CVE-2026-16949

The Term Pages WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-16949 Term Pages < 2.0.0 - Unauthenticated SQL Injection via tp_lookup

The Term Pages WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-16949

The Term Pages WordPress plugin versions prior to 2.0.0 is vulnerable to an unauthenticated SQL injection due to the tp_lookup vulnerability. The flaw exists because the plugin fails to properly sanitize and escape a parameter before incorporating it into a SQL statement. This allows an external ...

CVE-2026-16949 Term Pages < 2.0.0 - Unauthenticated SQL Injection via tp_lookup

The Term Pages WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-16949

The Term Pages WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks...

EUVD-2026-55015

The Term Pages WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks...

CVE-2026-16257

The Arvow AI SEO Writer WordPress plugin, in versions prior to 1.5.4 , contains an improper authentication vulnerability. Unauthenticated users can bypass access controls on a specific REST endpoint by leveraging type juggling when the plugin has not been configured. This security flaw allows att...

PT-2026-69375

Name of the Vulnerable Software and Affected Versions RSS Aggregator by Feedzy versions prior to 5.2.6 Description The plugin fails to verify if the requesting user owns or has permission to edit the specified import job. This allows users with author-level access or higher to permanently delete...

CVE-2026-16949: Improper Neutralization of Special Elements used in an SQL Command

The Term Pages WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks...

📄 DjangoCRM 2.4.0 Debug Information Disclosure

A proof of concept exploit for an information disclosure vulnerability in DjangoCRM version 2.4.0. The vulnerability exists because affected installations ship with Django debug mode enabled, allowing unauthenticated attackers to trigger technical error pages that disclose sensitive application...

PT-2026-69640

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A device mapping leak occurs in the drm/gpusvm component. The drm gpusvm get pages function only stores the local dpagemap into svm pages-dpagemap upon successful completion. If a...

PT-2026-69729

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A logical race condition exists in the AMD IOMMU implementation within the iommu completion wait function. The issue occurs because the need sync flag is read without a lock and can retu...

PT-2026-69747

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AMD IOMMU driver regarding IRQ unsafe locking during guest domain gdom allocation. A lock dependency conflict occurs when a HARDIRQ-safe lock is held while...

Linux Distros Unpatched Vulnerability : CVE-2026-68086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/khugepaged: write all dirty file folios when collapsing There is no upstream commit, as this code was removed by upstream commit 044925f9b565 mm: fs: remove...

PT-2026-69487

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mm/khugepaged component where data loss can occur during the collapsing of Transparent Huge Pages THPs. The problem arises because collapse file can coexist with...

PT-2026-69563

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the handling of device-private Page Middle Directory PMD entries within the reverse mapping rmap walk code. When the function page vma mapped walk encounters...

btrfs: reject free space cache with more entries than pages

...

SUSE CVE-2026-68081

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 pages if KVM synthesizes a nested VM-Exit due to invalid guest while emulating VMLAUNCH or VMRESUME. The invalid guest state path...

Hacked-Machines

HTB Writeups A collection of Hack The Box machines, solve...

AZL-94640 CVE-2026-68081 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 pages if KVM synthesizes a nested VM-Exit due to invalid guest while emulating VMLAUNCH or VMRESUME. The invalid guest state path...