| المجال | الحدث / CVE | المصدر | الوصف | الاستغلال | الخطورة | الأنظمة المتأثرة | نوع التهديد | الحلول | 📅 تاريخ النشر |
|---|---|---|---|---|---|---|---|---|---|
| Exploit |
CVE-2018-14667
CVSS 9.8 CVE-2018-14667 exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2018-14667. CVSS 9.8. | No | 🔴 Critical | Exploit | Refer to CVE-2018-14667 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit |
CVE-2023-31126
CVSS 9.6 xwiki__xwiki-commons_CVE-2023-31126_14-10-3 exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2023-31126. CVSS 9.6. | No | 🔴 Critical | Exploit | Refer to CVE-2023-31126 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Network |
CVE-2019-7482
CVSS 9.8 sonicwall-cve-2019-7482 exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2019-7482. CVSS 9.8. | No | 🔴 Critical | Exploit | Refer to CVE-2019-7482 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Vulnerability |
CVE-2026-67822
CVSS 9.8 go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset exploi… 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2026-67822. CVSS 9.8. | No | 🔴 Critical | Vulnerability | Refer to CVE-2026-67822 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web |
CVE-2026-49410
CVE-2026-49410 - OpenHuman /auth/telegram CSRF allows attacker-controlled sessio… 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-49410 Published : Oct. 16, 2026, 10:17 p.m. | 4 hours, 10 minutes ago Des… | No | 🔴 Critical | Vulnerability | Update to v0.56.0 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Vulnerability |
CVE-2026-111823
CVSS 9.8 CVE-2026-111823 — Mage OSS through 0.9.80 before 76c4f46 can proceed with sessio… 📄 التفاصيل ← |
NVD | Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknow… | No | 🔴 Critical | Vulnerability | Refer to CVE-2026-111823 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| WordPress |
CVE-2026-110653
CVSS 9.1 CVE-2026-110653 — The Appointment Booking Plugin – LatePoint | Calendar & Sc… 📄 التفاصيل ← |
NVD | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for Word… | No | 🔴 Critical | WordPress | Vulnerability | Update to v5.7.4 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| General | 🏴☠️ Everest has just published a new victim : Kissei Shoji 📄 التفاصيل ← | Ransomware.live | [AI generated] N/A I don't have reliable, verified information about a specific company ca… | No | 🟠 High | AI Attack | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web |
CVE-2026-107083
Exploit for CVE-2026-107083 📄 التفاصيل ← |
Vulners | CVE-2026-107083 — SQL Injection via Unquoted Numeric Concatenation in SLiMS 9.8.0 Admin Modules Note… | No | 🟠 High | Exploit | Update to v9.8.0 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Linux |
CVE-2026-8933
Exploit for CVE-2026-8933 📄 التفاصيل ← |
Vulners | CVE-2026-8933 — snap-confine mount-namespace race → local root shell Working PoC. Full local privile… | PoC Only | 🟠 High | Vulnerability | Refer to CVE-2026-8933 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web | pythonSQLInjection_Practica 📄 التفاصيل ← | Vulners | Simulación y Mitigación de SQL Injection 1. Descripción del proyecto Este proyecto académico demuest… | No | 🟠 High | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web |
CVE-2026-107082
Exploit for CVE-2026-107082 📄 التفاصيل ← |
Vulners | CVE-2026-107082 — SQL Injection via opachide / promoted GET Parameters in SLiMS 9.8.0 Admin Bibliogr… | No | 🟠 High | Exploit | Refer to CVE-2026-107082 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web | ReadyScript SQL Injection 📄 التفاصيل ← | Vulners | The vulnerability of the ReadyScript e-commerce management system lies in the lack of protective mea… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | ReadyScript e-commerce management system Sequence Data Compromise 📄 التفاصيل ← | Vulners | The vulnerability of the ReadyScript e-commerce management system is related to the improper impleme… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | ReadyScript e-commerce management system Session Management 📄 التفاصيل ← | Vulners | The vulnerability of the ReadyScript e-commerce management system is related to improper session man… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | ReadyScript e-commerce management system File Upload 📄 التفاصيل ← | Vulners | The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loadin… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | Windows Update Orchestrator Service Privilege Escalation 📄 التفاصيل ← | Vulners | The vulnerability of the Windows Update Orchestrator Service on Windows operating systems is related… | No | 🟠 High | Microsoft Windows | Exploit | Microsoft Patch Tuesday |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Exploit | IAM Proxy Component Compromise Information Disclosure 📄 التفاصيل ← | Vulners | The vulnerability of the IAM Proxy component of the Identity & Access Management tool in Pla… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| iOS | DesktopServicesHelper Privilege Escalation 📄 التفاصيل ← | Vulners | The vulnerability of DesktopServicesHelper in macOS operating systems is related to synchronization … | No | 🟠 High | Apple macOS | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Exploit | vvdecapp reconstructCoeff Memory Use After Free 📄 التفاصيل ← | Vulners | The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the u… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web | CRM Platform SQL Injection 📄 التفاصيل ← | Vulners | The vulnerability of the platform for creating individual web applications in CRM involves the failu… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web | CRM Platform Path Traversal DoS 📄 التفاصيل ← | Vulners | The vulnerability of the platform for creating individual web applications in CRM involves incorrect… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web | CRM Platform Unlimited Resource Abuse 📄 التفاصيل ← | Vulners | The vulnerability of the platform for creating individual web applications in CRM involves unlimited… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web | CRM Platform Authentication Bypass 📄 التفاصيل ← | Vulners | The vulnerability of the platform for creating individual web applications in CRM systems is related… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | h2 library Resource Consumption DoS 📄 التفاصيل ← | Vulners | The vulnerability of the h2 library in the Rust programming language is related to an uncontrolled r… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web | DIAFAN.CMS SQL Injection 📄 التفاصيل ← | Vulners | The vulnerability of the DIAFAN.CMS website content management system is related to the lack of meas… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | TOPAZ Metron PTS Time Synchronization Command Injection 📄 التفاصيل ← | Vulners | The vulnerability of the TOPAZ Metron PTS time synchronization device is related to the failure to t… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| OT/ICS | Tekon SCADA Privilege Escalation 📄 التفاصيل ← | Vulners | The vulnerability of the “Tekon” SCADA system is related to the incorrect assignment of permissions … | No | 🟠 High | ICS/OT | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | KOMTEK Cassa Kurier Module Authentication Bypass 📄 التفاصيل ← | Vulners | Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Websit… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit |
CVE-2021-21401
CVSS 7.1 CVE-2021-21401_nanopb-c_AOSP10_R33 exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2021-21401. CVSS 7.1. | No | 🟠 High | Exploit | Refer to CVE-2021-21401 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit |
CVE-2024-52940
CVSS 7.5 abdal-anydesk-remote-ip-detector exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2024-52940. CVSS 7.5. | No | 🟠 High | Exploit | Refer to CVE-2024-52940 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit |
CVE-2021-42362
CVSS 8.8 nate158g-m-w-n-l-p-d-a-o-e exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2021-42362. CVSS 8.8. | No | 🟠 High | Exploit | Refer to CVE-2021-42362 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| VMware | Leveraging GenAI for Simplifying Zero Trust and Accelerating Threat Defense in V… 📄 التفاصيل ← | VMware Security | While organizations continue to advance their zero trust lateral security initiatives, routine firew… | No | 🟠 High | VMware | AI Attack | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Vulnerability |
CVE-2026-111853
CVSS 8.8 CVE-2026-111853 — An issue was discovered on Tektronix 3 Series MDO devices befo… 📄 التفاصيل ← |
NVD | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vul… | No | 🟠 High | Vulnerability | Refer to CVE-2026-111853 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web |
CVE-2026-111854
CVSS 8.1 CVE-2026-111854 — An issue was discovered on Tektronix 3 Series MDO devices befo… 📄 التفاصيل ← |
NVD | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerabil… | No | 🟠 High | Vulnerability | Refer to CVE-2026-111854 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Web |
CVE-2026-111855
CVSS 7.5 CVE-2026-111855 — An issue was discovered on Tektronix 3 Series MDO devices befo… 📄 التفاصيل ← |
NVD | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerabil… | No | 🟠 High | Exploit | Refer to CVE-2026-111855 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| WordPress |
CVE-2026-104734
CVSS 7.2 CVE-2026-104734 — The Kirki – Freeform Page Builder, Website Builder & Custo… 📄 التفاصيل ← |
NVD | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerab… | No | 🟠 High | WordPress | PHP | Exploit | Update to v6.3.2 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-107762
CVSS 7.5 CVE-2026-107762 — The Kirki – Freeform Page Builder, Website Builder & Custo… 📄 التفاصيل ← |
NVD | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerab… | No | 🟠 High | WordPress | Exploit | Update to v6.3.2 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-109208
CVSS 7.2 CVE-2026-109208 — The LearnPress – WordPress LMS Plugin for Create and Sell Onli… 📄 التفاصيل ← |
