1487860 matches found
CVE-2026-108486
Missing Authorization vulnerability in WPMU DEV Forminator forminator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Forminator: from n/a through 1.58.0...
CVE-2026-61994 WordPress WP-Members plugin <= 3.5.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in RocketGeek WP-Members wp-members allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Members: from n/a through 3.5.7...
CVE-2026-61994
The RocketGeek WP-Members plugin (versions up to and including 3.5.7 ) is susceptible to a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , potentially enabling unauthorized access to restricted areas or function...
SysTrace
SysTrace 2.0 ptrace-based Linux syscall monitor and sandbox for analyzing ELF binaries. SysTrace runs a target inside an isolated Linux namespace environment, traces its system calls and child processes, applies rule-based detection and weighted risk scoring, then uses a Random Forest classifier ...
JCEzploit-CVE-2026-48907
JCEzploit Joomla JCE Security Testing Framework A professional command-line utility for authorized penetration testing, controlled vulnerability research, and defensive validation. Authorized use only. Run this project exclusively against systems you own or are explicitly permitted to test. Use a...
cve-2022-27666-exploits
cve-2022-27666-exploits There are 2 exploitation methods that exploit CVE-2022-27666. For more info on how to use these code bases please check my blog here...
CVE-2026-109279
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multiple threads trigger a race condition that causes a heap buffer over-write. An attacker able to induce concurrent security...
DEBIAN-CVE-2026-109274
ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when executing a magick script. Attackers can swap a checked path with a symlink during script execution to read files that the security policy is...
CVE-2026-109274
ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when executing a magick script. Attackers can swap a checked path with a symlink during script execution to read files that the security policy is...
CVE-2010-3971-hotpatch
CVE-2010-3971-hotpatch Do you own security hotfix with Deviare. Original article: using Deviare to create a temporary zero day patch...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: busybox: busybox-1.37.0-9.4.hum1 aarch64, s390x, x8664 busybox-petitboot-1.37.0-9.4.hum1 aarch64, s390x, x8664 busybox-shared-1.37.0-9.4.hum1 aarch64, s390x, x8664 busybox-1.37.0-9.4.hum1.src src...
heroku-CVE-2013-0156
heroku-CVE-2013-0156 This vulnerability has been supplanted by CVE-2013-0333. See https://groups.google.com/forum/?fromgroups=!topic/rubyonrails-security/1h2DR63ViGo for more details. A replacement for this script, covering CVE-2013-0333, can be found at...
CVE-2026-108486 WordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPMU DEV Forminator forminator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Forminator: from n/a through 1.58.0...
CVE-2026-108486
The Forminator plugin for WordPress (versions
CVE-2026-107418
The Booktics WordPress plugin (versions ≤ 1.0.28 ) is vulnerable to a Broken Access Control issue. This vulnerability stems from Missing Authorization , which allows attackers to exploit Incorrectly Configured Access Control Security Levels . The impact involves unauthorized access to functionali...
CVE-2026-107418 WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28...
CVE-2026-108475
The VideoWhisper.com Broadcast Live Video WordPress plugin (versions
CVE-2026-108476 WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability
Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.13...
EUVD-2026-97576
Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.13...