19137 matches found
CVE-2026-6728
The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 7.0.9 via the 'getstreamdata' function. This makes it possible for unauthenticated attackers to extract sensitive data including published password-protected post, page, an...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the overlay process. An attacker can cause a crash or potentially access sensitive memory contents by providing a crafted HEIF file that triggers incorrect indexing into the alpha buffer during image compositing...
CVE-2026-43945
creationtimestamp| type| source ---|---|--- 2026-05-19 18:34:17+00:00| published-proof-of-concept| https://github.com/frangoteam/FUXA/security/advisories/GHSA-p69w-mmfv-xrfj...
[SECURITY] Fedora 44 Update: rust-ingredients-0.2.2-4.fc44
Check ingredients of published Rust crates...
[SECURITY] Fedora 43 Update: rust-ingredients-0.2.2-4.fc43
Check ingredients of published Rust crates...
CVE-2026-47396
creationtimestamp| type| source ---|---|--- 2026-05-19 06:34:59+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-86qc-r5v2-v6x6 2026-07-21 16:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6axknrdb2a...
CVE-2026-47268
creationtimestamp| type| source ---|---|--- 2026-05-19 01:15:10+00:00| published-proof-of-concept| https://github.com/nezhahq/nezha/security/advisories/GHSA-6x26-5727-rrm9...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the JP2 encoder. An attacker can cause a single-byte heap buffer overwrite by specifying certain options. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Advisory -...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the fx operation. An attacker can cause a denial of service by supplying a specially crafted argument that triggers a stack overflow. Remediation A fix was pushed into the master branch but not yet published...
CVE-2026-47208
creationtimestamp| type| source ---|---|--- 2026-05-18 12:46:19+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-76w7-j9cq-rx2j 2026-06-14 09:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moafsggt2e2a 2026-07-09...
CVE-2026-45670
creationtimestamp| type| source ---|---|--- 2026-05-18 11:08:05+00:00| published-proof-of-concept| https://github.com/nuxt/nuxt/security/advisories/GHSA-6m52-m754-pw2g...
CVE-2026-45669
creationtimestamp| type| source ---|---|--- 2026-05-18 11:07:53+00:00| published-proof-of-concept| https://github.com/nuxt/nuxt/security/advisories/GHSA-fx6j-w5w5-h468...
EUVD-2026-30729
A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the function getAllPatientDetail of the file updateinfo.php of the component GET Parameter Handler. Executing a manipulation of the argument appointmentno can lead to sql injection. The...
PT-2026-41594
A flaw has been found in Edimax BR-6428NS 1.10. This affects the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. This manipulation of the argument L2TPUserName causes buffer overflow. It is possible to initiate the attack remotely. The exploit has...
CVE-2026-8766 Kilo-Org kilocode Environment Variable config.ts load information disclosure
A flaw has been found in Kilo-Org kilocode up to 7.0.47. This issue affects the function Load of the file packages/opencode/src/config/config.ts of the component Environment Variable Handler. Executing a manipulation of the argument KILOCONFIGCONTENT can lead to information disclosure. It is...
CVE-2026-8730 Open5GS NRF context.c ogs_sbi_nf_instance_set_id denial of service
A flaw has been found in Open5GS up to 2.7.6. This impacts the function ogssbinfinstancesetid in the library /lib/sbi/context.c of the component NRF. Executing a manipulation of the argument nfInstanceId can lead to denial of service. The attack may be performed from remote. The exploit has been...
CVE-2026-8730 Open5GS NRF context.c ogs_sbi_nf_instance_set_id denial of service
A flaw has been found in Open5GS up to 2.7.6. This impacts the function ogssbinfinstancesetid in the library /lib/sbi/context.c of the component NRF. Executing a manipulation of the argument nfInstanceId can lead to denial of service. The attack may be performed from remote. The exploit has been...
CVE-2026-46701
creationtimestamp| type| source ---|---|--- 2026-05-16 15:11:55+00:00| published-proof-of-concept| https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-j3vx-cx2r-pvg8 2026-06-17 22:38:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojevvheah2c 2026-06-19...
CVE-2026-46703
creationtimestamp| type| source ---|---|--- 2026-05-16 10:58:07+00:00| published-proof-of-concept| https://github.com/boxlite-ai/boxlite/security/advisories/GHSA-f396-4rp4-7v2j 2026-06-11 01:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnxzmkp6552n 2026-06-11...