25471 matches found
CVE-2026-61953
Unauthenticated Server Side Request Forgery SSRF in Simple Link Directory Pro = 15.0.6 versions...
Malicious Package
Overview chalk-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious Package
Overview vitest-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
CVE-2026-61953 WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability
Unauthenticated Server Side Request Forgery SSRF in Simple Link Directory Pro = 15.0.6 versions...
CVE-2026-61953
Unauthenticated Server Side Request Forgery SSRF in Simple Link Directory Pro = 15.0.6 versions...
mt6897-unlock-attempt
UnlockPOCOX6Pro — duchamp POCO X6 Pro 5G recovery research...
Malicious code in @heartlandone-private/fontawesome-pro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc8f9f53c05ecc2642ce82c3841e046025662c206f002b4c6da11ff0cbc763d The package's postinstall lifecycle hook runs node index.js, which issues an HTTPS GET to a hardcoded Burp Collaborator subdomain at...
MAL-2026-11093 Malicious code in @heartlandone-private/fontawesome-pro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc8f9f53c05ecc2642ce82c3841e046025662c206f002b4c6da11ff0cbc763d The package's postinstall lifecycle hook runs node index.js, which issues an HTTPS GET to a hardcoded Burp Collaborator subdomain at...
WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by luc in WordPress Plugin Simple Link Directory Pro versions = 15.0.6...
Exploit for CVE-2026-9830
CVE-2026-9830 Investigation Overview This directory contai...
CVE-2026-57916 Arbitrary Path Execution via CPS URI in proCertum SmartSign
proCertum SmartSign opens Certificate Practice Statement CPS URI without schema validation. An attacker can prepare arbitrary certificate with CPS URI pointing to a local executable file or any URL, sign a document with it, and send it to the victim. When the victim opens the document in the...
CVE-2026-9830
The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other...
CVE-2026-9830 BookingPress Pro < 5.7.3 - Unauthenticated Customer PII Disclosure and Booking Tampering via Permission Callback Bug
The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other...
CVE-2026-9830 BookingPress Pro < 5.7.3 - Unauthenticated Customer PII Disclosure and Booking Tampering via Permission Callback Bug
The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other...
CVE-2026-9830
The BookingPress Appointment Booking Pro WordPress plugin (by Repute Infosystems) is vulnerable to an authentication bypass in versions before 5.7.3 . The root cause is a failure to correctly invoke the REST permission callback , making every route within one of its API namespaces accessible with...
CVE-2026-9830: Improper Authentication
The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other...
CVE-2026-61953: Server-Side Request Forgery (SSRF)
Unauthenticated Server Side Request Forgery SSRF in Simple Link Directory Pro = 15.0.6 versions...
PT-2026-65314
Name of the Vulnerable Software and Affected Versions Simple Link Directory Pro versions prior to 15.0.7 Description An unauthenticated Server Side Request Forgery SSRF exists in the plugin. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an...