WordPress 7.0.2 Cross Site Scripting Checker

A vulnerability checker for a pre-authentication reflected cross site scripting vulnerability in WordPress version 7.0.2. The issue occurs in username handling on failed login attempts and can potentially be chained with administrator interaction and additional functionality to achieve code...

PT-2026-71636

Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description A privilege confusion issue exists in the name-converter subprocess uid/gid mapping. Local attackers can cause transferred files to be owned by root by influencing the name-converter responses to retur...

PT-2026-71575

Unauthenticated Broken Access Control in Arvow AI SEO Writer = 1.5.3 versions...

PT-2026-71818

Name of the Vulnerable Software and Affected Versions IBM i version 7.6 Description A remote attacker can cause a denial of service through an out-of-bounds write, which occurs when data is written outside the intended memory boundary of a buffer. Recommendations At the moment, there is no...

CVE-2026-46382: Server-Side Request Forgery (SSRF)

The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available...

PT-2026-71419

Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation...

ROS-20260813-73-0017

The vulnerability in Gitea is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2026-71675

Name of the Vulnerable Software and Affected Versions vLLM versions 0.19.0 through 0.25.0 Description The /v1/completions endpoint accepts an unbounded prompt field within the CompletionRequest. The prompt to seq and OnlineRenderer.preprocess completion functions expand every element of the input...

Slackware Linux 15.0 / current rsync Vulnerability (SSA:2026-225-01)

The version of rsync installed on the remote host is prior to 3.5.0. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-225-01 advisory. New rsync packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding descriptio...

OPENSUSE-SU-2026:11504-1 dracut-112+suse.29.gc0c5e1d-1.1 on GA media

These are all security issues fixed in the dracut-112+suse.29.gc0c5e1d-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-71880

Trigger.dev is the open-source platform for building AI workflows in TypeScript. From 4.4.2 until 4.5.0, the packet presign routes in apps/webapp/app/routes/api.v1.packets.$.ts pass a caller-controlled filename through resolveStoreProtocolForPacketPresign to generatePresignedUrl and...

EUVD-2026-57701

The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available...

CVE-2026-46688

CVE-2026-46688 affects the Meeting Room Booking System (MRBS) prior to version 1.12.2, where an unauthenticated request can trigger a redirect to a caller-controlled URL. This open redirect could lead users to attacker-specified sites, including a spoofed MRBS login page. The issue is fixed in MR...

CVE-2026-68116 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68116 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64598 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-64598 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64552 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64552 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-17572 affecting package hdf5 for versions less than 1.14.6-4

CVE-2026-17572 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...

CVE-2026-64444 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64444 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64298 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64298 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64275 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64275 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...