Sicherheitslücken (CVE) VulDB Updates

CVE-2025-14033 | ghera74 ilGhera Support System for WooCommerce Plugin up to 1.3.0 on WordPress get_ticket_content_callback authorization (EUVD-2025-209822)

A vulnerability, which was classified as problematic, was found in ghera74 ilGhera Support System for WooCommerce Plugin up to 1.3.0 on WordPress.

Sicherheitslücken (CVE) VulDB Updates

CVE-2025-14767 | wpclever WPC Badge Management for WooCommerce Plugin up to 3.1.6 on WordPress Shortcode wpcbm_best_seller text cross site scripting (EUVD-2025-209823)

A vulnerability was found in wpclever WPC Badge Management for WooCommerce Plugin up to 3.1.6 on WordPress. It has been classified as problematic.

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-103531 | OpenSC up to 0.27.1 card-setcos.c setcos_construct_fci_44 type_attr stack-based overflow (ID 3812 / EUVD-2026-90449)

A vulnerability classified as problematic was found in OpenSC up to 0.27.1.

Sicherheitslücken (CVE) VulDB Updates 2

CVE-2026-19667 | ISC BIND 9 up to 9.20.27-S1 named input validation (Nessus ID 352233)

A vulnerability described as critical has been identified in ISC BIND 9 up to 9.18.50/9.20.27/9.21.25/9.18.50-S1/9.20.27-S1.

Sicherheitslücken (CVE) VulDB Updates

CVE-2022-36440 | Frrouting frr-bgpd 8.3.0 BGP Open Packet peek_for_as4_capability assertion (Nessus ID 352219)

A vulnerability classified as problematic was found in Frrouting frr-bgpd 8.3.0.

Sicherheitslücken (CVE) VulDB Updates

CVE-2025-21901 | Linux Kernel up to 6.12.17/6.13.5 bnxt_re null pointer dereference (Nessus ID 352240 / WID-SEC-2025-0683)

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.17/6.13.5.

Sicherheitslücken (CVE) VulDB Updates 2

CVE-2020-14559 | Oracle MySQL Server up to 5.6.48/5.7.30/8.0.20 Information Schema information disclosure (Nessus ID 352245)

A vulnerability identified as critical has been detected in Oracle MySQL Server up to 5.6.48/5.7.30/8.0.20.

can1357/oh-my-pi v18.4.6 (01.10.2026)

Release v18.4.6 von can1357/oh-my-pi auf GitHub: @oh-my-pi/pi-agent-core Added Added APIs for improving agent follow-up and steering workflow…

Sicherheitslücken (CVE) VulDB Updates

CVE-2022-45290 | Kbase Doc 1.0 IndexController.java denial of service (EUVD-2022-48190)

A vulnerability was found in Kbase Doc 1.0. It has been rated as problematic.

Sicherheitslücken (CVE) VulDB Updates 2

CVE-2022-45287 | Temenos CWX 8.5.6 Registration.aspx access control (EUVD-2022-48187)

A vulnerability described as critical has been identified in Temenos CWX 8.5.6. This impacts an unknown function of the file Registration.aspx.

Sicherheitslücken (CVE) VulDB Updates

CVE-2022-45283 | GPAC 2.0.0 MP4box svg_attributes.c smil_parse_time_list stack-based overflow (Issue 2295 / EUVD-2022-48183)

A vulnerability, which was classified as critical, has been found in GPAC 2.0.0.

Sicherheitslücken (CVE) DEV Community

Deno CVE-2026-103473 — CVSS 8.1 Command Injection in node:child_process on Windows

If your Deno app on Windows passes untrusted input to spawn, spawnSync, or exec with shell: true — patch now. CVE-2026-103473 (CVSS 8.

Sicherheitslücken (CVE) VulDB Updates 4

CVE-2022-45280 | EyouCMS 1.6.0 /login.php Url cross site scripting (Issue 32 / EUVD-2022-48180)

A vulnerability was found in EyouCMS 1.6.0. It has been declared as problematic. Impacted is an unknown function of the file /login.php.

