CVE ID :CVE-2026-120239 Published : Nov. 1, 2026, 6:17 p.m. | 45 minutes ago Description :A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of the file /bin/ioos of the component WireGuard CLI Handler. Performing a…
CVE ID :CVE-2026-62048 Published : Nov. 1, 2026, 4:18 p.m. | 2 hours, 44 minutes ago Description :Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Liquid Web / StellarWP BookIt bookit allows SQL Injection.This issue affects…
CVE ID :CVE-2026-120338 Published : Nov. 1, 2026, 4:18 p.m. | 2 hours, 44 minutes ago Description :Prefab UI’s Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for…
CVE ID :CVE-2026-120232 Published : Nov. 1, 2026, 3:17 p.m. | 3 hours, 45 minutes ago Description :A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the library shield.sys of…
CVE ID :CVE-2026-120209 Published : Oct. 31, 2026, 5:25 p.m. | 1 hour, 1 minute ago Description :AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline. Attackers can mint a token with reportCode…
CVE ID :CVE-2026-120205 Published : Oct. 31, 2026, 5:25 p.m. | 1 hour, 1 minute ago Description :Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers::getSummary() that allows unauthenticated attackers to inject scripts via unescaped customer names. Attackers can register…
CVE ID :CVE-2026-120203 Published : Oct. 31, 2026, 5:25 p.m. | 1 hour, 1 minute ago Description :ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users to execute shell commands through mockjs templates. Attackers…
CVE ID :CVE-2026-120201 Published : Oct. 31, 2026, 5:25 p.m. | 1 hour, 1 minute ago Description :Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain super-administrator access by injecting query conditions into the JPOM-USER-TOKEN header.…
CVE ID :CVE-2026-102212 Published : Oct. 31, 2026, 4:16 p.m. | 2 hours, 10 minutes ago Description :Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console server appliances allows an unauthenticated remote attacker to crash…
CVE ID :CVE-2026-119332 Published : Oct. 30, 2026, 7:57 p.m. | 22 minutes ago Description :Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a045964, FinalizationRegistry::cleanup() in Libraries removed a dead record from m_records, retained an iterator to the next FinalizationRecord,…