295355 matches found
CVE-2026-104115: Stack-based Buffer Overflow
A stack-based buffer overflow in the illumos reparse point daemon reparsed allows a local user to crash the daemon. getfslocations in usr/src/cmd/fs.d/nfs/rpbasic/libnfsbasic.c, part of the nfs-basic reparse plugin, copies the host and path components of a reparse string into a fixed 1024-byte...
PT-2026-108932
A stack-based buffer overflow in the illumos reparse point daemon reparsed allows a local user to crash the daemon. get fs locations in usr/src/cmd/fs.d/nfs/rp basic/libnfs basic.c, part of the nfs-basic reparse plugin, copies the host and path components of a reparse string into a fixed 1024-byt...
CVE-2026-62040: Missing Authorization
Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.1...
PT-2026-108871
Name of the Vulnerable Software and Affected Versions Livees Checkout WordPress plugin versions prior to 7.0.3 Description The order confirmation page fails to perform capability, nonce, or order-key checks before processing request parameters. This allows unauthenticated users to modify the stat...
PT-2026-108745
Name of the Vulnerable Software and Affected Versions The Social Web Suite WordPress plugin versions prior to 4.1.13 Description The plugin fails to restrict which settings can be modified via an unauthenticated endpoint. This allows an attacker to overwrite arbitrary options, including the share...
CVE-2026-84220: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The Kirki WordPress plugin before 6.3.2 does not prevent shortcodes held in comments from being executed when it renders them, and displays comments regardless of their moderation status, allowing unauthenticated visitors to run shortcodes registered on the site and to read private custom fields ...
CVE-2026-86851: Missing Authorization
The Livees Checkout WordPress plugin through 7.0.2 does not perform any capability, nonce or order-key check before acting on request parameters on the order confirmation page, allowing unauthenticated users to change the status of arbitrary orders, store arbitrary data and notes on them, and...
uWSGI 2.0.16 PHP Plugin Path Traversal
uWSGI version 2.0.16 PHP plugin contains a path traversal vulnerability that permits reading files outside the configured document root through URL-encoded ../ sequences. This proof of concept provides a vulnerable Docker environment and request example. https://packetstorm.news/download/234966...
VulnCheck KEV: CVE-2021-25033
The WordPress Newsletter Plugin WordPress plugin before 1.6.5 does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue...
PT-2026-109268
Name of the Vulnerable Software and Affected Versions MariaDB server versions 10.6.1 through 10.6.27 MariaDB server version 10.11.18 and earlier MariaDB server version 11.4.12 and earlier MariaDB server version 11.8.8 and earlier MariaDB server version 12.3.2 and earlier MariaDB server version...
CVE-2026-92990: Exposure of Sensitive Information to an Unauthorized Actor
The SendPress Newsletters WordPress plugin through 1.26.1.20 protects a logging endpoint with a hardcoded token that is the same on every site rather than a per-site secret, allowing unauthenticated users to read newsletter sending logs, including recipient email addresses...
AZL-107898 CVE-2026-97032 affecting package sriov-network-device-plugin 3.7.0-8
HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...
AZL-107889 CVE-2026-78669 affecting package sriov-network-device-plugin for versions less than 3.7.0-9
A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...
AZL-107901 CVE-2026-78660 affecting package sriov-network-device-plugin for versions less than 3.7.0-9
Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...
AZL-107892 CVE-2026-78659 affecting package sriov-network-device-plugin 3.7.0-8
When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...
AZL-107895 CVE-2026-78663 affecting package sriov-network-device-plugin 3.7.0-8
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...
bip
Bip Bip è un progetto che mira a semplificare l'uso di Python per interagire con IDA. I suoi obiettivi principali sono facilitare l'uso di Python nella console interattiva di IDA e la scrittura di plugin. In modo più generale l'obiettivo è automatizzare i compiti ricorrenti svolti tramite l'API...
CVE-2025-15368-Exploit
CVE-2025-15368 Exploit Tool SportsPress Plugin for WordPress = 2.7.26 - LFI & RCE Author: kazehere4you Date: 2026-02-11 Description This tool exploits a Local File Inclusion LFI vulnerability in the SportsPress plugin for WordPress versions up to and including 2.7.26. By leveraging the eventlist...
