490166 matches found
WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by luc in WordPress Plugin Do Lasso versions = 358...
CVE-2026-73078
A flaw in Vim's netrw plugin fails to sanitize special characters in directory paths when creating GUI menu entries. Browsing or bookmarking a maliciously crafted path in GUI Vim allows attackers to execute arbitrary OS commands as the running user. Mitigation To mitigate this issue, avoid browsi...
brakeman v8.0.6
Brakeman Brakeman is a static analysis tool which checks Ruby on Rails applications for security vulnerabilities. Installation Using RubyGems: root@kitploit: gem install brakeman Using Bundler: root@kitploit: group :development do gem 'brakeman', require: false end Using Docker: root@kitploit:...
MINI-X544-WHXQ-G7RQ
Bulletin has no description...
MINI-7M52-4VFX-7QCQ
Bulletin has no description...
MINI-VJ4X-CM3R-96P8
Bulletin has no description...
MINI-5MX5-2M3M-VP42
Bulletin has no description...
MINI-F2FX-5WFJ-G7Q3
Bulletin has no description...
MINI-Q874-V444-7JGQ
Bulletin has no description...
CVE-2026-46382
The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available...
ECHO-10AB-2811-913A
Bulletin has no description...
Slackware Linux 15.0 / current rsync Vulnerability (SSA:2026-225-01)
The version of rsync installed on the remote host is prior to 3.5.0. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-225-01 advisory. New rsync packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding descriptio...
OPENSUSE-SU-2026:11504-1 dracut-112+suse.29.gc0c5e1d-1.1 on GA media
These are all security issues fixed in the dracut-112+suse.29.gc0c5e1d-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-71419
Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation...
CVE-2026-46382: Server-Side Request Forgery (SSRF)
The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available...
ROS-20260813-73-0017
The vulnerability in Gitea is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to cause service failures...
WordPress 7.0.2 Cross Site Scripting Checker
A vulnerability checker for a pre-authentication reflected cross site scripting vulnerability in WordPress version 7.0.2. The issue occurs in username handling on failed login attempts and can potentially be chained with administrator interaction and additional functionality to achieve code...
PT-2026-71675
Name of the Vulnerable Software and Affected Versions vLLM versions 0.19.0 through 0.25.0 Description The /v1/completions endpoint accepts an unbounded prompt field within the CompletionRequest. The prompt to seq and OnlineRenderer.preprocess completion functions expand every element of the input...
PT-2026-71880
Trigger.dev is the open-source platform for building AI workflows in TypeScript. From 4.4.2 until 4.5.0, the packet presign routes in apps/webapp/app/routes/api.v1.packets.$.ts pass a caller-controlled filename through resolveStoreProtocolForPacketPresign to generatePresignedUrl and...
PT-2026-71818
Name of the Vulnerable Software and Affected Versions IBM i version 7.6 Description A remote attacker can cause a denial of service through an out-of-bounds write, which occurs when data is written outside the intended memory boundary of a buffer. Recommendations At the moment, there is no...