EUVD-2026-71221

Slink before 1.12.3 fails to properly authorize access to image comment endpoints, allowing unauthenticated attackers to read comment threads via GET /api/image/imageId/comments and server-sent-events subscriptions. Attackers who obtain image IDs out of band can retrieve full comment threads on...

CVE-2026-85605

Slink versions prior to 1.12.3 fail to properly authorize access to image comment endpoints, allowing unauthenticated attackers to read full comment threads via GET /api/image/{imageId}/comments and subscribe to live updates via server-sent-events — provided they obtain an image ID out of band. T...

CVE-2019-9194-elFinder-Command-Injection-PoC

CVE-2019-9194 — elFinder Command Injection PoC Command injection vulnerability in elFinder = 2.1.47 via the PHP connector component. Allows unauthenticated remote code execution as the web server user. How it works Uploads a valid JPEG with a malicious filename containing a shell command. Trigger...

CVE-2026-7458

🧨 CVE-2026-7458 – PickPlugins User Verification OTP 绕过 通过 OTP 验证 REST API 中的松散比较实现未认证身份验证绕过 PickPlugins User Verification ≤ 2.0.46 📖 描述 PickPlugins 为 WordPress 开发的 User Verification 插件（版本 ≤ 2.0.46 ）在其 OTP 登录机制中存在一个严重漏洞。由于验证逻辑中采用了松散比较（==），未认证的攻击者可以通过发送布尔值 true（而非数字 OTP 值）来绕过 OTP 认证。攻击者无需知道 OTP...

CVE-2026-71979

A flaw was found in INDI indiserver. An unauthenticated remote attacker can exploit a stack buffer overflow vulnerability by sending specially crafted XML with oversized, mismatched tags. This can lead to an unbounded write operation, causing the daemon to crash and disrupting all active client a...

CVE-2026-56292-AcyMailing-SQLi

CVE-2026-56292 — AcyMailing for Joomla 未认证 SQL 注入 作者： nullwhisper 仅限授权的安全研究 / 漏洞验证。 AcyMailing for Joomla 暴露了公共前端任务 frontentityselect::loadEntityFront。在旧版本中，columns 参数未经清理直接传入 SQL 查询。已修补版本使用 acymsecureDBColumn 并返回类似 ... not secured 的错误。 CVE： CVE-2026-56292 产品： AcyMailing for Joomla 端点：...

CVE-2026-25938-FUXA-Unauthenticated-RCE

CVE-2026-25938 - FUXA 未认证远程代码执行 1. 什么是 FUXA？ FUXA 是一个免费、开源的基于 Web 的 SCADA（监控与数据采集 ）和 HMI（人机界面 ）平台，用于工业自动化 、IoT 和实时过程可视化 。它使用户能够直接在 Web 浏览器中构建自定义仪表板并监控机器，无需昂贵的专有软件或笨重的桌面编辑器。 2. 漏洞说明 CVE-2026-25938 影响 FUXA 的 1.2.8 至 1.2.10 版本，前提是 Node-RED 集成功能 已启用（默认启用）。该漏洞源于对暴露 Node-RED 功能的功能身份验证执行不足 ，允许未认证的远程攻击者...

CVE-2021-3129

CVE-2021-3129 — Laravel Ignition 远程代码执行 CVSS 9.8（严重） | 不安全的文件操作 → 日志投毒 → Phar 反序列化 → RCE 概述 Laravel Ignition -c "whoami" 参考 NVD — CVE-2021-3129 Ignition 补丁 2.5.2...

CVE-2026-85517 code-projects Vehicle Management System SQL Database Backup File vehicle_management.sql information disclosure

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehiclemanagement.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...

CVE-2025-47812-Wing-FTP-Server-7.4.3-Unauthenticated-RCE-PoC

CVE-2025-47812 — Wing FTP Server Unauthenticated remote code execution vulnerability in Wing FTP Server = 7.4.3. A NULL byte injected into the username parameter during login causes Lua code to be written into the session file. When /dir.html is accessed with the resulting session cookie, the...

Mirth-Connect-CVE-2023-43208

CVE-2023-43208: Unauthenticated Remote Code Execution RCE in NextGen Mirth Connect This exploit leverages a critical deserialization vulnerability within Mirth Connect's XStream engine. It stems from an incomplete patch for CVE-2023-37679, enabling unauthenticated arbitrary code execution across...

CVE-2026-66754-Remote-Denial-of-Service-via-Reachable-Assertion-in-URL-Prefix-Handling-rouille-

Security Advisory: Remote Denial of Service via Reachable Assertion in URL Prefix Handling rouille Assigned CVE ID: CVE-2026-66754 Summary Request::removeprefix tests the percent-decoded URL but asserts on the raw one. A request whose decoded path starts with the prefix while its raw path does no...

CVE-2026-51788

Security Advisory: CVE-2026-51788 Denial of Service DoS Vulnerability in cleverangeauth v0.1.10 CVE ID: CVE-2026-51788 Status: Assigned Date Discovered: 2026-04-27 Researcher: Aykhan Isgandarli Severity: High CVSS v3.1: 7.5 CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Produc...

WordPress Restaurant Menu and Food Ordering plugin < 2.4.12 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Restaurant Menu by MotoPress versions 2.4.12...

WordPress ePayco Payment Gateway for WooCommerce plugin < 8.4.7 - Unauthenticated Payment Confirmation Bypass vulnerability

Unauthenticated Payment Confirmation Bypass vulnerability discovered by Pedro Pinho in WordPress Plugin Epayco versions 8.4.7...

CVE-2026-5524-PoC

CVE-2026-5524 — Divi Form Builder Unauthenticated RCE Mass exploit toolkit for CVE-2026-5524 , an unauthenticated arbitrary file upload vulnerability in the WordPress plugin Divi Form Builder = 5.1.8 leading to remote code execution. Field| Value ---|--- CVE| 2026-5524 CVSS| 9.8 Critical Vector|...

CVE-2025-59382-QNAP-Password-Reset-Account-Takeover

CVE-2025-59382: QNAP Password Reset to Account Takeover Unauthenticated attacker-controlled password reset URL in /cgi-bin/resetpassword.cgi. Tested against QuTScloud c5.2.4.3041 build 20250211 in a lab. QNAP later published this as CVE-2025-59382 in advisory QSA-26-10. Short version An...

CVE-2026-85609

Openpanel before 2.3.0 contains an unauthenticated full-read server-side request forgery SSRF vulnerability in the GET /tools/site-checker endpoint apps/api/src/controllers/tools.controller.ts. The endpoint passes a user-supplied url query parameter to fetchWithRedirects and performs server-side...

CVE-2026-85613

OpenPanel before 2.3.0 contains a cross-site scripting vulnerability in the unauthenticated favicon proxy endpoint GET /misc/favicon that allows remote attackers to execute scripts by supplying an SVG file URL. Attackers can host malicious SVG files with embedded scripts that execute in the...

CVE-2026-85612

OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the /misc/favicon and /misc/og endpoints that accept an attacker-supplied url parameter with insufficient validation. Attackers can force the API to fetch arbitrary internal hosts and cloud metadata...