CVE-2026-71449

The Johnson Controls EasyIO FS32 software contains a Use of Hard-coded Cryptographic Key vulnerability (CWE-321) affecting versions prior to 3.0b63 . The flaw stems from the use of a fixed secret key for encryption or decryption processes, which enables an attacker to retrieve embedded sensitive ...

PT-2026-68560

Name of the Vulnerable Software and Affected Versions 69 Clothing versions prior to 1.2.11.2 Description The 69 Clothing | Brand Store & Fashion Boutique WordPress Theme is susceptible to PHP Object Injection, a condition where an application deserializes untrusted input, allowing an attacker to...

CVE-2025-53340: Missing Authorization

Missing Authorization vulnerability in awesomesupport Awesome Support awesome-support allows Retrieve Embedded Sensitive Data.This issue affects Awesome Support: from n/a through = 6.3.6...

CVE-2024-13410

CVE-2024-13410 affects CozyStay <= 1.7.0 and TinySalt

CVE-2024-13899

The Mambo Importer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0 via deserialization of untrusted input via the $data parameter in the fImportMenu function. This makes it possible for authenticated attackers, with Administrator-level access a...

PT-2024-18368

Name of the Vulnerable Software and Affected Versions The Slider Responsive Slideshow plugin for WordPress versions up to, and including, 1.3.8 Description The issue allows authenticated attackers with contributor-level access and above to inject a PHP Object via deserialization of untrusted inpu...

CVE-2022-3861 Betheme <= 26.5.1.4 - Authenticated (Subscriber+) PHP Object Injection

The Betheme theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 26.5.1.4 via deserialization of untrusted input supplied via the import, mfn-items-import-page, and mfn-items-import parameters passed through the mfnbuilderimport, mfnbuilderimportpage,...

CVE-2020-19960: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability has been discovered in zz cms version 2019 which allows attackers to retrieve sensitive data via the dlid parameter in the /dl/dlsendsms.php page cookie...

Hyland OnBase Information Disclosure Vulnerability

Hyland Software is an American company that develops OnBase, an enterprise content management and process management software suite. The company's suite is used in healthcare, financial institutions, insurance companies, government departments, higher education and manufacturing. Hyland OnBase ha...