2026

Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension - ReReplacer XML include paths c

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension - Database-up

Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions

The MDJM Event Management plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and includin

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILG

A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to ret

Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive inform

The Lumise Product Designer for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' and 'table'

The ARforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'password' Field Values in all version

The security-ninja-premium WordPress plugin before 5.290 does not verify the second authentication factor in one of its

The Praison AI SEO WordPress plugin before 5.0.7 does not perform authorization checks on several of its REST API routes

The SUMO Reward Points plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via the REST AP

The FormCraft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '[parameter name]' parameter in

In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling I

@fastify/static up to and including version 10.1.0 fails to reject dot-dot path segments in request pathnames before the

A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocket_on_protocol_error in the lib

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Third

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the sub_1

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kerne

Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login extension - IP Login trusted forwarded client

Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager

Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacemen

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export ac

Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manage

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension

OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorith

An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal.

An issue in ZipGenius Team ZipGenius v.6.3.2.3116 and before allows a remote attacker to escalate privileges and execute

An issue in Franco Corbelli ZPAQFRANZ v.61.3 and before allows a remote attacker to escalate privileges and execute arbi

An issue in Milos Paripovic OneCommander v.3.96.0.0 allows a remote attacker to execute arbitrary code via the OneComman

An issue in OhSoft CoffeeZip v4.8.0.0 allows attackers to execute arbitrary code via downloading and executing a crafted

An issue in NCH Software ExpressZip v11.29 allows attackers to execute arbitrary code via downloading and executing a cr

Question2Answer through 1.8.8 contains a session invalidation vulnerability that allows attackers with a previously obta

The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) ha

When importing connections in Compass it is possible to override some connection options that are otherwise can't be cha

A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered

A missing bounds check in the BSON CodeWScope element accessors allows an attacker to trigger an out-of-bounds heap read

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data du

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role

ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnera