CVE ID :CVE-2018-25338 Published : May 17, 2026, 1:16 p.m. | 5 hours, 42 minutes ago Description :Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit…
CVE ID :CVE-2018-25339 Published : May 17, 2026, 1:16 p.m. | 5 hours, 42 minutes ago Description :Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques. Attackers can…
CVE ID :CVE-2018-25332 Published : May 17, 2026, 1:16 p.m. | 5 hours, 42 minutes ago Description :GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands by exploiting weak secret token generation and insecure file…
CVE ID :CVE-2018-25333 Published : May 17, 2026, 1:16 p.m. | 5 hours, 42 minutes ago Description :Nordex N149 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…
CVE ID :CVE-2021-47976 Published : May 16, 2026, 4:16 p.m. | 2 hours, 37 minutes ago Description :TextPattern CMS 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload arbitrary PHP files by exploiting the plugin upload functionality. Attackers…
CVE ID :CVE-2021-47977 Published : May 16, 2026, 4:16 p.m. | 2 hours, 37 minutes ago Description :WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the file…
CVE ID :CVE-2021-47979 Published : May 16, 2026, 4:16 p.m. | 2 hours, 37 minutes ago Description :WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating parameters in AJAX requests.…
CVE ID :CVE-2021-47973 Published : May 16, 2026, 4:16 p.m. | 2 hours, 37 minutes ago Description :Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note…
CVE ID :CVE-2021-47974 Published : May 16, 2026, 4:16 p.m. | 2 hours, 37 minutes ago Description :VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate…
CVE ID :CVE-2026-8695 Published : May 15, 2026, 5:16 p.m. | 1 hour, 17 minutes ago Description :radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote attackers to trigger memory corruption by sending a valid qfThreadInfo response followed…