PT-2026-66397

The Search Atlas SEO WordPress plugin before 2.6.12 does not perform a capability or nonce check in one of its AJAX handlers, allowing any authenticated user such as a Subscriber to invoke the site's Google Indexing API integration, submitting or removing the site's URLs from Google's index and...

CVE-2026-45985

In the Linux kernel, the following vulnerability has been resolved: ext4: don't set EXT4GETBLOCKSCONVERT when splitting before submitting I/O When allocating blocks during within-EOF DIO and writeback with dioreadnolock enabled, EXT4GETBLOCKSPREIO was set to split an existing large unwritten...

CVE-2021-47820 Ubee EVW327 - 'Enable Remote Access' Cross-Site Request Forgery (CSRF)

Ubee EVW327 contains a cross-site request forgery vulnerability that allows attackers to enable remote access without user interaction. Attackers can craft a malicious webpage that automatically submits a form to change router remote access settings to port 8080 without the user's consent...

CVE-2020-36900

All-Dynamics Digital Signage System 2.0.2 contains a cross-site request forgery vulnerability that allows attackers to create administrative users without proper request validation. Attackers can craft a malicious web page that automatically submits forms to create a new user with global...

EUVD-2025-5239

Malicious code in bioql PyPI...

PT-2025-8791

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.11.0-rc4 Description A vulnerability in the Linux kernel has been resolved, specifically in the rtl8150 driver. The issue arises from utilizing a wrong USB endpoint type during URB submitting stage, triggering ...

kernel: tls: race between async notify and socket close

A race condition vulnerability was found in the tls subsystem of the Linux kernel. The submitting thread that calls recvmsg/sendmsg may exit as soon as the async crypto handler calls complete; any code past that point risks touching already freed data. This could lead to a use-after-free issue an...

PT-2024-15559 · Git +2 · Anything-Llm +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows a user to send a chat containing an XSS opportunity, which will execute when the chat is sent and on subsequent page loads. The risk is...

CVE-2024-26585

In the Linux kernel, the following vulnerability has been resolved: tls: fix race between tx work scheduling and socket close Similarly to previous commit, the submitting thread recvmsg/sendmsg may exit as soon as the async crypto handler calls complete. Reorder scheduling the work before calling...

CVE-2023-49750

CVE-2023-49750 concerns the Couponis Demo WordPress vulnerability where an improper neutralization of input enables an SQL Injection. The issue affects the Couponis Demo/ Spoonthemes Couponis – Affiliate & Submitting Coupons Theme (WordPress) in versions before 2.2. Public sources (PATCHSTACK) ma...

CVE-2023-49750: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Spoonthemes Couponis - Affiliate & Submitting Coupons WordPress Theme.This issue affects Couponis - Affiliate & Submitting Coupons WordPress Theme: from n/a before 2.2...

CVE-2023-22946

In Apache Spark versions prior to 3.4.0, applications using spark-submit can specify a 'proxy-user' to run as, limiting privileges. The application can execute code with the privileges of the submitting user, however, by providing malicious configuration-related classes on the classpath. This...

te31.com XSS vulnerability

Vulnerable URL: http://te31.com/link.php?urlz=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 01.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20451 VIP website status:| Yes...

CVE-2012-2097: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests involving "submitting saved results to a node."...

DIY. ASP Trojan analysis-vulnerability warning-the black bar safety net

Today I give you analyze the domain3. 5 comes with one of the newmm. asp Trojan, everyone is familiar with. want to learn asp of some help Open the original file, at the beginning of some of the style definition, I will not describe, because and our Trojan function has nothing to do First look at...