261912 matches found
CVE-2026-19325
IncomeStreamSurfer roo-code-memory-bank-mcp-server exposes a local path traversal in read_memory_bank_file/append_memory_bank_entry (readMemoryBankFile/appendMemoryBankEntry) affecting src/index.ts. The attack hinges on manipulating file_name to traverse directories. Details in CVE-2026-19325 ind...
CVE-2023-30000
creationtimestamp| type| source ---|---|--- 2026-08-09 01:19:36+00:00| published-proof-of-concept| Telegram/8Dh3YUE7Kfb7FvNcXIDSqcPSChtli9yVwlxO3uxT68v6BA...
CVE-2026-71989
creationtimestamp| type| source ---|---|--- 2026-08-09 00:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmcmex6mq2z...
EUVD-2026-54836
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the openvpn function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root...
CVE-2026-18988
creationtimestamp| type| source ---|---|--- 2026-08-08 21:16:12+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mslykpomvr2a...
CVE-2026-71957
creationtimestamp| type| source ---|---|--- 2026-08-08 18:08:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mslnwrthta2v...
CVE-2026-20346
creationtimestamp| type| source ---|---|--- 2026-08-08 15:03:35+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117060495821023885 2026-08-10 12:45:08+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2 2026-08-10 13:20:07+00:00| seen|...
CVE-2026-19195
creationtimestamp| type| source ---|---|--- 2026-08-08 12:06:35+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117059799868254552 2026-08-09 05:00:03+00:00| seen| https://t.me/GithubRedTeam/97246 2026-08-09 14:02:14+00:00| published-proof-of-concept|...
Exploit for CVE-2026-64638
💥 CVE‑2026‑64638 – WordPress XSS2Shell S...
CVE-2026-66060
creationtimestamp| type| source ---|---|--- 2026-08-08 11:03:35+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117059546548263152...
CVE-2026-68081
In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 pages if KVM synthesizes a nested VM-Exit due to invalid guest while emulating VMLAUNCH or VMRESUME. The invalid guest state path...
CVE-2026-71556 vulnerabilities
Vulnerabilities for packages: argo-workflows, cerbos, argocd-image-updater, kyverno, bom, kargo, pulumi-language-java, pulumi, src-fingerprint, steampipe, nfpm, xeol, goreleaser, crossplane, guac, kots, tfsec, trivy, grafana-alloy, pulumi-language-dotnet, external-secrets-operator, gitea, k9s,...
CVE-2026-14231
creationtimestamp| type| source ---|---|--- 2026-08-08 06:18:14+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mskgbcinlw2o 2026-08-09 02:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msmjd25xw52y...
EUVD-2026-54740
The WP Directory Kit WordPress plugin before 1.5.5 does not perform authorization or nonce checks on one of its authenticated AJAX actions, allowing any authenticated user such as a Subscriber to disclose the WP Directory Kit WordPress plugin before 1.5.5 settings including sensitive API keys and...
CVE-2026-16590
CVE-2026-16590 affects the WP Directory Kit WordPress plugin, version prior to 1.5.5. The vulnerability stems from missing authorization or nonce checks on an authenticated AJAX action, enabling any authenticated user (e.g., a Subscriber) to retrieve stored contact messages and associated user da...
CVE-2026-16578
The Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection WordPress plugin before 1.4.0 does not perform any capability check on one of its REST API endpoints, allowing unauthenticated attackers to retrieve the full list of registered users including their usernames, ema...
CVE-2026-16559 YMC Filter < 3.12.9 - Author+ Stored XSS via SVG Icon Upload
The YMC Filter WordPress plugin before 3.12.9 does not sanitize SVG files uploaded through one of its icon upload features and permits their upload by low-privileged users, allowing users with the Author role and above to upload a file containing JavaScript that executes in the site's origin when...
EUVD-2026-54733
The YMC Filter WordPress plugin before 3.12.8 does not sanitize and escape a layout builder setting before outputting it on a public endpoint, and does not verify object ownership when the setting is saved, allowing users with the Contributor role and above to store JavaScript that executes in th...
CVE-2026-18988
The Easy Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'accordionTitleTag' block attribute in versions up to, and including, 3.1.8. This is due to insufficient input sanitization and output escaping in the accordionheaderrenderer function, which emits the...