The Mentoring plugin for WordPress is vulnerable to privilege escalation in all versions up to,...
CVE-2025-13618
The Mentoring plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.2.8. Th
#severity:critical
共收录 1443 条相关情报。
← 返回所有主题`mysten-metrics` was removed from crates.io for malicious code
`mysten-metrics` included a build script that attempted to exfiltrate data from the build machine. The malicious crate
`sui-execution-cut` was removed from crates.io for malicious code
`sui-execution-cut` included a build script that attempted to exfiltrate data from the build machine. The malicious cra
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection...
CVE-2026-41926
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the firewall.cg
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection...
CVE-2026-41923
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the internet.cg
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection...
CVE-2026-41925
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the adm.cgi bin
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection...
CVE-2026-41924
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the makeRequest
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection...
CVE-2026-41922
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the wireless.cg
ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView
CVE-2026-42601
The /add/ endpoint (AddView in core/views.py) accepts a config JSON field that gets merged into the crawl config without
Pelican Web UI Affected by a Privilege Escalation Attack
CVE-2026-42571
## Background On April 2nd, 2026, a Claude coding agent alerted Pelican PI Brian Bockelman to a privilege escalation vu
phpVMS has an /importer authorization bypass causing full database wipe
CVE-2026-42569
# Security Advisory: Unauthenticated Access to Legacy Import Feature **Severity:** Critical **Affected versions:** phpV
Sandboxed Thymeleaf expressions vulnerable to improper recognition of unauthorized syntax patterns
CVE-2026-41901
### Impact A security bypass vulnerability exists in the expression execution mechanisms of Thymeleaf up to and includi
A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV...
CVE-2026-7372
A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A special
A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision...
CVE-2026-42368
A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10. A spec
An insufficient encryption vulnerability exists in the Device Authentication functionality of...
CVE-2026-7161
An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Uti
An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision...
CVE-2026-42364
An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A s
A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV...
CVE-2026-42370
A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A special
GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras...
CVE-2026-42369
GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras and manage other securit
The User Verification by PickPlugins plugin for WordPress is vulnerable to authentication bypass...
CVE-2026-7458
The User Verification by PickPlugins plugin for WordPress is vulnerable to authentication bypass in all versions up to,
The User Registration Advanced Fields plugin for WordPress is vulnerable to arbitrary file...
CVE-2026-4882
The User Registration Advanced Fields plugin for WordPress is vulnerable to arbitrary file uploads due to missing file t