WordPress Loco Translate plugin <= 2.8.2 - Authenticated (Translator+) Path Traversal to Limited File Read vulnerability

Authenticated Translator+ Path Traversal to Limited File Read vulnerability discovered by shark3y in WordPress Plugin Loco Translate versions = 2.8.2...

CVE-2026-34032 Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)

Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

Security Bulletin:Axios HTTP/2 Session Cleanup Logic State Corruption Bug Fixed in 1.13.2

Summary Axios is a promise based HTTP client for the browser and Node.js. Starting in version 1.13.0 and prior to 1.13.2, Axios HTTP/2 session cleanup logic contains a state corruption bug that allows a malicious server to crash the client process through concurrent session closures. The...

EUVD-2026-26944

An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version 2.4.67, which fixes this issue...

CVE-2026-3120 RCE in Profelis Informatics' SambaBox

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Injection. This issue affects SambaBox: from 5.1 before 5.3...

CVE-2026-3120

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Injection. This issue affects SambaBox: from 5.1 before 5.3...

CVE-2026-33846

creationtimestamp| type| source ---|---|--- 2026-05-04 10:31:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzhraqhl72r 2026-05-04 10:57:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkzjarbjmv2w 2026-05-19 20:10:47+00:00| seen|...

CVE-2026-7750

creationtimestamp| type| source ---|---|--- 2026-05-04 10:29:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzhob2nub2e 2026-05-04 10:56:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkzj6ydbzi26...

CLSA-2026-1777306004 wireshark: Fix of CVE-2022-0586

CVE-2022-0586: fix infinite loop in RTMPT dissector rtmptgetamflength...

CVE-2026-42511

creationtimestamp| type| source ---|---|--- 2026-05-04 06:44:59+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/freebsd-security-advisory-av26-415 2026-05-04 08:11:30+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3mkz7x57ibs2o 2026-05-04 08:43:33+00:00| seen|...

CVE-2026-7733

creationtimestamp| type| source ---|---|--- 2026-05-04 06:41:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkz2vysagy2n 2026-05-04 08:32:21+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkzb4ho3ah2f...

CVE-2026-7740 justdan96 tsMuxer vvc.cpp setFPS denial of service

A security vulnerability has been detected in justdan96 tsMuxer up to 2.7.0. This issue affects the function VvcVpsUnit::setFPS of the file tsMuxer/vvc.cpp. Such manipulation of the argument trackid leads to denial of service. An attack has to be approached locally. The exploit has been disclosed...

CVE-2026-43864

mutt before 2.3.2 has a showsigsummary NULL pointer dereference...

CVE-2026-43864

mutt before 2.3.2 has a showsigsummary NULL pointer dereference...

CVE-2026-43863

mutt before 2.3.2 has an infinite loop in dataobjecttostream in crypt-gpgme.c...

CVE-2026-43859

Mutt vulnerability CVE-2026-43859 affects mutt before 2.3.2, where IMAP auth_cram MD5 digest computation may use strfcpy instead of memcpy. Root cause is choosing the wrong string copy function in the digest pathway. Impact (per CVSS 3.1) is Confidentiality: None, Integrity: Low, Availability: No...

CVE-2026-42365

creationtimestamp| type| source ---|---|--- 2026-05-04 01:19:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkyiwq46vt2w 2026-05-04 01:33:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkyjq3vlbn2w 2026-05-04 03:00:30+00:00| seen|...

CVE-2026-42368

CVE-2026-42368 affects GeoVision LPC2011/LPC2211 Web Interface (version 1.10). A privilege escalation exists where a specially crafted HTTP request can trigger a privileged operation when an attacker visits a webpage. The CVSSv3.1 base score is 9.9 (CRITICAL) with NETWORK attack vector, LOW compl...

CVE-2025-70072

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp, FBXConverter::ConvertMeshMultiMaterial components...

Apache HTTP Server 资源管理错误漏洞

Apache HTTP Server is an open-source web server developed by the Apache Foundation in the United States. This server is known for its speed, reliability, and ability to be expanded through simple APIs. Version 2.4.66 of Apache HTTP Server contains a vulnerability related to resource management...