CVE-2026-66680

Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...

EUVD-2026-63306

Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...

CVE-2026-66680 WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability

Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...

CVE-2026-66680 WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability

Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...

WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability

SQL Injection vulnerability discovered by arrester in WordPress Plugin Locatoraid Store Locator versions = 3.9.72...

WordPress Super Store Finder plugin <= 7.8 - Unauthenticated SQL Injection via ssf_tracking vulnerability

Unauthenticated SQL Injection via ssftracking vulnerability discovered by Michael Bielenberg in WordPress Plugin Super Store Finder versions = 7.8...

EUVD-2026-62970

In Splunk On-Call VictorOps app versions below 1.0.43 on Splunkbase, a user who does not hold the "admin" or "power" Splunk roles could read a partially masked Application Programming Interface API key from the App Key Value Store KV Store. The exposure is possible because the Splunk On-Call...

PT-2026-80222

Executive Summary A NoSQL injection issue exists in the langgraph-checkpoint-mongodb and langgraph-store-mongodb libraries. MongoDBSaver.list and MongoDBStore.search methods accept a filter parameter that is incorporated into MongoDB queries without sufficient validation. Because MongoDB query...

CVE-2026-66680: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...

PT-2026-80768

Name of the Vulnerable Software and Affected Versions langgraph-checkpoint-mongodb versions prior to 0.3.0 langgraph-store-mongodb versions prior to 0.4.0 Description A NoSQL injection issue exists in the langgraph-checkpoint-mongodb and langgraph-store-mongodb libraries. The functions...

Comparison of Object References Instead of Object Contents

Overview Affected versions of this package are vulnerable to Comparison of Object References Instead of Object Contents in the process of comparing UserVerificationRequirement during WebAuthn authentication, when using distributed HTTP session stores. An attacker can bypass user verification by...

CVE-2026-76405

In Splunk On-Call VictorOps app versions below 1.0.43 on Splunkbase, a user who does not hold the "admin" or "power" Splunk roles could read a partially masked Application Programming Interface API key from the App Key Value Store KV Store. The exposure is possible because the Splunk On-Call...

CVE-2026-76405 Information Disclosure through Cleartext Storage in the App Key Value Store in the Splunk On-Call (VictorOps) app

In Splunk On-Call VictorOps app versions below 1.0.43 on Splunkbase, a user who does not hold the "admin" or "power" Splunk roles could read a partially masked Application Programming Interface API key from the App Key Value Store KV Store. The exposure is possible because the Splunk On-Call...

CVE-2026-76405

Splunk On-Call (VictorOps) app versions below 1.0.43 on Splunkbase contain an information disclosure flaw in the App Key Value Store (KV Store) . The root cause is that the app does not fully mask the API key before storing it in a KV Store collection accessible to users without the admin or powe...

CVE-2026-76253

Any user with the schedule_search capability can execute arbitrary SPL commands at system level, reading all stored credentials. Splunk advisory SVD-2026-0801 documents fixes in versions 10.4.2, 10.2.6, 10.0.9, and 9.4.14. Exploitation details are not provided in the documents.

CVE-2026-67581

Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated remote client to obtain paid resources by resubmitting one settled on-chain transfer. MPP.Methods.EVM.verify/2 accepts a transaction-hash credential and matches a transfer purely on token, to and amount ERC-20 or to...

EUVD-2026-62679

Snipe-IT is an IT asset/license management system. Prior to 8.6.0, an authenticated user with users.create permission can submit the admin permission while creating a user because store in app/Http/Controllers/Users/UsersController.php strips superuser permission but does not strip admin...

CVE-2026-50152

A flaw was found in the MON subscription handler of Ceph, a distributed storage system. The handler does not properly authorize access to the config-key store when processing MMonSubscribe messages. Any CephX user holding mon allow r capabilities can read the entire config-key store, which contai...

CVE-2026-67581

ZenHive mpp (Elixir HTTP 402 payment library) versions 0.3.0 through before 0.6.3 contain an authentication bypass by capture-replay in the EVM payment method. The function MPP.Methods.EVM.verify/2 matches a transfer solely on token, recipient, and amount without binding the proof to the specific...

CVE-2026-73829 Non-atomic hash-credential dedup in mpp Tempo allows replay of a confirmed payment under a concurrent race

Time-of-check Time-of-use TOCTOU Race Condition in ZenHive mpp allows an unauthenticated remote client to redeem one confirmed on-chain payment for multiple paid-resource accesses. The type="hash" credential path in MPP.Methods.Tempo.verify/2 guards against replay with a non-atomic check-then-mar...