WordPress User Private Files plugin < 2.1.9 - Subscriber+ User Email Address Disclosure vulnerability

Subscriber+ User Email Address Disclosure vulnerability discovered by Usama Arshad in WordPress Plugin User Private Files versions 2.1.9...

CVE-2026-97331 User Private Files < 2.1.9 - Subscriber+ User Email Address Disclosure via dpk_upvf_rmv_access

The User Private Files WordPress plugin before 2.1.9 does not validate that a supplied user belongs to the document being operated on before returning that user's email address, allowing any authenticated user, such as a Subscriber, to obtain the email address of any registered account, including...

CVE-2026-97331

The User Private Files WordPress plugin, in versions before 2.1.9 , is vulnerable to a subscriber-level user email address disclosure. The flaw exists because the plugin fails to validate that a supplied user actually belongs to the document being operated on before returning that user's email ad...

CVE-2026-103870 Pulp-rpm: distribution tree publish creates directories from .treeinfo ids

A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's repository metadata and...

CVE-2026-102173 Kirki – Freeform Page Builder, Website Builder & Customizer <= 6.3.1 - Unauthenticated Stored Cross-Site Scripting via Registration Metadata

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via registration metadata in all versions up to, and including, 6.3.1 This is due to insufficient escaping in ExceptionalElements::imageelement, which concatenates a...

CVE-2024-44762-webmin-userenum

इस रिपॉजिटरी में README नहीं है।...

kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface VTI module. When a VTI tunnel device is moved to a different network environment, an unprivileged user in a separate user space can manipulate tunnel parameters. This manipulation could allow the user to intercept or redirect...

CVE-2026-32996

CVE-2026-32996 A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. Check blog post post for technical details. https://github.com/user-attachments/assets/8a570332-1cf6-4905-9107-8fcb973c9ce7 PoC CVE-2026-32996.exe "whoami C:\pwned.txt" + Found...

CVE-2025-65300

CVE-2025-65300 विवरण CVE-2025-65300: Coohom SaaS प्लेटफ़ॉर्म में संग्रहीत क्रॉस-साइट स्क्रिप्टिंग XSS भेद्यता प्रकटीकरण तिथि: 2025-10-28 अंतिम अद्यतन: 2025-10-28 रिपोर्टकर्ता: Phisit Pupiw विक्रेता: Coohom CWE: CWE-79 – क्रॉस-साइट स्क्रिप्टिंग सारांश Coohom SaaS प्लेटफ़ॉर्म के अंतर्गत खाता सेटिंग...

CVE-2026-83540 wolfSSHd on Windows race condition leading to logon token reused across connections

When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated connection is not released before a token is acquired for a subsequent connection, resulting in user login poisoning between connections. A less privileged...

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager - Remote Code Execution

Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An...

Cisco SSM On-Prem <= 8-202206 - Password Reset Account Takeover

A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process...

Cacti 1.2.24 - SQL Injection

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graphview.php. Since guest users can access graphview.php without authentication by default, if guest users are being utilized in an enabled state, there...

DELMIA Apriso - Command Injection

An Improper Control of Generation of Code code injection / file upload → RCE vulnerability affecting DELMIA Apriso Release 2020 → Release 2025. When an authenticated user can upload files and the upload handler fails to canonicalize filenames or enforce storage restrictions, an attacker may place...

Really Simple Security < 9.1.2 - Authentication Bypass

The Really Simple Security Free, Pro, and Pro Multisite plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user check error handling in the two-factor REST API actions with the 'checkloginandgetuser' function. This makes it possible...

CVE-2025-68613

CVE-2025-68613 n8n هي منصة أتمتة سير عمل مفتوحة المصدر. تحتوي الإصدارات ابتداءً من 0.211.0 وما قبل 1.120.4 و1.121.1 و1.122.0 على ثغرة حرجة في تنفيذ التعليمات البرمجية عن بُعد RCE في نظام تقييم تعبيرات سير العمل الخاص بها. في ظل ظروف معينة، قد يتم تقييم التعبيرات المقدمة من المستخدمين المصادق عليه...

CVE-2024-55374

CVE-2024-55374 Redcap 14.3.13 معرضة لثغرة تعداد المستخدمين لأنها تُرجع رسائل خطأ مختلفة بناءً على ما إذا كان المستخدم موجودًا أم لا. يسمح ذلك للمهاجم بإرسال طلبات مصادقة HTTP متعددة لتنفيذ هجمات القوة العمياء. على الرغم من وجود آلية حماية للتخفيف من هذا المتجه، إلا أن الآلية نفسها تسمح للمهاجم...

CVE-2026-88252

A flaw was found in sssd. A local user can cause a Denial of Service...

Keycloak 26.7.3 <= 26.8.0 User Session Note Mapper Access Token Exposure (CVE-2026-105302)

The version of Keycloak installed on the remote host is 26.7.3 through 26.8.0. It is, therefore, affected by a vulnerability where a User Session Note protocol mapper can expose upstream identity provider access tokens to managed clients, allowing a client to obtain a token it was not intended to...