CVE-2023-24287

Portable Puzzle Collection (sgt-puzzles) versions before 20230116.5782e29 contain a buffer overflow in the Undead puzzle , triggerable via the "M" command when loading a crafted save file. The vulnerability results in a low availability impact (CVSS 3.1 base score 2.9 , local attack vector with h...

CVE-2023-37366

CVE-2023-37366 is a remote denial-of-service vulnerability in Samsung Exynos mobile, automotive, and modem processors (including Exynos 9810 through 2200, Modem 5123/5300, and Auto T5123). The root cause is in cd_parseMsg (file cd_codec.c) within the Shannon SM Task, where improper input validati...

CVE-2023-24291

Simon Tatham's Portable Puzzle Collection (sgt-puzzles) before version 20230116.5782e29 contains a buffer overflow (also described as an integer overflow) triggered via the record length parameter in a crafted save file. The vulnerability can lead to a buffer overrun in the application, with a lo...

CVE-2026-19058

A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function DataInterpreter of the file metagpt/roles/di/datainterpreter.py. The manipulation results in code injection. The attack must be initiated from a local position. The exploit has been made public...

CVE-2024-35690

CVE-2024-35690 – WordPress Widget Options plugin up to version 4.0.1 is vulnerable to sensitive data exposure (Subscriber+). The Patchstack entries (and WPVulnDB reference) indicate vulnerable versions are

CVE-2022-26758

The macOS Kernel is vulnerable to a memory corruption issue that allows a malicious application to cause unexpected changes in memory shared between processes. This flaw exists in macOS Monterey versions prior to 12.4 and is caused by insufficient state management. The issue was resolved with imp...

CVE-2026-48165

Disclaimer: This data contains information about vulnerable...

CVE-2026-44168

Disclaimer: This data contains information about vulnerable...

CVE-2026-44169

Disclaimer: This data contains information about vulnerable...

CVE-2024-33724

The SOPlanning project management software, version 1.52.00 , is vulnerable to a Reflected Cross-Site Scripting (XSS) attack via the groupe_id parameter in the process/groupe_save.php endpoint. A remote unauthenticated attacker can exploit this to hijack the sessions or credentials of authenticat...

CVE-2026-42048

creationtimestamp| type| source ---|---|--- 2026-04-27 10:45:50+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-9whx-c884-c68q 2026-05-14 05:44:30+00:00| seen|...

CVE-2024-32537

CVE-2024-32537 is a CSRF vulnerability in the Flash Video Player plugin for WordPress (joshuae1974). Public description indicates the issue affects Flash Video Player versions from unspecified earliest through 5.0.4. Connected sources confirm a CSRF flaw; Red Hat and CVE feeds reiterate the same,...

CVE-2024-35644

CVE-2024-35644 describes a DOM-based Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “Preferred Languages” by Pascal Birchler. The issue is caused by improper input neutralization during web page generation, enabling DOM-based XSS. It affects versions from n/a through 2.2.2 of th...

CVE-2024-34438

CVE-2024-34438 is a Missing Authorization vulnerability in the WordPress plugin Shared Files (Download Manager & Media Gallery) affecting versions up to and including 1.7.19 . The issue enables unauthorized access to protected resources due to broken access control. The CVSS v3.1 base score is 5....

AIs Are Getting Better at Finding and Exploiting Security Vulnerabilities

From an Anthropic blog post: In a recent evaluation of AI models’ cyber capabilities, current Claude models can now succeed at multistage attacks on networks with dozens of hosts using only standard, open-source tools, instead of the custom tools needed by previous generations. This illustrates h...

CVE-2024-30461

CVE-2024-30461 affects Tumult Hype Animations (WordPress plugin) up to version 1.9.11. The issue is an DOM-based XSS caused by improper input neutralization during web page generation, enabling script execution in the context of a user’s browser. Public sources consistently describe this as a Cro...

CVE-2023-49186

CVE-2023-49186 affects the WordPress plugin Machic Core (

CVE-2023-3867

CVE-2023-3867 affects the Linux kernel ksmbd subsystem. It fixes an out-of-bounds read in smb2_sess_setup when a SMB2 compound request contains a second payload; processing the first payload could trigger an OOB read. The vulnerability could impact confidentiality and availability if exploited lo...

CVE-2023-32253

CVE-2023-32253 affects the Linux kernel’s ksmbd subsystem. A deadlock is triggered by sending multiple concurrent session setup requests, which can lead to a denial of service. Provided sources consistently describe the issue in the ksmbd component and its DO S impact; no explicit exploit details...

CVE-2023-32256

The CVE-2023-32256 entry describes a race condition in the Linux kernel ksmbd component where a race between smb2 close and logoff on multichannel connections can cause a use-after-free. This affects the Linux kernel ksmbd implementation; the vulnerability details include the potential for a secu...