bmc-tools

BMC-Tools RDP Bitmap Cache parser. Input bmc-tools processes bcache.bmc and cache????.bin files found inside Windows user profiles. Usage ./bmc-tools.py -h -s SRC -d DEST -c COUNT -v -o -b -w WIDTH With the following arguments meaning: -h, --help show this help message and exit -s SRC, --src SRC...

CVE-2026-79613

vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could access comments associated with non-public content through public user profiles. Users are recommended to upgrade to version 2.0.3, which fixes the issue...

EUVD-2026-104160

vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could access comments associated with non-public content through public user profiles. Users are recommended to upgrade to version 2.0.3, which fixes the issue...

CVE-2026-17487

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process...

CVE-2026-17487

IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to an information disclosure flaw (CVE-2026-17487 ) within the Dedicated Service Tools (DST) / System Service Tools (SST) . A remote attacker can enumerate user profiles because the system returns distinct error codes during the sign-on process...

EUVD-2026-97631

Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations. Attackers can submit crafted assign requests to membersassignment.php with a foreign role UUID to gain privileged...

CVE-2026-109329 Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 Cross-Organization Access Control Bypass via members_assignment.php

Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations. Attackers can submit crafted assign requests to membersassignment.php with a foreign role UUID to gain privileged...

CVE-2026-94663

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2...

CVE-2026-94663 WordPress ProfileGrid plugin <= 6.0.0.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2...

EUVD-2026-95619

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2...

PT-2026-108832

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2...

CVE-2026-94663: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2...

CVE-2026-105058

Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...

EUVD-2026-93084

Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...

CVE-2026-105058 WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...

CVE-2026-105058 WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...

CVE-2026-105058

The WordPress WP User Profiles plugin versions

CVE-2026-105058: Incorrect Privilege Assignment

Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...

PT-2026-106384

Subscriber Privilege Escalation in WP User Profiles = 2.7.3 versions...

WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Nguyen Viet Tin in WordPress Plugin WP User Profiles versions = 2.7.3...