CVE-2026-39798

Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...

EUVD-2026-93059

Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...

CVE-2026-42637

The PayPlug for WooCommerce (Official) WordPress plugin versions

CVE-2026-42637 WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Settings Change vulnerability

Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...

CVE-2026-42637 WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Settings Change vulnerability

Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...

CVE-2026-39798 WordPress TrueBooker plugin <= 1.2.9 - Settings Change vulnerability

Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...

CVE-2026-39798

The WordPress TrueBooker plugin versions

EUVD-2026-93042

Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...

CVE-2026-39798 WordPress TrueBooker plugin <= 1.2.9 - Settings Change vulnerability

Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...

io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

A flaw was found in Netty, a network application framework. A remote attacker, by sending a specially crafted SPDY/3.1 SETTINGS frame, could cause the SPDY SETTINGS decoder to create a large number of map entries. This excessive processing and memory allocation can lead to a denial of service DoS...

CLEANSTART-2026-KT14793 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0

Security vulnerability affects the temporal-server package. When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

Command injection vulnerability exists in the REST API management interface of Brocade Fabric OS (CVE-2026-94581)

: An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions. An attacker with...

PT-2026-106481

Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...

CVE-2026-42637: Missing Authorization

Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...

PT-2026-106464

Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...

CVE-2026-39798: Missing Authorization

Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...

RHEL 8 : firefox (RHSA-2026:76746)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:76746 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

CVE-2026-28648

In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28648

In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28648

In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...