Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

WordPress WP BASE Booking plugin <= 6.3.0 - Arbitrary Code Execution vulnerability

Priority - CWE-287: Improper Authentication

ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

LiquidJS is Vulnerable to Remote Code Execution

WordPress QA Analytics plugin <= 5.2.0.0 - Remote Code Execution (RCE) vulnerability

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

Link Factory - Backdoor

Unauthenticated Command Injection

Unauthenticated RCE

ERPNext: Possibility of server-side template injection due to missing validation

Dokploy: Remote Code Execution via volume-backup

Dokploy: Authenticated blind command injection via file mounts leads to direct remote host RCE on managed servers

Dokploy: OS Command Injection via Bitbucket `owner`/`repository` in `git clone`

Dokploy: Incomplete fix of CVE-2026-45628: Command Injection via Unvalidated Branch Fields in Compose Deployment Pipeline (server-side regex missing in compose.ts)

Dokploy: OS Command Injection via dockerImage field in database service deployment functions → HOST RCE

Multicloud-operators-subscription: multicloud-operators-subscription: hub and spoke serviceaccounts bound to wildcard rbac (*/*/*)

Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE

Cross-project instance move bypasses all project restrictions allowing host command execution

LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration

Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge

Project restriction bypass via instance migration config override

Root RCE via image backup.yaml symlink

Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root

IBM i is Affected By Remote Code Execution Vulnerability []

Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability

Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of CVE-2026-44966 fix)

Apache Allura: Git command injection

WordPress Nokri theme <= 1.6.6 - Broken Access Control vulnerability

WordPress Cartify theme <= 1.3.0.1 - Account Takeover vulnerability

WordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerability

WordPress SMS Alert Order Notifications plugin <= 3.9.7 - Privilege Escalation vulnerability

idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()

smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()

ipv6: ioam: refresh hdr pointer before ioam6_event()

net: bcmgenet: keep RBUF EEE/PM disabled

net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover

WordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerability

vCenter directory-traversal vulnerability

WebErpMesv2 has Unauthenticated RCE via Unrestricted File Upload in HR Expense scan_file (CWE-434)

UpSnap - Unauthenticated Initial-Superuser Takeover Chains to Root RCE via wake_cmd

YesWiki: Unauthenticated SQL Injection

WordPress Log in with Google plugin <= 1.4.2 - Broken Authentication vulnerability

WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability

WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability

WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability

An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow a remote unauthenticated attacker to login into the Fortiweb GUI/CLI with a random username and password

CVE-2026-18749

IBM i is Affected By Remote Code Execution Vulnerability in Line Printer Daemon []

IBM i is Affected By Multiple Vulnerabilities in the Debug Server

IBM Db2 Mirror for i is vulnerable to OS command injection []

PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document

Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options

Customer Email Verification for WooCommerce < 3.2.6 - Unauthenticated Account Takeover via Type-Juggling Authentication Bypass

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these locations.

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state. This allows the TPM to be unsealed via an unintended execution path or from another hardware platform.

Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. In January 2018, attackers actively exploited this vulnerability in the wild.

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on build 20200107; QTS 4.3.3.1161 on build 20200109; QTS 4.2.6 on build 20200109.

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).

The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system.

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all endpoints managed by the VSA server. If the ManagedIT.asmx page is available via the Kaseya VSA web interface, anyone with access to the page is able to run arbitrary SQL queries, both read and write, without authentication.

In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data.

OpenDJ: Authorization bypass in SASL PLAIN allowing a `proxied-auth` holder to impersonate any resolvable non-root user without an ACI proxy grant

Dokploy: Command Injection via dockerImage in buildRemoteDocker

Dokploy: Cross-organization IDOR in Dokploy backup destinations exposes another tenant's S3 credentials and backups

In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the AttributeFilter scheduler, creating an overlapping zone that conflicts with another tenant's zone. This enables cross-tenant DNS hijack (redirecting traffic to attacker-controlled IPs) and DNS denial of service (NODATA responses). Exploitation requires a multi-pool deployment with AttributeFilter enabled in scheduler_filters, which is a non-default but documented and supported configuration for self-service tiering.

