PT-2026-83981

XueZhiSi Open Source Exam System = 3.9.0 has a privilege escalation vulnerability in the teacher-end interface POST /api/teacher/user/page/list. The role parameter in UserPageRequestVM is fully controllable by the requester...

PT-2026-83878

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbd cron process parameter without authentication. Attackers can predict the...

PT-2026-83751

Name of the Vulnerable Software and Affected Versions ToolJet versions prior to 3.16.208 Description An issue exists where the software fails to validate if authenticated users belong to the organization specified in the organizationId path parameter of tooljet-db endpoints. This allows any user...

PT-2026-83985

TechStore 1.0 is vulnerable to Cross Site Scripting XSS. In contact display, the application echoes the id parameter verbatim into the rendered page, permitting execution of attacker-supplied JavaScript in users browser...

PT-2026-83807

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection exists in the /pages/inv searchfrm.php file. The issue occurs when the ID argument is manipulated, allowing an attacker to execute arbitrary SQL commands on...

CVE-2025-63607

TechStore 1.0 contains a Cross-Site Scripting (XSS) vulnerability in the contact_display function, where the id parameter is echoed verbatim into the rendered page, allowing execution of attacker-supplied JavaScript in a victim's browser. The CVSS 3.1 score is 6.1 (Medium) , with a changed scope ...

Amazon Linux 2 : freerdp, --advisory ALAS2-2026-3887 (ALAS-2026-3887)

The version of freerdp installed on the remote host is prior to 2.11.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3887 advisory. FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the...

Amazon Linux 2023 : postgresql18, postgresql18-contrib, postgresql18-llvmjit (ALAS2023-2026-2079)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2079 advisory. Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via craft...

Amazon Linux 2023 : jackson-databind (ALAS2023-2026-2081)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2081 advisory. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a...

The vulnerability of the setMacFilterRules() function in the MAC Filtering component of TOTOLINK A720R microprogrammed router software allows a intruder to trigger a service failure.

The vulnerability of the setMacFilterRules function in the MAC Filtering component of TOTOLINK A720R microprogrammed router software is related to the output of the operation being written outside of the buffer in memory when processing the desc parameter. Exploiting this vulnerability could allo...

Linux Distros Unpatched Vulnerability : CVE-2026-19873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a...

CubeCart 6.7.4 - SQL injection

Exploit Title: CubeCart 6.7.4 - SQL injection Date: 2026-06-08 Exploit Author: Mikail Kocadağ Vendor Homepage: https://www.cubecart.com/ Software Link: https://github.com/cubecart/v6 Vulnerable Version: 6.7.4 Fixed Version: 6.7.5 CVE: CVE-2026-54647 Advisory / References:...

Keycloak -- multiple vulnerabilities

The Keycloak Team reports: CVE-2026-35563: LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP hostname CVE-2026-16093: Required signed-JWT assertion policy can be bypassed with unsigned assertion headers CVE-2026-16072: Organization...

EUVD-2025-210815

TechStore 1.0 is vulnerable to Cross Site Scripting XSS. In contactdisplay, the application echoes the id parameter verbatim into the rendered page, permitting execution of attacker-supplied JavaScript in users browser...

Important: kernel6.18

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: afunix: Drop all SCM attributes for SOCKMAP. CVE-2026-53005 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPFMAPTYPEINODESTORAGE creation if BPF LSM is uninitialized When...

PT-2026-83731

Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter. When an application passes a custom envelope object with a size property containing CRLF characters to sendMail, the value is concatenated into the SMTP MAIL FROM command as SIZE=...

PT-2026-83848

Name of the Vulnerable Software and Affected Versions ProfilePress versions prior to 4.17.2 Description An unauthenticated remote code execution issue exists in the ProfilePress WordPress plugin. Unauthenticated attackers can install and activate arbitrary plugins by brute-forcing a weak 32-bit...

CVE-2026-75460

XueZhiSi Open Source Exam System versions 3.9.0 and below contain a privilege escalation vulnerability in the teacher-end interface at POST /api/teacher/user/page/list . The root cause is that the role parameter in UserPageRequestVM is fully controllable by the requester, allowing a low-privilege...

CVE-2025-63607

TechStore 1.0 is vulnerable to Cross Site Scripting XSS. In contactdisplay, the application echoes the id parameter verbatim into the rendered page, permitting execution of attacker-supplied JavaScript in users browser...

PT-2026-83843

Joomla Extension - joomshaper.com - Open Redirect via Base64 Return Parameter in Helix Ultimate 2.2.10 - Return redirect parameters accepted arbitrary Base64 strings without verifying whether the resolved target was an internal site URL via Uri::isInternal...