CVE-2026-121455 DbGate before 7.3.3 Missing Authorization via /connections/test and /connections/save

DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authenticated users to bypass LOGINPERMISSIONS because test and save never call testConnectionPermission. Attackers can submit arbitrary connection definitions to POST /connections/test to probe...

CVE-2026-121455: dbgate: DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authenticated…

DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authenticated users to bypass LOGINPERMISSIONS because test and save never call testConnectionPermission. Attackers can submit arbitrary connection definitions to POST /connections/test to probe...

PT-2026-136154

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.32.2 Description A heap buffer over-read occurs in the save png to buffer function. This issue allows a malicious RDP server to leak client memory by sending 16 bpp DIB clipboard data. An attacker can provide a CF D...

PT-2026-136912

Name of the Vulnerable Software and Affected Versions Import and export users and customers plugin for WordPress versions prior to 2.5.12 Description An issue exists due to a non-atomic multi-option write sequence in the ACUI Cron::save settings function. The system persists the variables acui cr...

CVE-2026-115653 Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged mode

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV handler of the Cortex-M module ports saves a preempted user-mode module thread's registers in privileged mode at addresses taken from the thread's stack pointer, without checking that pointer against the thread's stack. A user-mod...

CVE-2026-115653

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603 , the PendSV handler of the Cortex-M module ports contains a vulnerability where it saves a preempted user-mode module thread's registers in privileged mode using an unchecked stack pointer . Because the handler does not validate the pointer ...

CVE-2026-120312 Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name

Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write arbitrary .json files. Attackers can pass traversal sequences to load or save to disclose sensitive JSON data or overwrite policy files suc...

CVE-2026-120312 Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name

Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write arbitrary .json files. Attackers can pass traversal sequences to load or save to disclose sensitive JSON data or overwrite policy files suc...

silverstripe-cms-authz-poc

SilverStripe CMS — authorization flaws F1 / F4 Status: pu...

CVE-2026-118638 Mapster WP Maps < 2.0.6 - Unauthenticated Arbitrary Post Modification via save-mapmaker REST Route

The Mapster WP Maps WordPress plugin before 2.0.6 does not perform any authorization check on a REST API route that writes post data, allowing unauthenticated attackers to overwrite the title of arbitrary posts, create arbitrary published posts, and overwrite the Mapster WP Maps WordPress plugin...

CVE-2026-118638

The Mapster WP Maps WordPress plugin versions before 2.0.6 is vulnerable to an unauthenticated arbitrary post modification vulnerability. The root cause is a missing authorization check on a REST API route used to write post data (specifically identified in some records as the save-mapmaker route...

CVE-2026-118638 Mapster WP Maps < 2.0.6 - Unauthenticated Arbitrary Post Modification via save-mapmaker REST Route

The Mapster WP Maps WordPress plugin before 2.0.6 does not perform any authorization check on a REST API route that writes post data, allowing unauthenticated attackers to overwrite the title of arbitrary posts, create arbitrary published posts, and overwrite the Mapster WP Maps WordPress plugin...

CLEANSTART-2024-DH90342 When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those in the context of the current user

Security vulnerability affects the firefox-esr package. When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those in the context of the current user...

CVE-2026-109592

The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.16. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible f...

PT-2026-133708

A vulnerability was found in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This affects the function mysqli query of the file admin/save student.php. Performing a manipulation of the argument date/department/subject/forwarded to/action taken by/section/passwor...

CVE-2026-107743 Mapster WP Maps <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via 'config.loading.background' Parameter

The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.5. This is due to the /wp-json/mapster-wp-maps/save-mapmaker REST route being registered with a permissioncallback that unconditionally returns true no capability check, no...

CVE-2026-107743

The Mapster WP Maps plugin for WordPress (versions

CVE-2026-107743 Mapster WP Maps <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via 'config.loading.background' Parameter

The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.5. This is due to the /wp-json/mapster-wp-maps/save-mapmaker REST route being registered with a permissioncallback that unconditionally returns true no capability check, no...

CVE-2026-107743: mapster Mapster WP Maps: The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including,…

The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.5. This is due to the /wp-json/mapster-wp-maps/save-mapmaker REST route being registered with a permissioncallback that unconditionally returns true no capability check, no...

PT-2026-130679

The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.5. This is due to the /wp-json/mapster-wp-maps/save-mapmaker REST route being registered with a permission callback that unconditionally returns true no capability check, no...