithmIdentifier whose CCMParameters declar...

CVE-2026-91023 Motors – Car Dealership & Classified Listings < 1.4.124 - Subscriber+ Cross-User Post Meta Modification via stm_make_featured

The Motors WordPress plugin before 1.4.124 does not properly verify that a user is authorised to modify a listing before processing one of its listing management actions, allowing authenticated attackers with subscriber-level access and above to set metadata on posts they do not own, including...