13210 matches found
CVE-2026-26720-Twenty-RCE
Twenty CRM - Authenticated Remote Code Execution RCE Overview Product: Twenty CRM Vulnerability: Remote Code Execution RCE via Serverless Workflow Functions Severity: Critical Affected Component: Workflow Automation Code - Serverless Function Tested Version: v1.15.0 This repository documents a...
Twenty-Three-Scanner
🛰️ Twenty-Three Scanner A Powerful , Fast , and Elegant scanner for detecting vulnerable Telnetd services affected by CVE-2026-24061. Built with pure Python standard library - zero external dependencies required. -A32D2A?style=for-the-badge 🔗 Table of Contents ⚖️ License 🧩 Features ☣️ Vulnerability...
CVE-2026-107887
The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site's active site-wide, and allowing the same action to be...
CVE-2026-107887 Advanced Twenty Seventeen <= 1.3.1 - Subscriber+ Site Theme Switch via ats_create_child_theme
The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site's active site-wide, and allowing the same action to be...
CVE-2026-107887
The Advanced Twenty Seventeen WordPress plugin, affecting versions through 1.3.1 , contains a vulnerability due to the lack of capability or nonce checks on the action that creates and activates its bundled child theme. This allows any authenticated user, such as a subscriber , to switch the site...
EUVD-2026-109231
The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site's active site-wide, and allowing the same action to be...
WordPress Advanced Twenty Seventeen plugin <= 1.3.1 - Subscriber+ Site Theme Switch vulnerability
Subscriber+ Site Theme Switch vulnerability discovered by Seongwon LEE in WordPress Plugin Advanced Twenty Seventeen versions = 1.3.1...
ASUS DSL-AC88U - Authentication Bypass
A vulnerability in the ASUS DSL-AC88U router permits unauthorized individuals to bypass authentication.When adding "/js/..%2f%2f" or "/images/..%2f%2e" to the requested URL, it will be recognized as passing the authentication.This vulnerability is part of a broader authentication bypass issue...
ROOT-OS-ALPINE-321-CVE-2026-9545 CVE-2026-9545 in curl - Patched by Root
Root has patched CVE-2026-9545 in the curl package for Root:Alpine:3.21. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-38530 CVE-2025-38530 in linux - Patched by Root
Root has patched CVE-2025-38530 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-23146 CVE-2025-23146 in linux - Patched by Root
Root has patched CVE-2025-23146 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-21955 CVE-2025-21955 in linux - Patched by Root
Root has patched CVE-2025-21955 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-53106 CVE-2026-53106 in linux - Patched by Root
Root has patched CVE-2026-53106 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2022-1247 CVE-2022-1247 in linux - Patched by Root
Root has patched CVE-2022-1247 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-23069 CVE-2026-23069 in linux - Patched by Root
Root has patched CVE-2026-23069 in the linux package for Root:Debian:13. Multiple fixed versions available...
Astra Linux – Vulnerability in freerdp3
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.0, a client-side heap buffer overflow occurred in the FreeRDP client’s AVC420/AVC444 YUV-to-RGB conversion process. This issue arose due to a lack of validation of the horizontal bounds of the H.264 metablock...
Astra Linux – Vulnerability in freerdp3
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a heap out-of-bounds read occurred in the smartcard SetAttrib path when cbAttrLen did not match the actual NDR buffer length. This vulnerability has been fixed in version 3.20.1...
Astra Linux – Vulnerability in Linux
In the Linux kernel, the following vulnerability has been resolved: spi: bcm2835: Fixed out-of-bounds access when there are more than 4 slaves. The commit 571e31fa60b3 “spi: bcm2835: Fixed cache the CS register value for -preparemessage” limited the number of slaves to 3 at compile-time. This...