CVE-2026-24633

CVE-2026-24633 concerns a Missing Authorization issue in Passionate Brains Add Expires Headers & Optimized Minify (plugin), affecting versions up to and including 3.1.0. Red Hat and CVE records corroborate the missing authorization/configuration risk. The PT-2026-4463 advisory explicitly recommen...

CVE-2026-24633: Missing Authorization

Missing Authorization vulnerability in Passionate Brains Add Expires Headers & Optimized Minify add-expires-headers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Expires Headers & Optimized Minify: from n/a through = 3.2.0...

PT-2026-4463

Name of the Vulnerable Software and Affected Versions Passionate Brains Add Expires Headers & Optimized Minify versions through 3.1.0 Description An authorization issue exists in Passionate Brains Add Expires Headers & Optimized Minify. The issue involves incorrectly configured access control...

WordPress plugin “Add Expires Headers & Optimized Minify” has security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...

libpng: LIBPNG buffer overflow

A buffer overflow flaw has been discovered in libpng. An out-of-bounds read vulnerability exists in pngimagereadcomposite when processing palette images with PNGFLAGOPTIMIZEALPHA enabled. The palette compositing code in pnginitreadtransformations incorrectly applies background compositing during...

CLSA-2026-1768909961 libpng: Fix of CVE-2025-64720

CVE-2025-64720: fix buffer overflow in pnginitreadtransformations function during palette compositing with optimized alpha...

Denial Of Service (DoS)

aiohttp is vulnerable to a Denial of Service DoS. The vulnerability is due to improper handling of POST request bodies when assert statements are bypassed under optimized execution, which allows an attacker to trigger an infinite loop using a specially crafted request and cause a denial of servic...

WordPress Add Expires Headers & Optimized Minify plugin <= 3.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Add Expires Headers & Optimized Minify versions = 3.1.0...

CVE-2025-11970: Server-Side Request Forgery (SSRF)

The Emplibot – AI Content Writer with Keyword Research, Infographics, and Linking | SEO Optimized | Fully Automated plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.9 via the emplibotcallwebhookwitherror and emplibotprocesszipdata...

Exploit for CVE-2025-64720

CVE-2025-64720: libpng Buffer Overflow in Palette Premultiplic...

DEBIAN-CVE-2025-64720

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in pngimagereadcomposite when processing palette images with PNGFLAGOPTIMIZEALP...

The vulnerability of the “Health and Optimized Experiences” function in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the “Health and Optimized Experiences” function in Windows operating systems relates to the improper handling of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Malicious Package

Overview vite-tsconfig-optimized is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

CVE-2025-59241

Improper link resolution before file access 'link following' in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...

CVE-2025-59241

Improper link resolution before file access 'link following' in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...

CVE-2025-59241

Improper link resolution before file access 'link following' in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...

CVE-2025-59241 Windows Health and Optimized Experiences Elevation of Privilege Vulnerability

...

CVE-2025-59241

CVE-2025-59241: A local elevation-of-privilege in Windows Health and Optimized Experiences Service due to improper link resolution before file access. The Microsoft and national cert advisories list the vulnerability as a Windows flaw tied to health/experience services; a public-exploit note exis...

Windows Health and Optimized Experiences Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...

PT-2025-42124

Name of the Vulnerable Software and Affected Versions Windows Health and Optimized Experiences Service affected versions not specified Description An issue exists in Windows Health and Optimized Experiences Service related to improper link resolution before file access, also known as 'link...