CVE-2025-71243

SPIP Saisies plugin 5.4.0–5.11.0 is affected by an unauthenticated remote code execution vulnerability. The _anciennes_valeurs parameter is injected into a hidden field and, because SPIP renders it with interdire_scripts = false and the template is evaluated via PHP, injected PHP is executed on t...

CVE-2026-23541

CVE-2026-23541 is a Missing Authorization vulnerability in the WordPress plugin Mail Mint (Mail Mint: 1.19.4 and earlier). The issue arises from functionality being accessible without proper ACL constraints, enabling access to previously restricted features. Documented impact indicates a broken a...

CVE-2026-1994

Summary (CVE-2026-1994): The WordPress plugin s2Member is affected by a critical (CVSS 3.1: 9.8) unauthenticated privilege-escalation via account takeover vulnerability affecting versions up to 260127. Root cause: the plugin fails to properly validate a user’s identity before updating a password,...

CVE-2026-1405

WordPress Slider Future plugin (versions ≤ 1.0.5) is vulnerable to an Unauthenticated Arbitrary File Upload due to missing file type validation in slider_future_handle_image_upload. This allows unauthenticated attackers to upload arbitrary files to the server, with potential for remote code execu...

CVE-2025-12845

CVE-2025-12845 refers to the WordPress plugin Tablesome Table – Contact Form DB (WPForms, CF7, Gravity, Forminator, Fluent) with versions 0.5.4–1.2.1. According to Wordfence, it allows unauthorised access to plugin data and can lead to privilege escalation due to a missing capability check in get...

CVE-2026-27174

CVE-2026-27174 affects MajorDoMo. An include-order bug in modules/panel.class.php lets unauthenticated users reach the admin panel’s PHP console, with execution continuing into inc_panel_ajax.php after a redirect that lacks an exit. The console handler passes GET parameters (via register_globals)...

CVE-2026-27175

CVE-2026-27175 : MajorDoMo is vulnerable to unauthenticated OS command injection via rc/index.php. The user input parameter is interpolated into a command string inside double quotes without sanitization, and the command is inserted into a queue by safe_exec() and later executed by the web-access...

CVE-2026-1277

The CVE concerns the WordPress plugin URL Shortify (versions ≤ 1.12.1). The root cause is insufficient validation of the redirect_to parameter in the promotional dismissal handler, enabling Open Redirects. Attackers can exploit this unauthenticatedly by sending crafted links to redirect users to ...

CVE-2026-22769

CVE-2026-22769 affects Dell RecoverPoint for Virtual Machines (RP4VMs) versions prior to 6.0.3.1 HF1, where a hard-coded credential vulnerability can allow an unauthenticated attacker to gain full control of the underlying OS with root-level persistence. A PoC circulating in PacketStorm demonstra...

CVE-2025-32355

CVE-2025-32355 affects Rocket TRUfusion Enterprise up to version 7.10.4.0, where the built-in reverse proxy can be misconfigured to accept absolute URLs in the HTTP request line. This enables server-side requests to load arbitrary resources via the proxy, constituting a server-side request forger...

CVE-2026-26190

Milvus (open-source vector database) prior to versions 2.5.27 and 2.6.10 exposes TCP port 9091 by default, enabling authentication bypasses. The /expr debug endpoint uses a weak, predictable default token derived from etcd.rootPath (default: by-dev), allowing arbitrary expression evaluation. The ...

CVE-2026-2441

CVE-2026-2441 is a Chromium/Google Chrome use-after-free in CSS vulnerability that could allow a remote attacker to execute arbitrary code inside the sandbox. Affected software includes Google Chrome/Chromium prior to 145.0.7632.75; the issue stems from a CSS handling use-after-free bug in the br...

CVE-2026-25108

Soliton Systems K.K. FileZen contains an OS command injection vulnerability (CVE-2026-25108) exploitable when the Antivirus Check Option is enabled. An authenticated user can issue a crafted HTTP request to execute arbitrary OS commands. Affected versions include FileZen 4.2.1–4.2.8 and 5.0.0–5.0...

CVE-2026-20700

CVE-2026-20700 is a memory corruption issue in dyld that Apple fixed in macOS Tahoe 26.3, iOS 26.3/iPadOS 26.3, tvOS 26.3, visionOS 26.3, and watchOS 26.3. An attacker with memory write capability could potentially execute arbitrary code; this may have been exploited in a targeted attack on earli...

CVE-2026-1357

CVE-2026-1357 affects the WPvivid Backup & Migration plugin for WordPress (≤0.9.123). The vulnerability enables unauthenticated arbitrary file upload and remote code execution via the endpoint wpvivid_action=send_to_site. It stems from two chained flaws: (1) crypto fail‑open during RSA decryption...

CVE-2026-21525

CVE-2026-21525 is a Windows Remote Access Connection Manager (RasMan) Denial of Service vulnerability caused by a NULL pointer dereference. An unauthenticated, locally-initiated attacker can trigger a crash of RasMan, impacting availability. Connected sources confirm this as a local DoS issue, wi...

CVE-2026-21514

CVE-2026-21514 — Microsoft Word Security Feature Bypass . A vulnerability in Word arises from reliance on untrusted inputs in a security decision, enabling a local attacker to bypass embedded/active-content protections. Public CVSS data from the Initial document indicates a 3.1 vector with LOCAL ...

CVE-2026-21510

CVE-2026-21510 is a Windows Shell security feature bypass vulnerability (Protection Mechanism Failure) that can allow remote code execution by bypassing SmartScreen prompts and shell warnings. Affected component: Windows Shell (explorer.exe) and related UI elements. Exploitation requires social e...

CVE-2026-21513

CVE-2026-21513 is a security feature bypass vulnerability in the MSHTML Framework. Affected component: MSHTML/MSHTML Framework used by Windows’ browsing/rendering stack. Root cause details are described in vendor advisories and security blogs as a protection mechanism bypass that can be triggered...

CVE-2026-21533

CVE-2026-21533 affects Windows Remote Desktop Services (RDS) and is caused by improper privilege management (CWE-269), allowing a local authenticated attacker with low privileges to elevate to SYSTEM. Multiple connected sources corroborate that the issue is a local EoP in RDS with CVSSv3 7.8 (HIG...