CVE-2026-87915-PoC-pwnVader

CVE-2026-87915 — Popup Maker = 1.24.0 — 未認証の蓄積型XSS valuesName Author: pwnVader · License: MIT リポジトリルート | ---|--- Component| Popup Maker – Boost Sales, Conversions, Optins, Subscribers WordPressプラグイン Type| CWE-79 — 蓄積型クロスサイトスクリプティング Affected| = 1.24.0 Fixed| 1.25.0 CVE| CVE-2026-87915 — CVSS 3.1 7...

CVE-2026-93428

The Ultimate Member plugin for WordPress is vulnerable to an authorization bypass in all versions up to and including 2.13.1 . The root cause is the plugin's failure to properly verify user authorization when accessing the publicly available wp_ajax_nopriv_um_get_members endpoint. Specifically, t...

EUVD-2026-91881

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.13.1 This is due to the plugin not properly verifying that a user is authorized to...

CVE-2026-94239: Improper Neutralization of Input During Web Page Generation

The Loco Translate WordPress plugin before 2.8.9 does not sanitise and escape some bundle configuration values before outputting them back in an admin page, allowing users with the translator capability and above to perform Stored Cross-Site Scripting attacks against high privilege users such as...

CVE-2026-66753-HTTP-Header-Injection-via-Unvalidated-CR-and-LF-in-Header-Values-tiny_http-

보안 권고: 헤더 값의 검증되지 않은 CR 및 LF를 통한 HTTP 헤더 주입 tinyhttp 지정된 CVE ID: CVE-2026-66753 요약 tinyhttp는 HTTP 헤더 값 내부의 캐리지 리턴CR 또는 라인 피드LF를 어느 방향에서도 거부하지 않습니다. 요청 측에서 readnextline은 CRLF에서만 헤더 줄을 종료하므로, 단독 LF는 파싱된 값 내부에 남아 애플리케이션에 도달합니다. 응답 측에서 Header::frombytes는 바이트가 ASCII인지만 검증하며, 응답 작성기가 값을 그대로 출력하므로 CRLF를...

CVE-2026-42533

CVE-2026-42533 — nginx two-pass 캡처 덮어쓰기two-pass capture clobbering nginx0.9.6–1.30.3 / mainline ≤1.31.2 복합 값 스크립트 엔진의 사전 인증 힙 오버플로 + 정보 유출; CVSS 9.2. 동일한 근본 원인에 두 가지 트리거 표면이 있습니다: HTTPregex location + regex map와 streamsslpreread + SNI + regex map. 심층 기술 분석 및 정오표는 ANALYSIS.md를 참조하세요. 프로젝트 구조 . ├──...

CVE-2026-18036

In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a...

CVE-2026-85005: Missing Authorization

The Popup Maker WP WordPress plugin through 1.4.5 does not perform authorization checks on several of its actions and exposes its management page to any logged-in user, allowing users with a low-privileged role such as Subscriber to store display-targeting values that are later invoked as...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : libXpm vulnerability (USN-8862-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8862-1 advisory. It was discovered that libXpm did not correctly handle XPM images with zero-dimension values. A local attacker could possibly use this iss...

webhook-cve-2022-0811

webhook-cve-2022-0811 이것은 악성 sysctl 값이 설정되어 있으면 포드 생성을 차단하는 매우 간단한 웹훅입니다. 빌드 go test CGOENABLED=0 GOOS=linux GOARCH=amd64 GO111MODULE=on go build 이미지 빌드 및 Minikube에 배포 minikube 시작: minikube start minikube addons enable registry 빌드: podman build -t localhost:5000/webhook-cve-2022-0811:latest...

UBUNTU-CVE-2026-104056

Authlib version 1.7.2 and below contains a vulnerability where discovery JSON metadata is cached without validation or issuer-origin binding. This allows a poisoned discovery response to replace all endpoint values with attacker-controlled values rather than endpoint URLs that share the origin of...

CVE-2026-104056

The Authlib library (version 1.7.2 and below) contains a vulnerability where OpenID Connect (OIDC) and OAuth discovery metadata is cached without sufficient validation or issuer-origin binding . A remote attacker providing a malicious discovery response can replace legitimate service endpoints wi...

pypdf: Possible long runtimes when generating appearance streams

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires updating form field values with flattening enabled, which triggers appearance stream generation. PatchesThis has been fixed in pypdf==6.19.0. WorkaroundsIf you cannot upgrade yet, consider...

PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)

SummaryCVE-2026-48524 GHSA-fhv5-28vv-h8m8, "PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values DoS" was fixed in 2.13.0 by stopping fetchdata from clearing the cache on a fetch error. That closed one amplification path but did not add the mitigation the advisory's tit...

GHSA-PHP9-FJ8V-98FJ pypdf: Possible long runtimes when generating appearance streams

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires updating form field values with flattening enabled, which triggers appearance stream generation. Patches This has been fixed in pypdf==6.19.0. Workarounds If you cannot upgrade yet, consider...

USN-8862-1: libXpm vulnerability

It was discovered that libXpm did not correctly handle XPM images with zero-dimension values. A local attacker could possibly use this issue to cause libXpm to use excessive resources, leading to a denial of service...

USN-8862-1 libxpm vulnerability

It was discovered that libXpm did not correctly handle XPM images with zero-dimension values. A local attacker could possibly use this issue to cause libXpm to use excessive resources, leading to a denial of service...

CVE-2026-78242

Insertion of sensitive information into log file vulnerability in Apache APISIX. This vulnerability can cause the unmasked header value to be written to the log sink under a certain response structure. This issue affects Apache APISIX: 3.17.0. Users are recommended to upgrade to version 3.18.0,...

Rocky Linux 9 [CIQ] Security Update: coreutils / coreutils-common / coreutils-debuginfo / etc (crlsa-2026_66403)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202666403 advisory. coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values CVE-2026-56392 Tenable has extracted the preceding description block directly from...

Rocky Linux 9 [CIQ] Security Update: fence-agents-aliyun / fence-agents-all / fence-agents-amt-ws / etc (crlsa-2026_53365)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202653365 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the CIQ security...