GO-2025-3836 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2025-3788 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GO-2026-5031 vulnerabilities

Vulnerabilities for packages: seaweedfs...

GO-2025-3646 vulnerabilities

Vulnerabilities for packages: k3s...

GO-2026-4471 vulnerabilities

Vulnerabilities for packages: gatus...

GO-2025-4109 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GO-2026-5047 vulnerabilities

Vulnerabilities for packages: dapr...

GO-2026-4316 vulnerabilities

Vulnerabilities for packages: custom-pod-autoscaler...

GO-2026-4312 vulnerabilities

Vulnerabilities for packages: datadog-agent...

GO-2023-2073 vulnerabilities

Vulnerabilities for packages: croc...

GO-2026-5099 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GO-2024-2962 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib, newrelic-fluent-bit-output...

WordPress WooCommerce Subscriptions plugin < 9.1.0 - Unauthenticated RCE via PHP Object Injection vulnerability

Unauthenticated RCE via PHP Object Injection vulnerability discovered by Vasily Belolapotkov, Vlad Olaru in WordPress Plugin WooCommerce Subscriptions versions 9.1.0...

CVE-2026-73076

A vulnerability in Vim allows remote attackers to execute arbitrary commands by crafting a malicious .VimballRecord file that injects OS commands executed when processed by the vimballRmVimball function. Mitigation Avoid installing or removing vimballs from untrusted sources. This vulnerability...

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

MaxSite CMS <=109.1 - Remote Code Execution

MaxSite CMS through 109.1 allows unauthenticated remote attackers to execute arbitrary code via the MarkItUp editor preview AJAX endpoint, preview-ajax.php. The endpoint insufficiently authenticates the request, failing to ensure the user is logged in, and processes the attacker's input via unsaf...

elFinder < 2.1.58 - Remote Code Execution

studio-42/elfinder before 2.1.58 contains a remote code execution caused by execution of PHP code in a .phar file, letting attackers execute arbitrary PHP code if the server parses .phar files as PHP, exploit requires server to parse .phar files as PHP. id: CVE-2021-23394 info: name: elFinder...

WordPress eaSYNC Booking <1.1.16 - Arbitrary File Upload

WordPress eaSync Booking plugin bundle for hotel, restaurant and car rental before 1.1.16 is susceptible to arbitrary file upload. The plugin contains insufficient input validation of an AJAX action. An allowlist of valid file extensions is defined but is not used during the validation steps. An...

WordPress InPost Gallery <2.1.4.1 - Local File Inclusion

WordPress InPost Gallery plugin before 2.1.4.1 is susceptible to local file inclusion. The plugin insecurely uses PHP's extract function when rendering HTML views, which can allow attackers to force inclusion of malicious files and URLs. This, in turn, can enable them to execute code remotely on...

Zoho ManageEngine - Remote Code Execution

Zoho ManageEngine Password Manager Pro, PAM 360, and Access Manager Plus are susceptible to unauthenticated remote code execution via XML-RPC. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary...