EUVD-2026-68787

Unauthenticated SQL Injection in Throws SPAM Away = 3.8.2 versions...

EUVD-2026-68788

Unauthenticated Cross Site Scripting XSS in Email Essentials = 6.0.6 versions...

EUVD-2026-68786

Subscriber Broken Access Control in Booking and Rental Manager = 2.7.6 versions...

EUVD-2026-68785

Subscriber Broken Access Control in OwnerRez API = 1.2.6 versions...

EUVD-2026-68783

Unauthenticated Cross Site Scripting XSS in LeadConnector = 4.0.5 versions...

EUVD-2026-68781

Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack = 6.2.12 versions...

CVE-2026-81297 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack = 6.2.12 versions...

EUVD-2026-68778

Unauthenticated Cross Site Scripting XSS in Email Subscribers & Newsletters = 5.9.33 versions...

EUVD-2026-68779

Unauthenticated Cross Site Scripting XSS in Uncode = 2.12.7 versions...

EUVD-2026-68775

Unauthenticated Server Side Request Forgery SSRF in MapSVG = 8.15.0 versions...

MINI-7344-MFGM-V2V3

Bulletin has no description...

EUVD-2026-43671

TYPO3 CMS - Unrestricted File Upload in Form Framework...

CVE-2026-82835 caoqianming django-vue-admin file access control

A weakness has been identified in caoqianming django-vue-admin 1.0. This vulnerability affects unknown code of the file /api/file/. Executing a manipulation of the argument fileid can lead to improper access controls. The attack can be executed remotely. The exploit has been made available to the...

CVE-2026-53553 Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise

Goploy is an open-source automation deployment system. Prior to version 1.18.0, a severe path traversal vulnerability exists in its backend API endpoints, specifically /deploy/fileDiff File Compare, when handling file paths provided by the client. This issue has been patched in version 1.18.0...

CVE-2026-82820

A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amfstringnew of the file src/amf.c of the component AMF String Processing. The manipulation of the argument length results in heap-based buffer overflow. The attack can be launched remotely. The exploit has been made publi...

CVE-2015-1579

CVE-2015-1579 - WP Revslider AFD Exploit: Wordpress Slider Revolution Responsive = 4.1.4: root@kitploit: Fecha de vulnerabilidad: 24/07/2014 Autor del exploit: anarc0der Versión: Wordpress Slider Revolution Responsive = 4.1.4 CVE : CVE-2015-1579 Cómo usar: root@kitploit: python3 xpl.py...

CVE-2026-80641

A flaw was found in the Linux kernel's wlcore Wi-Fi driver. An incorrect firmware version check for Integrity Group Temporal Key IGTK causes the number of available ciphers to continuously decrease on systems using older firmware, particularly affecting wl12xx chips. This issue leads to repeated...

MAL-2026-15625 Malicious code in evilpostinstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846e500b06f58769a2cb833be8e726ab1db04b327f4c614da6642eb46ae7dfe5 The package's postinstall lifecycle hook pipes the output of env through nc to a host reconstructed at install time from the package version string v...

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.10.4 Plugin Catalog GA plugins release.

Red Hat Developer Hub 1.10.4 Plugin Catalog GA plugins release. Red Hat Developer Hub RHDH is extensible by the plugins included herein...

CVE-2026-19702 OS Command Injection in TÜBİTAK BİLGEM's Pardus Boot Repair

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0.7 before 1.0.8...