CVE ID :CVE-2026-108963 Published : Oct. 11, 2026, 7:38 p.m. | 46 minutes ago Description :databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user.…
CVE ID :CVE-2026-108905 Published : Oct. 11, 2026, 3:16 p.m. | 3 hours, 7 minutes ago Description :pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allows unauthenticated attackers to bypass API access checks by…
CVE ID :CVE-2026-108902 Published : Oct. 11, 2026, 3:16 p.m. | 3 hours, 7 minutes ago Description :pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated members to delete arbitrary…
CVE ID :CVE-2026-108863 Published : Oct. 11, 2026, 2:17 p.m. | 4 hours, 6 minutes ago Description :Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all…
CVE ID :CVE-2026-108865 Published : Oct. 11, 2026, 2:17 p.m. | 4 hours, 6 minutes ago Description :AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid access tokens because the OAuth2 server never authenticates a…
CVE ID :CVE-2026-108860 Published : Oct. 11, 2026, 2:17 p.m. | 4 hours, 6 minutes ago Description :BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge bearer tokens using the hard-coded Jwt:Key in WebStarter appsettings.json. Attackers…
CVE ID :CVE-2026-81797 Published : Oct. 10, 2026, 7:36 p.m. | 40 minutes ago Description :Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions. Severity: 9.8 | CRITICAL Visit the link for more…
CVE ID :CVE-2026-78535 Published : Oct. 10, 2026, 7:36 p.m. | 40 minutes ago Description :Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline,…
CVE ID :CVE-2026-78533 Published : Oct. 10, 2026, 7:36 p.m. | 40 minutes ago Description :Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline,…
CVE ID :CVE-2026-78531 Published : Oct. 10, 2026, 7:36 p.m. | 40 minutes ago Description :Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline,…