10218 matches found
Exploit for CVE-2026-12227
CVE-2026-12227: Visual Composer Website Builder Unauthenticated...
CVE-2026-97262
Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.2 versions...
EUVD-2026-89917
Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.2 versions...
CVE-2026-97262 WordPress Visual Composer Website Builder plugin <= 45.16.2 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.2 versions...
CVE-2026-97262 WordPress Visual Composer Website Builder plugin <= 45.16.2 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.2 versions...
CVE-2026-97262
The Visual Composer Website Builder plugin for WordPress (versions
WordPress Visual Composer Website Builder plugin <= 45.16.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Visual Composer Website Builder versions = 45.16.2...
CVE-2025-31324-File-Upload
CVE-2025-31324-File-Upload A totally unauthenticated file-upload endpoint in Visual Composer lets anyone drop arbitrary files e.g., a JSP web-shell onto the server. Proof-of-concept tool to check for and exploit the unauthenticated file upload vulnerability CVE-2025-31324 in SAP NetWeaver Visual...
CVE-2026-97262: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.2 versions...
CVE-2026-102829 simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection
simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 2.0.1 of the argv-parser package, parseEnv omits VISUAL from GitEnvKeys, so prepareEnv drops the value before vulnerabilityCheck can classify it a...
CVE-2026-102829 simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection
simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 2.0.1 of the argv-parser package, parseEnv omits VISUAL from GitEnvKeys, so prepareEnv drops the value before vulnerabilityCheck can classify it a...
CVE-2026-102829
The simple-git library, which allows Node.js applications to execute Git operations, is vulnerable due to a flaw in the argv-parser package prior to version 2.0.1 . The parseEnv function omits VISUAL from GitEnvKeys, causing prepareEnv to drop the value before vulnerabilityCheck can identify it a...
CVE-2026-102829 simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection
simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 2.0.1 of the argv-parser package, parseEnv omits VISUAL from GitEnvKeys, so prepareEnv drops the value before vulnerabilityCheck can classify it a...
Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses Pillow which is vulnerable to CVE-2026-54058, CVE-2026-59197, CVE-2026-59198, CVE-2026-59199, CVE-2026-59200, CVE-2026-59203, CVE-2026-59204, CVE-2026-59205
Summary IBM Maximo Application Suite - Visual Inspection component uses Pillow which is vulnerable to CVE-2026-54058, CVE-2026-59197, CVE-2026-59198, CVE-2026-59199, CVE-2026-59200, CVE-2026-59203, CVE-2026-59204, CVE-2026-59205, This bulletin contains information regarding the vulnerability and...
Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses multiple dependencies which are vulnerable to multiple High Severity CVEs.
Summary IBM Maximo Application Suite - Visual Inspection component uses multiple dependencies which are vulnerable to multiple High Severity CVEs. This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-67312 DESCRIPTION: axios...
CVE-2026-102829: Improper Neutralization of Special Elements used in an OS Command
simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 2.0.1 of the argv-parser package, parseEnv omits VISUAL from GitEnvKeys, so prepareEnv drops the value before vulnerabilityCheck can classify it a...
vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling
A vulnerability in Vim's shell script plugins sh.vim, zsh.vim, ps1.vim allows arbitrary code execution if a user selects maliciously crafted text in Visual mode and triggers a keyword lookup, due to improperly escaped shell metacharacters...
Exploit for CVE-2026-12227
CVE-2026-12227: Visual Composer Website Builder Unauthenticated...
PT-2026-102814
Name of the Vulnerable Software and Affected Versions argv-parser versions prior to 2.0.1 Description The parseEnv function omits VISUAL from GitEnvKeys, causing prepareEnv to drop the value before vulnerabilityCheck can classify it as allowUnsafeEditor. In applications that forward...