CVE-2026-15802

The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'deletelocationsbackupfilecallback' function in all versions up to, and including, 4.9. This makes it possible for authenticated attackers, with subscriber-level access...

Apache OFBiz Directory Traversal - Remote Code Execution

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.13 id: CVE-2024-32113 info: name: Apache OFBiz Directory Traversal - Remote Code Execution author: DhiyaneshDK severity: high description: |...

CVE-2026-15802

The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'deletelocationsbackupfilecallback' function in all versions up to, and including, 4.9. This makes it possible for authenticated attackers, with subscriber-level access...

CVE-2026-15802

The CVE covers the WP Foodbakery WordPress plugin. Affected: all versions up to 4.9. Vulnerability: arbitrary file deletion due to insufficient validation in delete_locations_backup_file_callback. Impact: authenticated attackers with subscriber-level access can delete arbitrary files on the serve...

EUVD-2026-47611

The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'deletelocationsbackupfilecallback' function in all versions up to, and including, 4.9. This makes it possible for authenticated attackers, with subscriber-level access...

CVE-2026-64016

A flaw was found in the Linux kernel's ksmbd component, which handles file sharing. When a durable network connection is re-established, an error in managing the lifetime of file objects can occur. This can lead to a situation where a file object is released from memory while still being...

EUVD-2026-47573

Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-46637

Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution via the service listening on TCP port 9002. A crafted request to the /test endpoint can cause the device to download, extract, and execute attacker-controlled files with root privileges...

PT-2026-63400

In Progress® Telerik® UI for AJAX prior to v2026.2.708, a path traversal vulnerability in the file-based persistence storage provider can be exploited when the storage key is derived from user-controlled input, enabling attacker-controlled deserialization and remote code execution...

The vulnerability in the /web/jquery/uploader/multi Uploadify.php script of the D-Link DNS-320 network storage software allows a attacker to execute arbitrary code and gain full access to the system.

The vulnerability in the /web/jquery/uploader/multiUploadify.php script of the D-Link DNS-320 network storage software relates to the unlimited uploading of dangerous types of files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code and gain full access to the...

PT-2026-63399

Name of the Vulnerable Software and Affected Versions Telerik UI for AJAX versions prior to 2026.2.708 Description Applications using cookie-based storage in RadPersistenceManager or RadDockLayout deserialize attacker-controlled cookie content, which allows unauthenticated remote code execution...

CVE-2025-50327

Summary: CVE-2025-50327 affects Franco Corbelli ZPAQFRANZ versions up to v61.3. The vulnerability arises from a bypass of the Mark-of-the-Web protection mechanism, enabling a remote attacker to escalate privileges and execute arbitrary code on affected systems. The connected documents confirm the...

Vulnerability of components /api/v1/validate/code and /api/v1/auto_login in the software for visual development of IBM Langflow OSS AI agents, allowing a perpetrator to execute arbitrary code.

The vulnerability of the software components /api/v1/validate/code and /api/v1/autologin of the IBM Langflow OSS visual development agent for AI agents is related to improper code generation management. Exploiting this vulnerability may allow a remote attacker to execute arbitrary code...

Plone < 4.2.3 Multiple Vulnerabilities (HF 20121106)

The version of Plone installed on the remote host is prior to 4.2.3. It is, therefore, affected by the following vulnerabilities: - registerConfiglet.py in Plone allows remote attackers to execute Python code via unspecified vectors, related to the admin interface. CVE-2012-5485 -...

RHEL 9 : libreoffice (RHSA-2026:43425)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:43425 advisory. LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a...

ROS-20260722-73-0022

The vulnerability of the user interface of Google Chrome and Microsoft Edge is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

ROS-20260722-73-0032

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers on MacOS operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

ROS-20260722-73-0028

The vulnerability of the SVG object processing mechanism in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

ROS-20260722-73-0031

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Plone RestrictedPython < 5.3 / 6.x < 6.1 RCE

The version of RestrictedPython installed on the remote host is prior to 5.3, or 6.x prior to 6.1. It is, therefore, affected by a remote code execution vulnerability due to not checking access to stack frames and their attributes. An authenticated, remote attacker can exploit this to bypass...