UpSnap vulnerable to Remote Code Execution via IP Field Template Injection in wake_cmd/shutdown_cmd

TypeBot vulnerable to CSV injection in result export

Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

IBM i is Affected By Multiple Vulnerabilities in Navigator for i

MongoDB BI Connector ODBC driver may write outside an allocated buffer when handling oversized catalog object names

Command Injection via Malicious OCPP Server

Vitest: Browser Mode provider commands bypass the file-access permission gate

Flowise before 3.1.3 Sandbox Escape via Puppeteer

Microsoft UFO: Unauthenticated Mobile MCP access allows remote Android device control and screen disclosure

Yuxi has a JWT Authentication Bypass Leading to Cross-Instance Administrator Token Reuse

Authenticated Heap Overflow

SurrealDB before 2.2.2 SurrealQL Injection via export

Ninja Tables Pro 5.2.11 Embedded Malicious Code via Tampered Plugin Build

Fluent Forms Pro 6.2.7 Embedded Malicious Code via Tampered Plugin Build

WolfStack < 25.9.2 Hard-coded Secret Authentication Bypass via X-WolfStack-Secret

PeerTube: Cross-origin remote video takeover via Update activity

SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedle

DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header

Microsoft Office SharePoint Spoofing Vulnerability

CyberPanel < 3.0.0 Hard-coded JWT Secret Authentication Bypass via WebTerminal

WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerability

WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability

WordPress RealPress plugin <= 1.1.2 - SQL Injection vulnerability

WordPress If-So Dynamic Content Personalization plugin <= 1.10 - SQL Injection vulnerability

WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability

WordPress Listdom plugin <= 5.6.0 - SQL Injection vulnerability

WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection vulnerability

Priority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control

Priority – CWE-306: Missing Authentication for Critical Function

Cal.com Cal.diy 6.2.0 Stored XSS via BookingPageTagManager Analytics Tracking ID

Streambert Vulnerable to Remote Code Execution (RCE) via Unvalidated Auto-Updater IPC Handler

Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability

WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability

Path Traversal in IBM Desktop App

Unauthenticated Buffer Overflow in PROFINET Service

Fooocus webui vulnerable to Remote Code Execution

SiYuan before v3.7.4 Authorization Bypass via getAttributeViewSearchTarget

rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0

rsync < 3.5.0 Command Injection via Multiple Code Paths

sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock

kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default

Apache HttpComponents Client: TLS hostname verification silently disabled on the async transport (default config, MITM)

rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure

RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg

Priority – CWE-602: Client-Side Enforcement of Server-Side Security

Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor

Microsoft SharePoint Server Security Feature Bypass Vulnerability

rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode

rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header

Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

gRPC-Go has an authorization bypass via missing leading slash in :path

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped.

Flowise before 3.1.3 Sandbox Escape to RCE

Flowise before 3.1.3 Remote Code Execution via Custom MCP

Flowise before 3.1.3 Prompt Injection RCE via CSV Agent

Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV

Flowise before 3.1.3 Remote Code Execution via Airtable Agent

Acm-search-v2-rhel9: search-v2-operator: hub search cr collector.imageoverride propagated to every spoke as arbitrary container image

SurrealDB before 1.1.1 Format String via Scripting Functions

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user.

Electerm check folder size function may get attacked by unsafe folder name

Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)

rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry

rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling

rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args()

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Potential cache poisoning in JFrog Artifactory

Apache Airflow: DAG-author remote code execution on the Scheduler via a Serde `Callback` deserialization gadget

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Elevation of Privilege Vulnerability

fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()

net: devmem: reject dma-buf bind with non-page-aligned size or SG length

Azure Entra ID Spoofing Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Windows GDI+ Remote Code Execution Vulnerability

Windows SMBv3 Server Remote Code Execution Vulnerability

Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

Windows SMBv3 Server Remote Code Execution Vulnerability

Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability

Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Public Sector Payroll. Successful attacks of this vulnerability can result in takeover of Oracle Public Sector Payroll. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability

@cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Quarkus authorization bypass via semicolon path normalization inconsistency

Missing Authorization inAlanWeb SCADA

WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability

WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability

Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

PostgreSQL pg_dump heap buffer overflow executes arbitrary code

SMP security request

Bluetooth re-pairing with legitimate device can use lower security level

Bluetooth re-pairing can use a lower security level than previous

MongoDB BI Connector ODBC Driver Memory-Safety Issue When Handling Stored Procedure Output Parameters

