Today

GitLab GitLab · Integer Overflow or Wraparound in GitLab

IBM Langflow OSS · Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS · Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS · Langflow OSS is affected by multiple vulnerabilities

frappe frappe · Frappe before 15.121.0 and 16.x before 16.34.0 Path Traversal RCE via File Upload

Ajax Load More AjaxLoadMore Cache · WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability

Progress Software WS_FTP Server · Improper Authentication in Progress WS_FTP Server

Progress Software WS_FTP Server · OS Command Injection in Progress WS_FTP Server

Dahua Intelligent Connection Center · Dahua Intelligent Connection Center command injection

Gravity Forms Gravity Forms · Gravity Forms <= 3.1.2 - Unauthenticated PHP Object Injection via Post Custom Field

IBM Langflow OSS · Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS · Langflow OSS is affected by multiple vulnerabilities

ThemeREX RexCoin · WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability

ThemeREX Quirky · WordPress Quirky theme <= 1.23 - PHP Object Injection vulnerability

ThemeREX Printy · WordPress Printy theme <= 1.13.0 - PHP Object Injection vulnerability

ThemeREX Preservation · WordPress Preservation theme <= 1.15 - PHP Object Injection vulnerability

ThemeREX Ozisti · WordPress Ozisti theme <= 1.1.10 - PHP Object Injection vulnerability

Von Eyal Fitoussi GEO my WordPress · WordPress GEO my WordPress plugin <= 4.5.5.4 - PHP Object Injection vulnerability

ThemeREX Legal Stone · WordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerability

ThemeREX Le Truffe · WordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerability

ThemeREX Marcell · WordPress Marcell theme <= 1.2.14 - PHP Object Injection vulnerability

ThemeREX Meals & Wheels · WordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerability

ThemeREX Mission · WordPress Mission theme <= 1.22 - PHP Object Injection vulnerability

ThemeREX Motorix · WordPress Motorix theme <= 1.11 - PHP Object Injection vulnerability

ThemeREX Muzicon · WordPress Muzicon theme <= 1.15 - PHP Object Injection vulnerability

ThemeREX Nuts · WordPress Nuts theme <= 1.12 - PHP Object Injection vulnerability

ThemeREX Orpheus · WordPress Orpheus theme <= 1.8 - PHP Object Injection vulnerability

ThemeREX Filmax · WordPress Filmax theme <= 1.1.11 - PHP Object Injection vulnerability

ThemeREX Avventure · WordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerability

ThemeREX Bonbon · WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerability

ThemeREX Coinpress · WordPress Coinpress theme <= 1.0.15 - PHP Object Injection vulnerability

ThemeREX Edge Decor · WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerability

ThemeREX EmojiNation · WordPress EmojiNation theme <= 1.0.12 - PHP Object Injection vulnerability

ThemeREX Gamezone · WordPress Gamezone theme <= 1.1.11 - PHP Object Injection vulnerability

ThemeREX Gamic · WordPress Gamic theme <= 1.19 - PHP Object Injection vulnerability

ThemeREX Good Homes · WordPress Good Homes theme <= 1.3.13 - PHP Object Injection vulnerability

ThemeREX Gunslinger · WordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerability

Zoho Flow Zoho Flow · WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability

IBM Langflow OSS · Langflow OSS is affected by multiple vulnerabilities

Yamaha Corporation NWR100 · Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability.

Veeam Management Pack for Microsoft System Center · A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization E…

ServiceNow ServiceNow AI Platform · Sandbox Escape via Table Rotation in ServiceNow AI Platform

RT-Labs P-Net · Out-of-bounds write when parsing AR Vendor Block requests

OpenText Advanced Authentication Server · Logon bypass (trust of attacker-controlled completed-methods list)

StylemixThemes Motors · WordPress Motors plugin <= 1.4.126 - SQL Injection vulnerability

monkeytypegame monkeytype · Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN

randombit botan · Botan: Integer overflow when reporting block size in FFI can cause memory corruption

agno-agi agno · Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection

Teltonika Networks RUT · API permission bypass via logic bug

zitadel zitadel · ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie

docat-org docat · Docat has Arbitrary File Upload exists in Upload API

socfortress CoPilot · SOCFortress CoPilot: Stored case-report template injection permits backend code execution

Progress Software WS_FTP Server · Privilege Escalation via Missing Authorization in WS_FTP Manager

Progress Software WS_FTP Server · Host Administrator Path Containment Bypass in Progress WS_FTP Server

Progress Software WS_FTP Server · Command Injection via FTP Notification Variables in Progress WS_FTP Server

Progress Software WS_FTP Server · Virtual Folder Path Confinement Bypass in Progress WS_FTP Server