283375 matches found
CVE-2026-96751
A SQL injection vulnerability exists in the pmTicket Project-Management-Software (up to commit 078fa56a782490c5059a0814f84df27984f4d7e2). The flaw is located in the setSync function within the /ajax/add_project.php file, where manipulation of the conn_settings argument allows for remote attack ex...
WordPress Team plugin <= 6.0.0 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by saddanr in WordPress Plugin Team versions = 6.0.0...
Security Bulletin: Multiple Vulnerabilities affect VM Manager Tool and Scans Relay as part of IBM License Metric Tool Software as a Service
Summary Multiple vulnerabilities have been addressed in components of VM Manager Tool and Scans Relay as part of IBM License Metric Tool Software as a Service Vulnerability Details CVEID:CVE-2026-61308 DESCRIPTION: Difficult to exploit vulnerability allows unauthenticated attacker with network...
WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.6.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by ParkHyunWoo in WordPress Plugin Online Booking & Scheduling Calendar for WordPress by vcita versions = 4.6.0...
WordPress AppMySite plugin <= 3.15.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by dodoh4t in WordPress Plugin AppMySite versions = 3.15.4...
WordPress Email Log plugin <= 2.63 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Email Log versions = 2.63...
WordPress zportals plugin < 6.4.2 - Subscriber+ User Email Disclosure vulnerability
Subscriber+ User Email Disclosure vulnerability discovered by Erwan LR WPScan in WordPress Plugin Zportals versions 6.4.2...
Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager - Remote Code Execution
Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An...
The vulnerability of the `unpack_32bit()` function in software for storing OpenEXR images with a wide dynamic range of brightness levels allows a hacker to cause a service failure.
The vulnerability of the unpack32bit function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the .NET software platform and the Visual Studio Code editor, related to deficiencies in HTTP request processing, allows attackers to disclose sensitive information.
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
Malicious code in @memtensor/memos-cloud-openclaw-plugin (npm)
On September 23, 2026, an attacker published malicious versions of two MemTensor packages. The affected packages are the OpenClaw plugin @memtensor/memos-cloud-openclaw-plugin on npm and the MemOS Python library MemoryOS on PyPI. Both versions contain the same Go implant, sckit. The binary runs i...
PT-2026-97624
Name of the Vulnerable Software and Affected Versions pmTicket Project-Management-Software versions up to 078fa56a782490c5059a0814f84df27984f4d7e2 Description A remote SQL injection is possible due to improper handling of the conn settings argument within the setSync function of the '/ajax/add...
The vulnerability of software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from the possibility of the operation exceeding the buffer boundaries in memory. This allows an attacker to cause a service failure.
The vulnerability of software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Malicious code in ubiquiti-agents-link-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8827e987697ea6ef619055c53ae1654800a838c18419ffc8a09e872c6f16adc4 The package's bin entry index.js runs execSync'id' and collects os.userInfo.username and os.hostname, then HTTPS-POSTs the JSON payload to the...
Malicious code in ndmcjcxiebysfdb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6d78591ddbd2abc8045f5bdbe7694d000b3508dc8df6393ffd46d093351ef4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
BIT-PYTHON-2024-6232 Regular-expression DoS when parsing TarFile headers
There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...
ROOT-APP-PYPI-GHSA-956X-8GVW-WG5V GHSA-956x-8gvw-wg5v in GitPython - Patched by Root
Root has patched GHSA-956x-8gvw-wg5v in the GitPython package for Root:PyPI. Multiple fixed versions available...
CVE-2026-25265 Creation of Temporary File with Insecure Permissions in Qualcomm Software Center
Privilege escalation due to weak configuration while temporary file handling...
CVE-2026-25265 Creation of Temporary File with Insecure Permissions in Qualcomm Software Center
Privilege escalation due to weak configuration while temporary file handling...
CVE-2026-25265
CVE-2026-25265 affects Qualcomm Software Center , where a privilege escalation is possible due to the creation of a temporary file with insecure permissions . The root cause is a weak configuration during temporary file handling, allowing a local attacker with low privileges to gain full control ...