Crafted database metadata may cause memory corruption in MongoDB BI Connector ODBC Driver

IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i is Affected By A Privilege Escalation Vulnerability []

PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client

IBM i is Affected By Remote Code Execution Vulnerabilities [, ]

IBM i is Affected By Remote Code Execution Vulnerabilities [, ]

IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i is Affected By Multiple Vulnerabilities in the Debug Server

IBM i is Affected By Multiple Vulnerabilities in Domain Name System

IBM i is Affected By Multiple Vulnerabilities in Domain Name System

PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code

PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code

forced re-pairing with already bonded device

PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound

PostgreSQL expression deparse allows SQL injection via EXTRACT argument

PostgreSQL type confusion via "internal" arguments

PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound

PostgreSQL pg_stat_statements heap buffer overflow executes arbitrary code

PostgreSQL refint plan cache type confusion executes arbitrary code

PostgreSQL plperl tied object heap buffer overflow executes arbitrary code

PostgreSQL to_char heap buffer overflow executes arbitrary code

PostgreSQL regexp heap buffer overflow executes arbitrary code

PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound

IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution

IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

Authentication Bypass

SQL Injection

Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes

scsi: qla2xxx: Implement ref count for SRB

GitPython before 3.1.54 Remote Code Execution via kwarg value smuggling

GitPython before 3.1.55 Environment Variable Exfiltration via Remote.add()

Budibase Server before 3.40.0 NoSQL Injection via JSON Parameter

Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch

Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncation

fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits

frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow

PostGIS address_standardizer Out-of-Bounds Write via standardize_address()

etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline

Shescape: Quadratic-time denial of service in flag-protection

rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall

rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion

rsync < 3.5.0 Algorithmic Complexity DoS via hash_search()

Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfillment Engine). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Service Fulfillment Manager. While the vulnerability is in Oracle Service Fulfillment Manager, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Service Fulfillment Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Service Fulfillment Manager accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N).

Zalktis: SQL injection via partner-controlled fields in imported e-invoices

CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. Attackers with an ‘in the middle’ position can send specially crafted data to a server causing a persistent denial of service.

Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage

Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion

Netty has Insufficient Bailiwick Validation for NS Records

Pathling $bulk-submit allows bearer-token exfiltration and persistent warehouse poisoning via unvalidated manifest output URLs

iskorotkov/avro: CPU Exhaustion in Avro Decoder

iskorotkov/avro: Integer Overflow in Avro Decoder

Meeting Room Booking System has server-side request forgery in import functionality

Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records

Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

SpdyStream: DOS on CRI

SQL Injection in AlanWeb SCADA

Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

cJSON 1.7.19 Wrong-Key Modification via JSON Pointer Escape Decoding

ColdFusion | Improper Input Validation (CWE-20)

SQL Query Validation Bypass in OpenSearch Direct Query

Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

FileRun 2026.2.0 RCE via Thumbnail Generation Command Injection

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Hongjing e-HR Unauthenticated SQL Injection via getSdutyTree

SurrealDB before 1.1.0 Denial of Service via HTTP Headers

ASP-CMS SQL Injection via commentList.asp id Parameter

CMS Admin SQL Injection via db_data.php table_name Parameter

File Browser before v2.63.22 Authorization Bypass via Recursive Operations

Flowise before 3.1.3 Sandbox Escape via Pandas Methods

Kestra: SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadata

Rainbond 6.9.7 Region API Cross-Enterprise IDOR via Tenant Access

rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing

Priority - CWE-284: Improper Access Control

Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync

Lightroom Classic | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Lightroom Classic | Deserialization of Untrusted Data (CWE-502)

Next.js: Server-side request forgery in applications using WebSocket upgrades

Axios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)

IDOR in Prospero Flow CRM allows cross-tenant product disclosure and hijacking

Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin

Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin

Open Recovery Mode

Access to Bootloader

Potential code smuggling via doc comments in cmd/cgo

Vim: Heap Buffer Overflow when Loading a Spell File

Acm-search-v2-rhel9: search-v2-operator: addonfactory.getvaluesfromaddonannotation enables arbitrary helm-values override per spoke

WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability

WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.10 - SQL Injection vulnerability

During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges.

