824 matches found
CVE-2026-73902
creationtimestamp| type| source ---|---|--- 2026-08-19 17:17:01+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
Exploit for SQL Injection in Wordpress
PoC: WP2Shell — CVE-2026-63030 & CVE-2026-60137...
CVE-2026-18937 Broken Link Checker < 2.4.12 - Unauthenticated RCE via Query Variable Injection
The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it accepts from user input on sites using plain permalinks, allowing unauthenticated users to overwrite arbitrary PHP global variables, and to execute arbitrary code on the server when a classic non-block ...
VulnCheck KEV: CVE-2026-66613
Unauthenticated Remote Code Execution RCE in JetEngine = 3.8.14 versions...
CVE-2026-73343
Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...
CVE-2026-32444 WordPress Cwicly plugin <= 1.4.4 - Remote Code Execution (RCE) vulnerability
Contributor Remote Code Execution RCE in Cwicly = 1.4.4 versions...
Debian dsa-6448 : spip - security update
The remote Debian 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6448 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6448-1 [email protected] https://www.debian.org/security/...
PT-2026-77088
Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...
VulnCheck KEV: CVE-2026-73343
Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...
CVE-2026-74253
Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer 16.0.0 - Regular Labs Sourcerer before 16.0.0 processes source blocks found in Joomla’s final rendered HTML without reliably determining where that code originated...
CVE-2026-74253
Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer 14.0.0 - Regular Labs Sourcerer before 14.0.0 processes source blocks found in Joomla’s final rendered HTML without reliably determining where that code originated...
CVE-2025-27772 Uptrain vulnerable to remote code execution via `/new_run` endpoint
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /newrun endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be able ...
PT-2026-76726
Name of the Vulnerable Software and Affected Versions Regular Labs Sourcerer versions prior to 14.0.0 Description An unauthenticated remote code execution RCE issue exists because the software processes source blocks found in the final rendered HTML of Joomla without reliably determining the orig...
Exploit for CVE-2026-73678
CVE-2026-73678 — MindsDB Minds Platform Unauthenticated RCE C...
PT-2026-72088
Name of the Vulnerable Software and Affected Versions MindsDB Minds Platform versions prior to 26.1.1 Description An unauthenticated remote code execution flaw allows attackers to execute arbitrary OS commands. The issue occurs when crafted prompts are submitted to the unprotected 'POST...
CVE-2026-49827
WebErpMesv2 (Resource Management and Manufacturing Execution System) versions 1.19 and prior are affected. A vulnerability in the HR Expense scan_file upload allows self-registered users to upload arbitrary PHP files, enabling Remote Code Execution. The issue is exacerbated by open registration (...
Exploit for CVE-2026-14282
CVE-2026-14282 — GoDAM WordPress Plugin RCE Author: null...
CVE-2026-13476 IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input...
CVE-2026-13476 IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input...