ROOT-OS-DEBIAN-13-CVE-2025-71191 CVE-2025-71191 in linux - Patched by Root

Root has patched CVE-2025-71191 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-38105 CVE-2025-38105 in linux - Patched by Root

Root has patched CVE-2025-38105 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-31419 CVE-2026-31419 in linux - Patched by Root

Root has patched CVE-2026-31419 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-40197 CVE-2025-40197 in linux - Patched by Root

Root has patched CVE-2025-40197 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-68349 CVE-2025-68349 in linux - Patched by Root

Root has patched CVE-2025-68349 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-45839 CVE-2026-45839 in linux - Patched by Root

Root has patched CVE-2026-45839 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-23392 CVE-2026-23392 in linux - Patched by Root

Root has patched CVE-2026-23392 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-39713 CVE-2025-39713 in linux - Patched by Root

Root has patched CVE-2025-39713 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-23078 CVE-2026-23078 in linux - Patched by Root

Root has patched CVE-2026-23078 in the linux package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-88931 Social Web Suite <= 4.1.12 - Unauthenticated Arbitrary Plugin Settings Update

The Social Web Suite WordPress plugin through 4.1.12 does not restrict which of its settings may be written through an unauthenticated endpoint, allowing attackers to overwrite arbitrary Social Web Suite WordPress plugin through 4.1.12 options, including the shared secret that guards its own...

WordPress Social Web Suite plugin <= 4.1.12 - Unauthenticated Arbitrary Plugin Settings Update vulnerability

Unauthenticated Arbitrary Plugin Settings Update vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Social Web Suite versions = 4.1.12...

CVE-2026-88931

The Social Web Suite WordPress plugin (versions through 4.1.12 ) is vulnerable to an unauthenticated arbitrary plugin settings update . The root cause is a failure to restrict which settings can be modified via an unauthenticated endpoint. This allows an attacker to overwrite arbitrary plugin opt...

agency-toolkit-1023-missing-authorization-to-unauthenticated-arbitrary-options-update

NoCVE Agency Toolkit = 1.0.23 - Missing Authorization to Unauthenticated Arbitrary Options Update Description The Agency Toolkit plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the...

fuel-cms-cve-2018-16763-python3-port

FUEL CMS 1.4.1 Python 3 Compatibility Port Overview This repository contains a Python 3 compatibility port of the original proof-of-concept for CVE-2018-16763 affecting FUEL CMS 1.4.1. The original proof-of-concept was written by 0xd0ff9. This repository does not claim authorship of the original...

freemius-exploit

freemius-exploit Freemius Library 2.2.4 - Subscriber+ Arbitrary Option Update Description The library, used in numerous plugins, does not have proper authorization when updating blog options, allowing any authenticated users, such as a subscriber, to update arbitrary options. Usage usage:...

dazzleUP

dazzleUP A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems. dazzleUP detects the following vulnerabilities. Exploit Checks The first feature of dazzleUP is that it uses Windows Update Agent API instead of...

ZyXel USG - Hardcoded Credentials

A hardcoded credential vulnerability was identified in the 'zyfwp' user account in some Zyxel firewalls and AP controllers. The account was designed to deliver automatic firmware updates to connected access points through FTP. id: CVE-2020-29583 info: name: ZyXel USG - Hardcoded Credentials autho...

CLSA-2026-1791511288 TuxCare security update for nodemailer (4 CVEs)

TuxCare rebuilt nodemailer to address 4 CVEs. Fixed in 9.0.1-tuxcare.1...

Apache-RocketMQ-CVE-2023-33246-

CVE-2023-33246: Apache RocketMQ Remote Code Execution OVERVIEW Apache RocketMQ is one of the most popular and widely used distributed messaging and streaming platforms. A command execution vulnerability has been recently reported in Apache RocketMQ affecting version 5.1.0 and below. A remote...

PT-2026-108870

The GDPR Data Request Form WordPress plugin through 1.7.1 does not have CSRF protection when updating one of its settings, allowing attackers to change that setting via a forged request granted they can trick a site administrator into performing an action such as clicking on a link...