During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges.

rsync < 3.5.0 Symlink Following Arbitrary File Overwrite

WordPress Form Maker by 10Web plugin <= 1.15.44 - SQL Injection vulnerability

WordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerability

WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability

WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability

Authorization Bypass Through User-Controlled Key in GitLab

IBM i is Affected By Multiple Vulnerabilities in SQL

Cluster-proxy: cluster-proxy: impersonation header injection in service-proxy grants cluster-admin on every managed cluster

Arbitrary file read+write on host via templates/ symlink in malicious image

Incorrect Authorization in GitLab

Serendipity before 2.6.0 SSRF via hex IPv4 and IPv6 addresses

amazing-print/amazing_print at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArray#grep. A specially named method containing Ruby interpolation syntax can be interpolated into a dynamically constructed eval string when grep is called with a block, resulting in Ruby code execution in the host process. Exploitation requires an application path that allows an attacker to influence dynamic method names.

KVM: x86: hyper-v: Bound the bank index when querying sparse banks

qed: fix double free in qed_cxt_tables_alloc()

rsync < 3.5.0 Arbitrary File Read via Symlink Following

rsync < 3.5.0 Path Traversal via Symlink Module Root

ColdFusion | Use of Hard-coded Cryptographic Key (CWE-321)

MongoDB BI Connector ODBC driver may write outside an allocated buffer when the setup dialog opens a data source with oversized path settings

IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to validate the integrity of the DataStore, a non-partitioned filesystem, responsible for storing configuration and cryptographic details. Crafted DataStore contents can impact service availability and/or allow for code execution in the context of high privilege.

FreeRDP: RDSTLS server authentication bypass: a credential-less Capabilities PDU is accepted at the auth step (fail-open `resultCode`)

rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg()

Windows Network Address Translation (NAT) Spoofing Vulnerability

Zoom Clients - Use After Free

Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

SVGO: removeScripts plugin leaves some executable scripts intact

AutoGPT: Webhook provider path confusion bypasses generic webhook secret verification

Velociraptor collect_client() Permissions Bypass

KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU

KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU

Priority – CWE-284: Improper Access Control

rsync < 3.5.0 Symlink Race Condition Directory Traversal

ishankportfolio: Stored Contact Form Submission Exposure via Public Client-Side Database Configuration

Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter

Apache Thrift: Swift Range crash in skip()

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

ColdFusion | Improper Input Validation (CWE-20)

WP Helper Premium < 4.7.6 - Unauthenticated Order Data Disclosure and Order Manipulation via Missing Order Key Validation

IBM i is Affected By Multiple Vulnerabilities in Host Servers

PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory

tarfile opened in streaming mode mishandles EOF

IBM® Db2® is vulnerable to privilege escalation with a specially crafted query

bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow

Rhacm: open cluster management (ocm): cross-cluster privilege escalation via improper kubernetes client certificate renewal validation

electerm's RDP clipboard file download may parse unsafe file name

SeaweedFS: Filer JWT allowed_prefixes literal prefix match allows cross-tenant access to sibling paths

A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker to improper access control via <insert attack vector here>

A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute arbitrary code via malicious packets.

Potential package cache integrity issue in JFrog Artifactory

WordPress Biagiotti Core plugin <= 2.1.1 - Local File Inclusion vulnerability

WordPress Foton Core plugin <= 1.1.1 - Local File Inclusion vulnerability

WordPress Barista theme <= 2.5.1 - Local File Inclusion vulnerability

WordPress Geo Mashup plugin <= 1.13.18 - Local File Inclusion vulnerability

wifi: iwlwifi: mvm: fix driver-set TX rates on old devices

Microsoft SharePoint Server Remote Code Execution Vulnerability

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows TCP/IP Remote Code Execution Vulnerability

RPC Runtime Library Remote Code Execution Vulnerability

WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Installed Base accessible data as well as unauthorized access to critical data or complete access to all Oracle Installed Base accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).

jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)

ColdFusion | Heap-based Buffer Overflow (CWE-122)

Next.js: Middleware / Proxy bypass through dynamic route parameter injection

Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

WordPress Travelfic Toolkit plugin <= 1.5.1 - Broken Access Control vulnerability

