295344 matches found
EUVD-2026-101527
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPManageNinja Best Payments Plugin for WP wp-payment-form allows Stored XSS.This issue affects Best Payments Plugin for WP: from n/a through 4.6.27...
CVE-2026-108484
The WPManageNinja Best Payments Plugin for WP (wp-payment-form) is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This security flaw affects versions up to and including 4.6.27 . While the vulnerability allows for persistent scr...
CVE-2026-108484 WordPress Best Payments Plugin for WP plugin <= 4.6.27 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPManageNinja Best Payments Plugin for WP wp-payment-form allows Stored XSS.This issue affects Best Payments Plugin for WP: from n/a through 4.6.27...
CVE-2026-102086
A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service DoS. When multiple DNS queries are received in a single flow session, where one query matches a Security...
CVE-2026-102082
An Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service DoS. This issue is will occur when 'ssl-proxy' is configured on SRX platforms and during a TLS...
Exploit for CVE-2026-104748
CVE-2026-104748 — Unauthenticated Privilege Escalation in Simp...
WordPress Import and export users and customers plugin <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting vulnerability
Authenticated Custom+ Stored Cross-Site Scripting vulnerability discovered by Luca Laytynher LyT in WordPress Plugin Import and export users and customers versions = 2.4.5...
WordPress Kirki – Freeform Page Builder, Website Builder & Customizer plugin <= 6.2.0 - Authenticated (Custom+) Stored Cross-Site Scripting vulnerability
Authenticated Custom+ Stored Cross-Site Scripting vulnerability discovered by Pham Duc Anh in WordPress Plugin Kirki versions = 6.2.0...
CVE-2026-102082 Junos OS: SRX Series: If TLS session resumption is configured and a specific TLS message is received a PFE crash occurs
An Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service DoS. This issue is will occur when 'ssl-proxy' is configured on SRX platforms and during a TLS...
EUVD-2026-101461
An Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service DoS. This issue is will occur when 'ssl-proxy' is configured on SRX platforms and during a TLS...
EUVD-2026-101455
A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service DoS. When multiple DNS queries are received in a single flow session, where one query matches a Security...
CVE-2026-102086 Junos OS: SRX Series: Multiple DNS queries processed by SecIntel and DGA in the same session cause a flowd crash
A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service DoS. When multiple DNS queries are received in a single flow session, where one query matches a Security...
CVE-2026-102086
A NULL Pointer Dereference vulnerability exists in the DNS plugin of Juniper Networks Junos OS on SRX Series devices. The flaw occurs when multiple DNS queries in a single flow session involve both Security Intelligence (SecIntel) feeds and DNS Domain Generation Algorithm (DGA) analysis; an error...
EUVD-2026-101291
Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-level Dokku access and remote SSH access to execute docker-options commands can store arbitrary strings through the docker-options plugin, and those strings are later concatenated into DOCKERARGS an...
CVE-2026-86002 Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS
Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-level Dokku access and remote SSH access to execute docker-options commands can store arbitrary strings through the docker-options plugin, and those strings are later concatenated into DOCKERARGS an...
CVE-2026-86002
Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-level Dokku access and remote SSH access to execute docker-options commands can store arbitrary strings through the docker-options plugin, and those strings are later concatenated into DOCKERARGS an...
CVE-2026-110717 Janus WebRTC Server through 1.4.3 Path Traversal via Record&Play Filename
Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordingspath via the record request filename. Attackers can supply filenames with path separators to create or truncate files ending i...
-Limesurvey-RCE-CVE-2021-44967
🚀 LimeSurvey RCE CVE-2021-44967 - Authenticated Remote Code Execution This repository contains a functional exploit for CVE-2021-44967 , an authenticated Remote Code Execution vulnerability in LimeSurvey. 🎯 Compatibility Tested and confirmed working on: LimeSurvey 5.2.x LimeSurvey 6.x 🐛...
Security update for containerd
This update for containerd fixes the following issues: CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation bsc1268430. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
SUSE-SU-2026:4671-1 Security update for containerd
This update for containerd fixes the following issues: - CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation bsc1268430...