43172 matches found
Microsoft Patches 84 Flaws in March Patch Tuesday, Including Two Public Zero-Days
Microsoft on Tuesday released patches for a set of 84 new security vulnerabilities affecting various software components, including two that have been listed as publicly known. Of these, eight are rated Critical, and 76 are rated Important in severity. Forty-six of the patched vulnerabilities...
WordPress JetBooking plugin <= 4.0.3 - Unauthenticated SQL Injection via 'check_in_date' Parameter vulnerability
Unauthenticated SQL Injection via 'checkindate' Parameter vulnerability discovered by hoshino in WordPress Plugin JetBooking versions = 4.0.3...
CVE-2026-28513
Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.4.0, the OIDC token endpoint rejects an authorization code only when both the client ID is wrong and the code is expired. This allows cross-client code exchange and expired code reuse...
CVE-2026-1867 WP Front User Submit < 5.0.6 - Unauthenticated Sensitive Information Exposure
The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6 allows passing a URL parameter to regenerate a .json file based on demo data that it initially creates. If an administrator modifies the demo form and enables admin notifications in the Guest posting / Frontend...
EUVD-2026-10710
@appium/support has a Zip Slip arbitrary file write in its ZIP extraction...
EUVD-2026-10557
StudioCMS: IDOR — Arbitrary API Token Revocation Leading to Denial of Service...
The vulnerability of the iommufd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the iommufd component in the Linux operating system’s kernel is related to the lack of checks for division by zero. Exploiting this vulnerability allows an attacker to cause a service failure...
CVE-2025-70024
An issue pertaining to CWE-89: Improper Neutralization of Special Elements used in an SQL Command was discovered in benkeen generatedata 4.0.14...
HMS eWON Firmware 信任管理问题漏洞
HMS eWON Firmware is an embedded device firmware developed by the Swedish company HMS. Versions 12.2 to 13.0 of HMS eWON Firmware contain vulnerabilities related to trust management. These vulnerabilities stem from an authentication bypass in the wsdReadForm endpoint, which could allow attackers ...
PT-2026-24747
Name of the Vulnerable Software and Affected Versions Cursor versions prior to 2.0 Description Cursor is a code editor designed for programming with AI. Prior to version 2.0, if a visited website contained maliciously crafted instructions, the model could attempt to follow them to assist the user...
CVE-2026-1653: Divide By Zero
A potential divide by zero vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to cause a Windows blue screen error...
The vulnerability of the hbg_get_queue_used_num() function in the drivers/net/ethernet/hisilicon/hibmcge/hbg_txrx.h module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the hbggetqueueusednum function in the drivers/net/ethernet/hisilicon/hibmcge/hbgtxrx.h module of the Linux kernel is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-24833
CVE-2026-1653 A potential divide by zero vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to cause a Wind… https://t.co/dwTAJ9z9UE...
Adversarial Reinforcement Learning for Detecting False Data Injection Attacks in Vehicular Routing
In modern transportation networks, adversaries can manipulate routing algorithms using false data injection attacks, such as simulating heavy traffic with multiple devices running crowdsourced navigation applications, to mislead vehicles toward suboptimal routes and increase congestion. To addres...
SAPIDO RB-1732 安全漏洞
SAPIDO RB-1732 is a wireless router produced by SAPIDO Company in Taiwan, China. The SAPIDO RB-1732 V2.0.43 version has a security vulnerability. This vulnerability stems from the formSysCmd endpoint, which allows remote command execution, potentially enabling unverified attackers to execute...
PT-2026-24698
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. From 11.0.0 to before 11.0.5, an authenticated technician user can upload a malicious file and trigger its execution through an unsafe PHP...
WordPress plugin Happy Addons for Elementor 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...
Lenovo Smart Standby Driver 安全漏洞
The Lenovo Smart Standby Driver is a software developed by Lenovo Corporation, designed to control computer sleep states. The novo Smart Standby Driver contains a security vulnerability, which stems from a potential zero-based error. This error may cause Windows blue-screen errors in cases where...
PT-2026-24585
🚨 CVE-2026-1867 The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6 allows passing a URL parameter to regenerate a .json file based on demo data that it initially creates. If an administrator modifies the demo form and enables admin notifications in the Guest posting...