Sicherheitslücken (CVE) VulDB Updates

CVE-2022-45276 | YJCMS 1.0.9 user_edit.html information disclosure (EUVD-2022-48176)

A vulnerability categorized as problematic has been discovered in YJCMS 1.0.9.

Sicherheitslücken (CVE) VulDB Updates

CVE-2022-45278 | Jizhicms 2.3.3 get_fields.html sql injection (Issue 83 / EUVD-2022-48178)

A vulnerability, which was classified as critical, has been found in Jizhicms 2.3.3.

Sicherheitslücken (CVE) DEV Community

CVE-2026-12227 — How a Validate-Then-Mutate Bug Turns Into Unauthenticated LFI in Visual Composer

Overview Field Value CVE ID CVE-2026-12227 CVSS 3.1 9.8 (Critical) — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE CWE-98 (Improper Control of Filename for…

Sicherheitslücken (CVE) VulDB Updates

CVE-2022-45275 | oretnom23 Dynamic Transaction Queuing System 1.0 PHP File ajax.php?action=save_settings unrestricted upload (EUVD-2022-48175)

A vulnerability classified as problematic has been found in oretnom23 Dynamic Transaction Queuing System 1.0.

Sicherheitslücken (CVE) VulDB Updates

CVE-2022-45227 | Dragino Lora LG01 18ed40 IoT 4.3.4 Backup File /lib exposure of information through directory listing (EUVD-2022-48127)

A vulnerability has been found in Dragino Lora LG01 18ed40 IoT 4.3.4 and classified as critical.

Sicherheitslücken (CVE) DEV Community

A first-day response plan for CVE-2026-84411 in MikroTik RouterOS

A first-day response plan for CVE-2026-84411 in MikroTik RouterOS What is known CVE-2026-84411 affects MikroTik RouterOS before 7.24.

Reverse Engineering Reverse Engineering

BitBlt capture in DWM: suppressing the readback flag (g_pComposition+0x196A) bypasses DisplayAffinity and visual hiding — Part 3

submitted by /u/HawkeyeLab [link] [comments]

Sicherheitslücken (CVE) VulDB Updates

CVE-2020-11656 | Oracle ZFS Storage Appliance Kit 8.8 Operating System Image use after free (Nessus ID 352245)

A vulnerability, which was classified as very critical, was found in Oracle ZFS Storage Appliance Kit 8.8.

Sicherheitslücken (CVE) VulDB Updates

CVE-2020-11656 | SQLite up to 3.31.1 ALTER TABLE Statement use after free (ssa-389290 / Nessus ID 352245)

A vulnerability was found in SQLite up to 3.31.1 and classified as critical.

Proof of Concept (PoC) Exploit-DB.com RSS Feed

[webapps] TigerGraph_Community_Edition 4.2.4 - arbitrary file write

TigerGraph_Community_Edition 4.2.4 - arbitrary file write

Proof of Concept (PoC) Exploit-DB.com RSS Feed

[webapps] WordPress 7.0.2 - Path Travesal

WordPress 7.0.2 - Path Travesal

Proof of Concept (PoC) Exploit-DB.com RSS Feed

[webapps] Food-Ordering 1.0 - LFI

Sicherheitslücken (CVE) Exploit-DB.com RSS Feed

[remote] Ecava_ntegraXor IGX_16.0.701.10 - RCE

Ecava_ntegraXor IGX_16.0.701.10 - RCE

Proof of Concept (PoC) Exploit-DB.com RSS Feed

[webapps] Krayin CRM 2.2.4 - IDOR

Sicherheitslücken (CVE) Exploit-DB.com RSS Feed

[webapps] InvoicePlane 1.7.1 - RCE

InvoicePlane 1.7.1 - RCE

Proof of Concept (PoC) Exploit-DB.com RSS Feed

[webapps] SuiteCRM 8.10.1 - Authenticated SSRF

SuiteCRM 8.10.1 - Authenticated SSRF

Proof of Concept (PoC) Exploit-DB.com RSS Feed

[webapps] POMS oretnom23v1.0 - SQLi vulnerabilities

POMS oretnom23v1.0 - SQLi vulnerabilities