23226 matches found
CVE-2026-106552
A flaw was found in OpenSSH. A malicious or compromised server can write files to unintended locations on a client system during a recursive copy operation using the SFTP Secure File Transfer Protocol client. By returning crafted file paths, the remote server can trigger a directory traversal and...
GO-2026-6741 Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite in github.com/0xJacky/Nginx-UI
Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite in github.com/0xJacky/Nginx-UI...
CVE-2026-55480
A flaw was found in CUPS. Insecure temporary file handling allows a local attacker with print administrative privileges to overwrite arbitrary system files. When configuring a printer, the print service creates a temporary file with a predictable name in a shared directory without verifying wheth...
Curl input validation vulnerability
The Curl version 7.20.0 to 8.22.0 contains a vulnerability related to input validation errors. This vulnerability arises when using the --remote-header-name -J option. If the intermediate 103 Early Hints response arrives before the final HTTP response, or if the ETag header is processed before...
Apple iOS Permission Licensing and Access Control Vulnerabilities
Versions of Apple’s operating systems and devices that are not up to version 26.7 including Apple iOS before version 26.7, Apple iPadOS before version 26.7, Apple iOS 27 before version 27, Apple iPadOS 27 before version 27, Apple macOS Golden Gate 27 before version 27, and Apple VisionOS 27 befor...
Python Packaging Authority virtualenv post-link vulnerability
The Python Packaging Authority identifies a post-link vulnerability in virtualenv versions prior to 21.14.9. This vulnerability arises because ViaTemplateActivator.generate deletes existing outputs only when Path.exists returns true. As a result, empty symbolic links can persist and redirect...
CVE-2026-112295
FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authenticated users to overwrite protected account columns by submitting extra User bean fields to /ucenter/accountupdate. Attackers can change their review status, rename themselves, or duplicate another account'...
CVE-2026-112295
FlyCms versions through commit edfdf724 are vulnerable to a mass assignment vulnerability via the /ucenter/account_update endpoint. This flaw allows authenticated users to overwrite protected account columns by submitting extra User bean fields . Exploitation can result in unauthorized modificati...
CVE-2026-112295 FlyCms through commit edfdf724 Mass Assignment via /ucenter/account_update
FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authenticated users to overwrite protected account columns by submitting extra User bean fields to /ucenter/accountupdate. Attackers can change their review status, rename themselves, or duplicate another account'...
CVE-2026-112295 FlyCms through commit edfdf724 Mass Assignment via /ucenter/account_update
FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authenticated users to overwrite protected account columns by submitting extra User bean fields to /ucenter/accountupdate. Attackers can change their review status, rename themselves, or duplicate another account'...
CVE-2026-112295 FlyCms through commit edfdf724 Mass Assignment via /ucenter/account_update
FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authenticated users to overwrite protected account columns by submitting extra User bean fields to /ucenter/accountupdate. Attackers can change their review status, rename themselves, or duplicate another account'...
EUVD-2026-104278
FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authenticated users to overwrite protected account columns by submitting extra User bean fields to /ucenter/accountupdate. Attackers can change their review status, rename themselves, or duplicate another account'...
CVE-2026-94228
The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the token it does check is issued to unauthenticated visitors, allowing anyone to overwrite the plugin's entire configuration and to discard any setting they do not supply...
CVE-2026-94228
The TrueBooker WordPress plugin (versions 1.1.9 through 1.2.9) is vulnerable to an unauthenticated plugin settings overwrite . The root cause is a lack of capability checks on one of the plugin's setup handlers; furthermore, the token being validated is issued to unauthenticated visitors. This al...
EUVD-2026-104102
The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the token it does check is issued to unauthenticated visitors, allowing anyone to overwrite the plugin's entire configuration and to discard any setting they do not supply...
CVE-2026-94228 TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Plugin Settings Overwrite via admin_setting_setup_data
The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the token it does check is issued to unauthenticated visitors, allowing anyone to overwrite the plugin's entire configuration and to discard any setting they do not supply...
CVE-2026-94228 TrueBooker Appointment Booking 1.1.9 - 1.2.9 - Unauthenticated Plugin Settings Overwrite via admin_setting_setup_data
The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the token it does check is issued to unauthenticated visitors, allowing anyone to overwrite the plugin's entire configuration and to discard any setting they do not supply...
WordPress TrueBooker plugin 1.1.9-1.2.9 - Unauthenticated Plugin Settings Overwrite vulnerability
Unauthenticated Plugin Settings Overwrite vulnerability discovered by Mikica Ivosevic in WordPress Plugin TrueBooker versions 1.1.9-1.2.9...
CVE-2026-91046
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite the ElementsReady Addons for Elementor WordPress plugin...
CVE-2026-91046 ElementsReady Addons for Elementor <= 6.7.2 - Subscriber+ Plugin Settings Overwrite via Missing Authorization
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite the ElementsReady Addons for Elementor WordPress plugin...