WordPress MStore API plugin <= 4.20.0 - Privilege Escalation vulnerability

Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes

GeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revision

IBM WebSphere Application Server Liberty is affected by a privilege escalation

IBM i is Affected By Multiple Vulnerabilities in Host Servers

IBM i is Affected By improper privilege management in Navigator for i

Openjdk-orb: unauthed class loading via iiop in eap

PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands

WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UI

Microsoft Exchange Server Elevation of Privilege Vulnerability

React Router vulnerable to XSS via Open Redirects

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these issues in the following QTS versions. QTS 4.4.2.1270 build 20200410 and later QTS 4.4.1.1261 build 20200330 and later QTS 4.3.6.1263 build 20200330 and later QTS 4.3.4.1282 build 20200408 and later QTS 4.3.3.1252 build 20200409 and later QTS 4.2.6 build 20200421 and later

Oh My Posh: Arbitrary command execution via template injection in the path segment

FreeCAD: FCStd path traversal allows arbitrary file write via unsanitized file attribute in PropertyFileIncluded::Restore()

Faker: helpers.fake exploitable into arbritary code execution

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

i2c: core: fix adapter deregistration race

Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count

Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count

Input: goodix - clamp the device-reported contact count

Input: iforce - bound the device-reported force-feedback effect index

Input: mms114 - fix touch indexing for MMS134S and MMS136

Input: touchwin - reset the packet index on every complete packet

Input: mms114 - reject an oversized device packet size

fpga: region: fix use-after-free in child_regions_with_firmware()

power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()

usb: gadget: net2280: Fix double free in probe error path

mm/damon/sysfs-schemes: delete tried region in regions_rmdirs()

sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path

smb: client: require net admin for CIFS SWN netlink

ALSA: pcm: Don't setup bogus iov_iter for silencing

ALSA: asihpi: Fix potential OOB array access at reading cache

net: hsr: defer node table free until after RCU readers

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Word Remote Code Execution Vulnerability

Microsoft Office Word Remote Code Execution Vulnerability

Microsoft Office Graphics Component Remote Code Execution Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

.NET Elevation of Privilege Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

Windows HTTP.sys Elevation of Privilege Vulnerability

Windows SMB Client Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Windows Schannel Elevation of Privilege Vulnerability

Windows License Manager Elevation of Privilege Vulnerability

Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Shell Elevation of Privilege Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Windows DHCP Client Elevation of Privilege Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

Windows Projected File System Elevation of Privilege Vulnerability

Windows Device Association Service Elevation of Privilege Vulnerability

Windows HTTP.sys Elevation of Privilege Vulnerability

Windows HTTP.sys Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows DHCP Client Elevation of Privilege Vulnerability

Windows HTTP.sys Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows Bind Filter Driver Elevation of Privilege Vulnerability

Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability

Windows Message Queuing Elevation of Privilege Vulnerability

Windows Message Queuing Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows Device Association Service Elevation of Privilege Vulnerability

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Windows Telephony Service Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Microsoft Digest Authentication Elevation of Privilege Vulnerability

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Windows Storage Elevation of Privilege Vulnerability

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Windows MIDI Service Module Elevation of Privileges Vulnerability

Windows HTTP.sys Elevation of Privilege Vulnerability

Windows Bind Filter Driver Elevation of Privilege Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows USB Driver Elevation of Privilege Vulnerability

Windows Display Enhancement Service Elevation of Privilege Vulnerability

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Windows Storage Elevation of Privilege Vulnerability

Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

Application Information Services Elevation of Privilege Vulnerability

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Windows Sensor Data Service Elevation of Privilege Vulnerability

Windows Telephony Service Elevation of Privilege Vulnerability

Windows Work Folder Service Elevation of Privilege Vulnerability

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.

Abrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directories

accel/ivpu: Fix signed integer truncation in IPC receive

Lightroom Classic | Out-of-bounds Write (CWE-787)

Lightroom Classic | Out-of-bounds Write (CWE-787)

Lightroom Classic | Out-of-bounds Write (CWE-787)

Lightroom Classic | Out-of-bounds Write (CWE-787)

Lightroom Classic | Out-of-bounds Write (CWE-787)

Lightroom Classic | Out-of-bounds Write (CWE-787)

Lightroom Classic | Out-of-bounds Write (CWE-787)

Lightroom Classic | Integer Overflow or Wraparound (CWE-190)

Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution.

Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

ColdFusion | Incorrect Authorization (CWE-863)

IBM i is Affected By An Improper Management Vulnerability in HTTP Server []

Incorrect Permission Assignment in Autodesk Installer Named Pipes

tarfile extraction filter bypass allows escaping the destination directory

Linux-pam: linux-pam directory traversal

block, bfq: don't move oom_bfqq

bfq: fix use-after-free in bfq_dispatch_request

f2fs: fix to do sanity check on curseg->alloc_type

mt76: mt7921: fix crash when startup fails.

dm integrity: fix memory corruption when tag_size is less than digest size

drm/amd/display: fix array index out of bound error in DCN32 DML

peci: cpu: Fix use-after-free in adev_release()

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extraction) folder is ignored, thus treating the filename as an absolute path.

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.

Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

GitPython before 3.1.54 Remote Code Execution via --template

MCP Atlassian is a Model Context Protocol (MCP): Arbitrary file read via missing path validation in confluence_upload_attachment

Cursor: Sandbox escape via launching privileged containers

Next AI Draw.io 0.4.16 SSRF via DNS Rebinding in parse-url

Multicloud-operators-subscription: multicloud-operators-subscription: fetchchannelreferences honours channel.spec.secretref.namespace enabling cross-namespace secret exfiltration

WordPress Directories Pro plugin <= 2.0.5 - Privilege Escalation vulnerability

WordPress AI Hub theme <= 1.3.10 - Arbitrary File Download vulnerability

Lightroom Classic | Incorrect Authorization (CWE-863)

ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

IBM i is Affected By Out-of-Bounds Read Vulnerability []

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read

WatchGuard Firebox admd Out of Bounds Write Vulnerability

File Browser 2.50.0 through 2.63.21 JWT Expiration Bypass

OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal

WordPress MailChimp For WooCommerce plugin < 6.2 - SQL Injection vulnerability

Activepieces: V8 Isolate Sandbox Bypass via importFresh Module Loading

rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode

Bypassing passkey entry in legacy pairing

Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode

Adobe Commerce | Incorrect Authorization (CWE-863)

Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret

IBM i is Affected By Multiple Vulnerabilities in the Debug Server

js-yaml: Exponential parsing time in the flow collections leads to denial of service

py-libp2p: yamux connection DoS via oversized data frame

node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection

Hub: Unauthenticated WebSocket RPC Waiter Resource Exhaustion

Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion

http4s-blaze-server: Unbounded WebSocket message aggregation

NextAuth.js: getToken() throws an uncaught exception on malformed Bearer authorization headers

Budibase: Unauthenticated user information disclosure via public tenant user lookup endpoint

Kestra: Unauthenticated management `/worker` endpoint exposes live task configuration and plaintext credentials

WordPress KiviCare plugin <= 4.5.1 - Sensitive Data Exposure vulnerability

Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM

Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)

Apache Airflow: Authorization bypass in the Backfill API through conflicting interpretations of the backfill id

crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in RubyLLM::Utils.underscore on Ruby 3.1.x. A very long crafted class, agent, or tool name can cause excessive CPU consumption and a denial of service.

Filter expression injection via forged keyset pagination cursor in Ash

WordPress Arvow AI SEO Writer plugin <= 1.5.3 - Broken Access Control vulnerability

WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.1.1 - Broken Access Control vulnerability

WordPress iCARRY plugin <= 2.9 - Sensitive Data Exposure vulnerability

WordPress WooCommerce Appointments plugin <= 5.3.8 - Sensitive Data Exposure vulnerability

WordPress SMEPay: UPI Gateway for WooCommerce plugin <= 1.0.5 - Payment Bypass vulnerability

WordPress REST API Log plugin <= 1.7.1 - Sensitive Data Exposure vulnerability

WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability

WordPress WPJAM Basic plugin <= 7.0.2.1 - Sensitive Data Exposure vulnerability

WordPress Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) plugin <= 1.0.7 - Broken Access Control vulnerability

ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks. This vulnerability is addressed in servicetalk version 0.42.65.

svcrdma: wake sq waiters when the transport closes

wifi: iwlwifi: mld: stop TX during firmware restart

HAPI FHIR: JSON utility parser unbounded recursion causes StackOverflow denial of service

WordPress WPMobile.App plugin <= 11.77 - Broken Access Control vulnerability

WordPress OMGF Pro plugin <= 5.2.7 - Arbitrary File Download vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability