490134 matches found
PT-2026-85107
Unauthenticated Bypass Vulnerability in BookIt = 2.6.0.3 versions...
PT-2026-85099
Subscriber Privilege Escalation in WCFM Membership = 2.11.11 versions...
PT-2026-85113
Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...
PT-2026-85094
Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium 4.46.0 versions...
PT-2026-85101
Unauthenticated Broken Access Control in Business Directory = 6.4.26 versions...
PT-2026-85096
Name of the Vulnerable Software and Affected Versions Mail Mint versions prior to 1.31.1 Description Mail Mint is subject to PHP Object Injection, a condition where an application deserializes untrusted input, allowing an attacker to inject a PHP Object. While no POP chain a sequence of gadgets...
PT-2026-85121
Unauthenticated Broken Access Control in Quick Event Manager = 9.17 versions...
PT-2026-85103
Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...
PT-2026-85105
Unauthenticated Cross Site Scripting XSS in Breadcrumb NavXT = 7.5.1 versions...
PT-2026-85118
Subscriber Privilege Escalation in Bricksforge = 3.1.8.8 versions...
PT-2026-85088
Unauthenticated Cross Site Scripting XSS in Simple Payment = 2.5.1 versions...
perl-GD security update
2.49-3.0.1 - Security update for CVE-2026-11526 Orabug: 39825996...
Oracle Linux 8 : ELSA-2026-62571-0: / freerdp (ELSA-2026-625710)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-625710 advisory. 2:2.11.7-12 - Backport several CVE fixes CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301 Resolves: RHEL-225093, RHEL-227724,...
Oracle Linux 10 : ELSA-2026-61377-0: / nodejs24 (ELSA-2026-613770)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-613770 advisory. 1:24.19.0-1.0.1 - Add c-ares as dependency orabug 39781256 - Update upstream references 1:24.19.0-1 - Update to version 24.19.0 Tenable has extracte...
PT-2026-85117
Unauthenticated SQL Injection in GeoDirectory = 2.8.174 versions...
CVE-2026-16723 — Updated!
CVE-2026-16723 Exploit A standalone C++17 implementation for CVE-2026-16723 , a critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83. Requirements Linux or WSL on Windows C++17 compatible compiler GCC 7+ or Clang 5+ CMake 3.10 or newer System packages: libzip-dev zlib1g-dev Debian /...
Hurl: Cookies in Cookies section leak when redirecting to a different host
The Bug Hurl = 8.0.1 lets you define cookies two ways in a .hurl file: 1. As a raw Cookie: header in the Header/headers area 2. In a dedicated Cookies section parsed into RequestSpec.cookies When following a redirect to a different host, Hurl correctly strips security-sensitive data Authorization...
EUVD-2026-63465
Hurl: Cookies in Cookies section leak when redirecting to a different host...
CVE-2026-63385 affecting package libevent for versions less than 2.1.13-1
CVE-2026-63385 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...