Exploit for CVE-2026-1560

CVE-2026-XXXX – Authenticated Remote Code Execution in Lazy Bl...

CVE-2026-21348 Substance3D - Modeler | Out-of-bounds Read (CWE-125)

Substance3D - Modeler versions 1.22.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that ...

CVE-2026-21354 DNG SDK | Integer Overflow or Wraparound (CWE-190)

DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to cause the application to crash or become unresponsive. Exploitation of this issue requires user...

CVE-2026-21346 Bridge | Out-of-bounds Write (CWE-787)

Bridge versions 15.1.3, 16.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21343 Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current...

CVE-2026-21341 Substance3D - Stager | Out-of-bounds Write (CWE-787)

Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21338

Substance3D Designer, versions 15.1.0 and earlier, is affected by a NULL pointer dereference that can cause an application denial-of-service. The issue occurs when a user opens a malicious file, requiring user interaction and resulting in a crash. Exploitation details are not provided beyond the ...

CVE-2026-21318

CVE-2026-21318 affects After Effects versions 25.6 and earlier. The issue is an out-of-bounds write leading to arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically the victim opening a malicious file. CVSSv3.1 base score 7.8 (HIGH) with...

CVE-2026-25956

CVE-2026-25956 affects the Frappe full-stack web framework. Before versions 14.99.14 and 15.94.0 , an attacker could craft a malicious signup URL on a Frappe site that could cause an open redirect or, depending on payload, a reflected XSS when a user signs up. The issue is fixed in the referenced...

CVE-2026-25956 Frappe Affected by XSS and Open Redirect in Sign Up

Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious signup URL for a frappe site which could lead to an open redirect or reflected XSS, depending on the crafted payload when a user signs up. This vulnerability is fixed in 14.99.14 a...

Reynolds Ransomware Embeds BYOVD Driver to Disable EDR Security Tools

Cybersecurity researchers have disclosed details of an emergent ransomware family dubbed Reynolds that comes embedded with a built-in bring your own vulnerable driver BYOVD component for defense evasion purposes within the ransomware payload itself. BYOVD refers to an adversarial technique that...

CVE-2026-1922

CVE-2026-1922 : The Events Calendar Shortcode & Block plugin for WordPress contains a stored XSS vulnerability in the ecs-list-events shortcode, via the message attribute. It affects all versions up to 3.1.2 and arises from insufficient input sanitization and output escaping on user-supplied attr...

CVE-2026-0996 Fluent Forms <= 6.1.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via AI Form Builder Module

The Fluent Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the AI Form Builder module in all versions up to, and including, 6.1.14 due to a combination of missing authorization checks, a leaked nonce, and insufficient input sanitization. The vulnerability allows...

@cubejs-backend-json-clone/server (1.0.0), @cubejs-backend/server (>=0.27.0, <=1.0.13) +4 more potentially affected by CVE-2026-25958 via @cubejs-backend/server-core (>=0.27.53, <=1.0.13)

@cubejs-backend/server-core NPM version =0.27.53, =0.27.0, =0.27.0, =0.27.0, =0.27.0, =0.32.28, =1.0.13 Source cves: CVE-2026-25958 Source advisory: OSV:GHSA-V226-32C7-X2V7...

PT-2026-7302

Name of the Vulnerable Software and Affected Versions Intel Ethernet Network Adapter E810 versions prior to cvl fw 1.7.6, cpk 1.3.7 Description An out-of-bounds read issue exists in the firmware of certain Intel Ethernet Network Adapter E810 devices. A network-based attacker with authenticated...

Linux Distros Unpatched Vulnerability : CVE-2026-25506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability ...

WordPress plugin The Events Calendar Shortcode & Block 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-7381

Name of the Vulnerable Software and Affected Versions After Effects versions 25.6 and earlier Description After Effects is susceptible to a Use After Free issue that may lead to arbitrary code execution with the privileges of the current user. Successful exploitation requires a user to open a...

PT-2026-7392

Name of the Vulnerable Software and Affected Versions Adobe After Effects versions 25.6 and earlier Description A Use After Free issue exists in Adobe After Effects that may lead to arbitrary code execution with current user privileges. Successful exploitation requires a user to open a specially...

Microsoft NTLM 安全漏洞

Microsoft NTLM is an authentication protocol used by Microsoft on networks that include systems running the Windows operating system, as well as standalone systems. There are security vulnerabilities in Microsoft NTLM. Attackers exploit these vulnerabilities to carry out phishing attacks. The...