anteater

Anteater - CI/CD Gate Check Framework Description Anteater is an open framework to prevent the unwanted merging of nominated strings, filenames, binaries, depreciated functions, staging enviroment code / credentials etc. Anything that can be specified with regular expression syntax, can be sniffe...

TotalCMS-Arbitrary_File-Upload--XSS_Steal_Cookies---TotalDepot

TotalCMS Arbitrary File Upload - XSS and steal cookies Author: Sergio Description: TotalCMS is affected by Arbitrary File Upload - XSS vulnerability which allows Cross-Site Scriting XSS and also stealing session cookies Attack Vectors: A vulnerability in "Total Depot" file upload sanitation allow...

CVE-2025-41373

CVE-2025-41373 – SQL Injection in Gandia Integra Total Author: Byte Reaper CVE: CVE-2025-41373 Vulnerability: Authenticated SQL Injection Affected Path: /encuestas/integrawebv4/integra/html/view/hislistadoacciones.php?idestudio= Description: This endpoint concatenates the idestudio parameter...

CVE-2018-18572

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:12+00:00| seen| https://t.me/hackingAttack/29057 2026-09-01 20:02:15+00:00| seen| https://t.me/hackingAttack/27123 2026-09-01 20:02:16+00:00| seen| https://t.me/hackingAttack/27119 2026-09-01 20:02:17+00:00| seen|...

CVE-2026-16947

The Total processing card payments for WooCommerce WordPress plugin through 7.3 does not validate a user-supplied path before using it to build a server-side verification request, and does not verify the authenticity of the response, allowing unauthenticated attackers to redirect that request to ...

CVE-2026-16947 Total Processing Card Payments for WooCommerce <= 7.3 - Unauthenticated SSRF leading to Payment Bypass and Gateway Credential Disclosure

The Total processing card payments for WooCommerce WordPress plugin through 7.3 does not validate a user-supplied path before using it to build a server-side verification request, and does not verify the authenticity of the response, allowing unauthenticated attackers to redirect that request to ...

CVE-2026-16947

CVE-2026-16947 affects the Total processing card payments for WooCommerce WordPress plugin (through version 7.3 ). The plugin fails to validate a user-supplied path before using it to build a server-side verification request, and does not verify the authenticity of the response. This allows unaut...

EUVD-2026-68044

The Total processing card payments for WooCommerce WordPress plugin through 7.3 does not validate a user-supplied path before using it to build a server-side verification request, and does not verify the authenticity of the response, allowing unauthenticated attackers to redirect that request to ...

CVE-2026-78570

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2026-78570

...

EUVD-2026-65358

The Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.5. This makes it possible for unauthenticated attackers to elevate their privileges to that of an adminsitrator...

CVE-2026-78570

...

CVE-2026-78570

CVE-2026-78570 was rejected as issued in error, but connected documents (EUVD-2026-65358, PT-2026-81249) describe the underlying issue: the Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 2.0.5 , allowing unauthenticated attackers to ...

CVE-2026-78568

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...

EUVD-2026-65324

The Total Donations plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.0.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to...

CVE-2026-78568

...

CVE-2026-78568

...

CVE-2026-78568

CVE-2026-78568 covers a SQL Injection vulnerability in the Total Donations plugin for WordPress , affecting all versions up to and including 2.0.5 . The root cause is insufficient escaping on a user-supplied parameter combined with a lack of proper preparation of the existing SQL query, allowing ...

Astra Linux – Vulnerability in Qemu

A issue was discovered in QEMU versions 7.1.0 through 8.2.1. In hw/pci/pciesriov.c, the registervfs function does not set NumVFs to PCISRIOVTOTALVF, resulting in improper interaction with hw/nvme/ctrl.c...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: afunix: Fixed a data race around unixtotinflight. unixtotinflight is updated under spinlockunixgclock, but unixreleasesock reads it without locking. We will use READONCE for unixtotinflight...