267936 matches found
PT-2026-117269
MobaXterm Personal Edition Portable 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity. A local attacker with write permissions on this file can replace the ‘bin/cygwin1.dll’ library contained within it with a malicious library. When the victim opens a Local Shell...
PT-2026-117256
The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status comes from an authorised source, allowing unauthenticated attackers to move any order into a paid state or force it to fail...
PT-2026-117257
The App Builder WordPress plugin before 5.7.1 does not require authentication or authorisation before writing attacker-supplied data to one of its options and, on a separate unauthenticated request, redirecting the visitor's browser to a URI built from that stored data...
PT-2026-117247
Name of the Vulnerable Software and Affected Versions Document Gallery WordPress plugin versions prior to 5.1.2 Description Insufficient sanitization and escaping of several gallery shortcode attributes occur before they are embedded in a single-quoted HTML attribute within the rendered gallery...
PT-2026-117466
NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL through the sqlCollection:setFields action. Attackers holding the collection-sql snippet can replace a benign collection quer...
PT-2026-131031
TuxCare rebuilt @babel/plugin-syntax-typescript to address 1 CVE. Fixed in 7.18.9-tuxcare.2...
PT-2026-131032
TuxCare rebuilt @babel/plugin-syntax-typescript to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
PT-2026-131033
TuxCare rebuilt @babel/plugin-syntax-typescript to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
PT-2026-131034
TuxCare rebuilt @babel/plugin-syntax-typescript to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
PT-2026-131036
TuxCare rebuilt @babel/plugin-syntax-typescript to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
PT-2026-131038
TuxCare rebuilt @babel/plugin-syntax-typescript to address 1 CVE. Fixed in 7.25.7-tuxcare.4...
PT-2026-131039
TuxCare rebuilt @babel/plugin-syntax-typescript to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
PT-2026-132521
TuxCare rebuilt @babel/plugin-transform-typescript to address 2 CVEs. Fixed in 7.24.5-tuxcare.1...
PT-2026-132514
TuxCare rebuilt @babel/plugin-transform-typescript to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
PT-2026-132536
TuxCare rebuilt @babel/plugin-transform-react-jsx-self to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
PT-2026-132537
TuxCare rebuilt @babel/plugin-transform-react-jsx-self to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
PT-2026-133040
TuxCare rebuilt @babel/plugin-transform-spread to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
PT-2026-132035
TuxCare rebuilt @babel/plugin-transform-unicode-regex to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...