IServ Schoolserver User Enumeration

IServ Schoolserver suffers from a user enumeration vulnerability. The vendor does not feel this is an issue...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-15380

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...

CVE-2026-15380

CVE-2026-15380 : A non-admin interactive user can achieve full SYSTEM code execution via a DCOM/task scheduler logic chain in Symantec ITMS. No network access or memory corruption required. Connected records confirm the vulnerability and impact as stated; no explicit exploit details, mitigations,...

CVE-2026-9656

The HubSpot All-In-One Marketing – Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.3.62 via the wplocalizescript / window.leadinConfig JavaScript object. This makes it possible for authenticated attackers, with...

CVE-2026-62764

creationtimestamp| type| source ---|---|--- 2026-07-17 06:34:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqt4zjdzoo2e...

CVE-2026-12393

The CVE-2026-12393 affects the WPS Bookings for WooCommerce WordPress plugin prior to version 3.11.7. The root cause is that the plugin does not verify that a booking order belongs to the requesting user before cancelling it, enabling any authenticated user (e.g., Subscriber or Customer) to cance...

CVE-2026-13402

The Royal Addons for Elementor WordPress plugin is affected up to version 1.7.1062 (pre-1.7.1063). A REST endpoint fails to validate the post status of menu items and the templates they reference, allowing unauthenticated users to retrieve the rendered HTML content of private or draft Elementor t...

EUVD-2026-45144

The NEX-Forms WordPress plugin before 9.2.3 does not sanitise and escape some submitted form data before storing it and outputting it back in the admin dashboard, leading to a Stored Cross-Site Scripting vulnerability which could allow unauthenticated users to perform Stored Cross-Site Scripting...

CVE-2026-15982

creationtimestamp| type| source ---|---|--- 2026-07-17 05:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqt2kgy3tm2y 2026-07-17 06:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116933789451136259 2026-07-17 06:00:30+00:00| seen|...

ROOT-OS-UBUNTU-2404-CVE-2026-46143 CVE-2026-46143 in rootio-linux - Patched by Root

Root has patched CVE-2026-46143 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-46186 CVE-2026-46186 in rootio-linux - Patched by Root

Root has patched CVE-2026-46186 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-46078 CVE-2026-46078 in rootio-linux - Patched by Root

Root has patched CVE-2026-46078 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-43429 CVE-2026-43429 in rootio-linux - Patched by Root

Root has patched CVE-2026-43429 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-43186 CVE-2026-43186 in rootio-linux - Patched by Root

Root has patched CVE-2026-43186 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-43270 CVE-2026-43270 in rootio-linux - Patched by Root

Root has patched CVE-2026-43270 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-31781 CVE-2026-31781 in rootio-linux - Patched by Root

Root has patched CVE-2026-31781 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-43488 CVE-2026-43488 in rootio-linux - Patched by Root

Root has patched CVE-2026-43488 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-43493 CVE-2026-43493 in rootio-linux - Patched by Root

Root has patched CVE-2026-43493 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...