The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qode_membership...

CVE-2026-92885

The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versi

历史摘要 · 未重新核验 · NVD

This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system.

CVE-2026-65211

This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby exe

历史摘要 · 未重新核验 · NVD

The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify the authenticity of incoming payment notifications, relying on a validation se...

CVE-2026-103332

The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify the authenticity of i

来源摘录 · NVD

The Payment Integration Wompi WordPress plugin through 4.0.1 does not verify the authenticity of incoming payment notifications on a stock install, because the callback's checks...

CVE-2026-103312

The Payment Integration Wompi WordPress plugin through 4.0.1 does not verify the authenticity of incoming payment notifi

来源摘录 · NVD

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected...

CVE-2026-116604

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown fun

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/delete_admin.php. The manipulatio...

CVE-2026-116604

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown fun

历史摘要 · 未重新核验 · NVD

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execut...

CVE-2026-112427

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A r

来源摘录 · NVD

A vulnerability was determined in BillaBear up to 2025.01.03. Affected by this issue is the function processInstall of the file src/BillaBear/Controller/InstallController.php of...

CVE-2026-116257

A vulnerability was determined in BillaBear up to 2025.01.03. Affected by this issue is the function processInstall of t

来源摘录 · NVD

The Payment Gateway WordPress plugin through 2.2.0 does not ensure a shared secret is configured before using it to authenticate the bank's payment-notification callback, allow...

CVE-2026-103299

The Payment Gateway WordPress plugin through 2.2.0 does not ensure a shared secret is configured before using it to aut

来源摘录 · NVD

A vulnerability was found in GiantappMan LiveWallPaper 2.6.8.0 on Windows. This issue affects...

CVE-2026-116110

A vulnerability was found in GiantappMan LiveWallPaper 2.6.8.0 on Windows. This issue affects some unknown processing of

历史摘要 · 未重新核验 · GitHub Advisory

Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains an authentication bypass...

CVE-2026-116163

Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains an authentication bypass because the validateSetUp,

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown function of the file AuthController.java of the component SM...

CVE-2026-116006

A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown fun

来源摘录 · NVD

A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This...

CVE-2026-115996

A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This affects the function W

历史摘要 · 未重新核验 · GitHub Advisory

The asVereinbase WordPress plugin before 1.1.8 does not require a valid password or a genuine...

CVE-2026-110956

The asVereinbase WordPress plugin before 1.1.8 does not require a valid password or a genuine second factor before auth

历史摘要 · 未重新核验 · GitHub Advisory

Laravel TokenGuard authentication bypass through non-string API credentials

CVE-2026-114509

Laravel's built-in TokenGuard, **when configured with a standard token-based API guard**, may be bypassed to authenticat

历史摘要 · 未重新核验 · GitHub Advisory

FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server

## Maintainer assessment and remediation This report is accepted as a FastMCP credential-binding vulnerability. Affecte

历史摘要 · 未重新核验 · GitHub Advisory

SiYuan: A parser differential between the WebSocket keepalive exemption and the session quarantine allows unauthenticated access to the broadcast event stream

CVE-2026-73054

### Summary Two checks on the same WebSocket request URI parse it differently. The authentication exemption for keepali

历史摘要 · 未重新核验 · GitHub Advisory

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, Configuration.getWebApiToken returns the empty str...

CVE-2026-55457

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version

来源摘录 · NVD

PraisonAI is a multi-agent teams system. From version 4.5.112 to before version 4.6.59, PraisonAI's installed console entrypoint is Typer-first. In current releases, the recipe ...

CVE-2026-56836

PraisonAI is a multi-agent teams system. From version 4.5.112 to before version 4.6.59, PraisonAI's installed console en

来源摘录 · NVD

Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges...

CVE-2026-97785

Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · GitHub Advisory