CVE-2025-55891

CVE-2025-55891: Corruption de tas dans TIFFCP.EXE docuPrinter Pro via un fichier TIFF malformé Résumé Une vulnérabilité de corruption de tas existe dans TIFFCP.EXE, un utilitaire en ligne de commande fourni avec Neevia docuPrinter Pro, en raison de l'utilisation d'une version obsolète et vulnérab...

WordPress Pro Like Button plugin < 2.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin Pro Like Button versions 2.0...

CVE-2026-89296

The Pro Like Button WordPress plugin before 2.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

CVE-2026-89296 Pro Like Button < 2.0 - Unauthenticated SQLi via 'postid' Parameter

The Pro Like Button WordPress plugin before 2.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

EUVD-2026-90514

The Pro Like Button WordPress plugin before 2.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

CVE-2026-89296 Pro Like Button < 2.0 - Unauthenticated SQLi via 'postid' Parameter

The Pro Like Button WordPress plugin before 2.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

CVE-2026-89296

The Pro Like Button WordPress plugin, in versions before 2.0 , is vulnerable to SQL injection due to insufficient sanitization and escaping of a parameter before it is used in a SQL query. Specifically, the 'postid' parameter is identified as the vector. This flaw allows unauthenticated users to ...

sparx_hack

Vulnérabilités multiples dans Sparx Pro Cloud Server et Enterprise Architect Code d'exploitation pour exécuter une commande SQL arbitraire sur le serveur Sparx PCS sans authentification. REMARQUE : la clé est INCORRECTE pour empêcher les s|rIpt kIddi3 de pirater facilement ;- Article complet :...

ghostlock-pfem10

GhostLock — PFEM10 Эксплойт CVE-2026-43499 IonStack для OPPO Find X5 Pro PFEM10. Ядро 5.10.236-android12-9-o, futex CMPREQUEUEPI UAF → примитив записи в pi-tree. Используйте на свой страх и риск. Ожидайте паники / перезагрузки. Не обновляйте прошивку. Сборка ./build.sh requires Android NDK r28c...

CVE-2026-97968

A flaw was found in the Linux kernel's Corsair Commander Pro corsair-cpro hardware monitoring driver. When device registration fails during initialization, debugfs entries are left registered after the associated device data structure has been freed. A local user with access to the debugfs...

CVE-2026-97967

A flaw was found in the Linux kernel's Corsair Commander Pro corsair-cpro driver. When device initialization fails, the driver does not remove registered debug filesystem debugfs entries, leaving behind references to memory that has already been freed. A local user accessing these lingering entri...

AlmaLinux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1784136022)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784136022 advisory. - A flaw was found in GIMP's Paint Shop Pro PSP file format parser. This heap buffer overflow vulnerability allows a remote attacker...

Linux Distros Unpatched Vulnerability : CVE-2026-102371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing the...

pastokrapacefleciks

pastokrapacefleciks, WireShark - PRO анализатор Использование: Поместите ваш .pcapng файл в директорию pastokrapacefleciks python .\pastokrapacefleciks.py python3 .\pastokrapacefleciks.py Проверьте ваш HTML отчёт...

CVE-2026-102371

In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing the pro client with the Ubuntu Pro token passed as a command-line argument pro attach . On systems where /proc is mounted without...

UBUNTU-CVE-2026-102371

In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing the pro client with the Ubuntu Pro token passed as a command-line argument pro attach . On systems where /proc is mounted without...

EUVD-2026-88962

In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing the pro client with the Ubuntu Pro token passed as a command-line argument pro attach . On systems where /proc is mounted without...

CVE-2026-102371

The wsl-pro-service component (versions before 0.1.19ubuntu3 ) is vulnerable to information disclosure because it passes an Ubuntu Pro token as a command-line argument during the execution of the pro attach command. Since WSL defaults to mounting /proc without process-hiding mitigations like hide...

CVE-2026-102371 wsl-pro-service: Ubuntu Pro token exposed via process command-line arguments

In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing the pro client with the Ubuntu Pro token passed as a command-line argument pro attach . On systems where /proc is mounted without...

CVE-2026-102371 wsl-pro-service: Ubuntu Pro token exposed via process command-line arguments

In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing the pro client with the Ubuntu Pro token passed as a command-line argument pro attach . On systems where /proc is mounted without...