EUVD-2026-67835

free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/nfInstanceID accepts NF Profiles without enforcing UUID format, nfStatus enum values, heartBeatTimer ranges, mandatory profile fields, or...

CVE-2026-55068 free5GC: NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/nfInstanceID accepts NF Profiles without enforcing UUID format, nfStatus enum values, heartBeatTimer ranges, mandatory profile fields, or...

CVE-2026-55068

free5GC (open-source 5G core network) version 4.2.2 and earlier is vulnerable to NF Registration Poisoning in the NRF component. The RegisterNFInstance handler (PUT /nnrf-nfm/v1/nf-instances/{nfInstanceID}) accepts NF profile bodies without enforcing 3GPP TS 29.510 constraints for UUID format, nf...

CVE-2026-55068 free5GC: NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/nfInstanceID accepts NF Profiles without enforcing UUID format, nfStatus enum values, heartBeatTimer ranges, mandatory profile fields, or...

CVE-2026-8206

CVE-2026-8206 Vulnerabilità: Compromissione dell'Account non Autenticata — Dirottamento dell'Email di Reset della Password in Kirki Customizer Framework CVSS v3.1 9.8 / 10.0 CRITICO Vettore: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 1. Panoramica CVE-2026-8206 è una vulnerabilità di compromissione...

CVE-2025-12135

WPBookit getparam'csscode'; $jscode= $request-getparam'jscode'; updateoption 'wpbcustomcodedata', 'csscode' = $csscode, 'jscode' = $jscode ; Codeausführung aus /core/shortcodes/cla...

Vikunja vulnerable to Improper Authorization and Authorization Bypass Through User-Controlled Key

Summary A user with only a single self-owned project can permanently destroy the Kanban bucket assignments taskbuckets and task ordering taskpositions of any other project view in the entire instance. The ProjectView.Delete model method runs three SQL statements: the first is properly scoped to...

GHSA-GG93-X632-9CCV Vikunja vulnerable to Improper Authorization and Authorization Bypass Through User-Controlled Key

Summary A user with only a single self-owned project can permanently destroy the Kanban bucket assignments taskbuckets and task ordering taskpositions of any other project view in the entire instance. The ProjectView.Delete model method runs three SQL statements: the first is properly scoped to...

CVE-2024-9047

POC - Plugin WordPress File Upload, nel file wfufiledownloader.php prima della versione = 4.24.11 - CVE-2024-9047 Panoramica Il plugin WordPress File Upload è vulnerabile a causa di una convalida degli input impropria nel file wfufiledownloader.php, che interessa le versioni = 4.24.11. Questa...

CVE-2026-0920-

CVE-2026-0920- LA-Studio Element Kit für Elementor 📡 Der Exploit erscheint hier zuerst. Folge @KNxploited auf Telegram — dein Elite-Feed für frisch veröffentlichte CVEs, funktionierende PoCs und präzise Sicherheitsforschung. Unermüdlich aktualisiert. Entwickelt für alle, die immer einen Schritt...

CVE-2024-9593-Exploit

CVE-2024-9593-Exploit Il plugin Time Clock e il plugin Time Clock Pro per WordPress sono vulnerabili all'esecuzione remota di codice nelle versioni fino alla 1.2.2 per Time Clock e 1.1.4 per Time Clock Pro incluse, tramite la funzione 'etimeclockwploadfunctioncallback'. Ciò consente ad attaccanti...

Security Bulletin: Multiple Security Vulnerabilities in axios affect Content Cortex for Microsoft Office

Summary axios versions before 1.18.0 0.x: before 0.33.0 have multiple vulnerabilities CVSS up to 8.3, High. CVE-2026-67312/67313 are uncontrolled recursion issues in formDataToJSON that exhaust the call stack via deeply nested field names, causing denial of service. CVE-2026-67314/67316/67319 are...

CVE-2024-12252

CVE-2024-12252 SEO LAT Auto Post = 2.2.1 - Fehlende Autorisierung zum Überschreiben/Hochladen von Dateien Remote Code Execution Beschreibung Das SEO LAT Auto Post Plugin für WordPress ist anfällig für das Überschreiben von Dateien aufgrund einer fehlenden Berechtigungsprüfung bei der AJAX-Aktion...

CVE-2023-7028

CVE-2023-7028 È stato scoperto un problema in GitLab CE/EE che interessa tutte le versioni dalla 16.1 alla 16.1.6 esclusa, dalla 16.2 alla 16.2.9 esclusa, dalla 16.3 alla 16.3.7 esclusa, dalla 16.4 alla 16.4.5 esclusa, dalla 16.5 alla 16.5.6 esclusa, dalla 16.6 alla 16.6.4 esclusa e dalla 16.7 al...

CVE-2026-42533

CVE-2026-42533 — PoC Exploit per l'Heap Buffer Overflow di nginx Esecuzione remota di codice pre-autenticazione tramite sovrascrittura dei gruppi di cattura a due passate PoC pubblico rilasciato il 2026-07-27 — Non aspettare, applica la patch ora. | ---|--- CVE| CVE-2026-42533 CVSS 4.0| 9.2 Criti...

CVE-2025-55182

React Server Components und das Flight-Protokoll verstehen React Server Components ist ein Feature, das in React 19 eingeführt wurde und es ermöglicht, Komponenten auf dem Server statt im Browser des Clients zu rendern. Der Server kann komplexe Rechenaufgaben verarbeiten, während er nur das...

CVE-2026-58480

CVE-2026-58480 — RCE por Upload de Arquivo Não Autenticado no Blocksy Companion Pro Advanced Reviews → saveattachments → Bypass do strpos em Custom Fonts → shell.woff2.php Visão Geral CVE-2026-58480 também referenciada como CVE-2026-15158 é uma vulnerabilidade crítica CVSS 9.8 de upload arbitrári...

Aqua's archive extraction follows attacker-planted symlinks, allowing writes outside the install directory

Summary aquaproj/aqua extracts downloaded tool archives through pkg/unarchive/archives.go using github.com/mholt/archives. The archive handler creates symlink entries with os.Symlinkf.LinkTarget, dstPath without validating that the symlink target resolves inside the extraction destination. A...

GHSA-MF5C-HW34-4HPP Aqua's archive extraction follows attacker-planted symlinks, allowing writes outside the install directory

Summary aquaproj/aqua extracts downloaded tool archives through pkg/unarchive/archives.go using github.com/mholt/archives. The archive handler creates symlink entries with os.Symlinkf.LinkTarget, dstPath without validating that the symlink target resolves inside the extraction destination. A...

EUVD-2026-67795

Duplicacy through 3.2.5 contains a path traversal vulnerability in the restore function that fails to validate entry paths deserialized from snapshot files. Attackers can craft malicious snapshot entries with directory traversal sequences to write files outside the restore directory to arbitrary...