WordPress WEBO MCP plugin <= 3.0.18 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WEBO MCP versions = 3.0.18...

airflow-oracle-snowflake-plugin (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-81930 via apache-airflow-providers-snowflake (3.3.0)

apache-airflow-providers-snowflake PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-snowflake and may be impacted: - airflow-oracle-snowflake-plugin =0.1.0, =0.1.2 Source cves: CVE-2026-81930 Source advisory:...

WordPress BackupEase plugin <= 2.2.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin BackupEase versions = 2.2.2...

WordPress SiteSkite plugin <= 2.1.8 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin SiteSkite versions = 2.1.8...

WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MCP Content Manager Lite versions = 1.1.0...

Exposure Of Data Element To Wrong Session

org.apache.struts, struts2-json-plugin is vulnerable to an exposure of data element to wrong session. The vulnerability is due to per-request JSON parsing state being shared across concurrent requests, which allows an attacker to potentially observe data associated with another request and bypass...

CVE-2026-8732-EXPLOIT

CVE-2026-8732 – WordPress WP Maps Pro Exploit 인증되지 않은 관리자 계정 탈취 | CVSS 9.8 | 즉시 사용 가능 🔥 제공 내용 CVE-2026-8732용 완전 작동 Python 익스플로잇 인증 없는 관리자 계정 생성 매직 로그인 URL 반환 – 즉시 사이트 장악 WP Maps Pro ≤ 6.1.0에서 작동 무흔적, 깔끔, 기본적으로 로그 미남김 ⚡ 왜 저희를 선택해야 하나요 50개 이상의 취약한 대상에서 테스트 완료 불필요한 코드 없음 – 순수 익스플로잇 레드 팀, 모의 침투, 버그...

WordPress Books Gallery plugin <= 4.8.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by sungbyeongchan in WordPress Plugin Books Gallery versions = 4.8.3...

WordPress oik plugin <= 4.15.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by sequenceX0 in WordPress Plugin oik versions = 4.15.4...

[SECURITY] Fedora 44 Update: perl-Catalyst-Plugin-Static-Simple-0.38-2.fc44

The Static::Simple plugin is designed to make serving static content in your application during development quick and easy, without requiring a single line of code from you...

[SECURITY] Fedora 43 Update: perl-Catalyst-Plugin-Static-Simple-0.38-2.fc43

The Static::Simple plugin is designed to make serving static content in your application during development quick and easy, without requiring a single line of code from you...

[SECURITY] Fedora 45 Update: perl-Catalyst-Plugin-Static-Simple-0.38-2.fc45

The Static::Simple plugin is designed to make serving static content in your application during development quick and easy, without requiring a single line of code from you...

CVE-2026-39117

An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary code via the index.php...

CVE-2026-39117

A vulnerability exists in AltumCode 66Uptime (prior to v.54.0.0 ) and the 66Uptime ping-servers plugin (prior to v.2.0.0 ). A remote attacker can exploit an issue in the index.php file to achieve arbitrary code execution . Exploitation details are not provided in the documents. Remediation inform...

Fedora 44 : perl-Catalyst-Plugin-Static-Simple (2026-2d96cf2594)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2d96cf2594 advisory. Catalyst::Plugin::Static::Simple for Perl sets the CacheControl header to public for every static asset served. Consequently, intermediaries such as shared...

Fedora 45 : perl-Catalyst-Plugin-Static-Simple (2026-4d5a716383)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4d5a716383 advisory. Catalyst::Plugin::Static::Simple for Perl sets the CacheControl header to public for every static asset served. Consequently, intermediaries such as shared...

PT-2026-102608

The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...

Fedora 43 : perl-Catalyst-Plugin-Static-Simple (2026-7c46481544)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7c46481544 advisory. Catalyst::Plugin::Static::Simple for Perl sets the CacheControl header to public for every static asset served. Consequently, intermediaries such as shared...

CVE-2026-82804: Improper Neutralization of Special Elements used in an OS Command

The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...

SUSE CVE-2026-67222

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, mechanisms/1 applied listtoatom/1 to every colon-delimited token in an attacker-controlled authmechanism value, permanently consuming Erlang VM atoms and allowing the node to be crashed with a larg...