NVD | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vul… | No | 🟠 High | WordPress | Exploit | Update to v4.4.10 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Web | pythonSQLInjection_Practica exploit 📄 التفاصيل ← | Sploitus | Proof-of-concept exploit. | PoC Only | 🟡 Medium | PoC Research | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | TrueConf Server Code Execution 📄 التفاصيل ← | Vulners | The vulnerability of the TrueConf Server software is related to the lack of measures taken to neutra… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | Aquarius L311 Driver Access Control 📄 التفاصيل ← | Vulners | The vulnerability of the Aquarius L311 device’s driver for the Avora operating system is related to … | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | vvdecapp Component Buffer Overflow DoS 📄 التفاصيل ← | Vulners | The vulnerability of the setBufferingPeriodSEI function in the vvdecapp VVdeC component is related t… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | vvdecapp readAlf Heap Buffer Overflow DoS 📄 التفاصيل ← | Vulners | The vulnerability of the readAlf function in the vvdecapp VVdeC decoder lies in the use of memory af… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | vvdecapp Decoder Heap Buffer Overflow DoS 📄 التفاصيل ← | Vulners | The vulnerability of the createSubPicRefBufs function in the vvdecapp VVdeC decoder lies in the use … | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | vvdecapp decoder reconstructCoeff Heap Buffer Overflow DoS 📄 التفاصيل ← | Vulners | The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the u… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | Shtab Project Access Control Unauthorized Access 📄 التفاصيل ← | Vulners | The vulnerability of the Shtab project and task management service is related to deficiencies in acc… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | Centralized Printer MFP Supervision Unauthorized Access 📄 التفاصيل ← | Vulners | The vulnerability of the software for centralized printer control and the Printsupervision printer s… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | Dr.Web ConfigD Executable Buffer Overflow DoS 📄 التفاصيل ← | Vulners | The vulnerability of the Dr.Web ConfigD executable module is related to insufficient protection of o… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | MaxPatrol EDR DoS 📄 التفاصيل ← | Vulners | The vulnerability of the control console of the MaxPatrol EDR detection and response system is relat… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | GEO.RITM REST API Auth Bypass Info Disclosure 📄 التفاصيل ← | Vulners | The vulnerability of the software interface REST API of the GEO.RITM software lies in the lack of au… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | REDAAM IT-infrastructure Management System Auth Bypass 📄 التفاصيل ← | Vulners | The vulnerability of the “REDAAM” IT-infrastructure centralized management system is related to defi… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | CommuniGate Pro Access Control Unauthorized Modification 📄 التفاصيل ← | Vulners | The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks … | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| OT/ICS | Tekon SCADA Code Execution 📄 التفاصيل ← | Vulners | The vulnerability of the “Tekon” SCADA system exists due to the lack of measures taken to neutralize… | No | 🟡 Medium | ICS/OT | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | json-sanitizer exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Office | excelpeek exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | PAKURI-THON exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | ChromeAlone exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | pygoat exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | sightline exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | flounder exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | house exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | RTSPbrute exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | kube-knark exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | BobTheSmuggler exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Exploit | Emora-Project exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Containers |
CVE-2026-96627
CVE-2026-96627 - Arcane: Delegated users:update permission allows admin account … 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-96627 Published : Oct. 16, 2026, 10:18 p.m. | 4 hours, 9 minutes ago Desc… | No | 🟡 Medium | Docker | Vulnerability | Refer to CVE-2026-96627 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Containers |
CVE-2026-96626
CVE-2026-96626 - Arcane: Container-registry credential exfiltration via URL repo… 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-96626 Published : Oct. 16, 2026, 10:18 p.m. | 4 hours, 9 minutes ago Desc… | No | 🟡 Medium | Docker | Vulnerability | Refer to CVE-2026-96626 NVD advisory |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-107763
CVSS 4.3 CVE-2026-107763 — The Fastcache by Host.it plugin for WordPress is vulnerable to… 📄 التفاصيل ← |
NVD | The Fastcache by Host.it plugin for WordPress is vulnerable to authorization bypass in all versions … | No | 🟡 Medium | WordPress | Vulnerability | Update to v1.7.5 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-111601
CVSS 6.1 CVE-2026-111601 — The Hippoo Mobile App for WooCommerce plugin for WordPress is … 📄 التفاصيل ← |
NVD | The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scr… | No | 🟡 Medium | WordPress | Vulnerability | Update to v1.12.0 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Malware | PSA: Malware Found in Some Rank Math SEO PRO 3.0.123 Downloads 📄 التفاصيل ← | Wordfence | Rank Math has disclosed that some copies of Rank Math SEO PRO version 3.0.123 contained malware. Acc… | No | 🟢 Low | Malware | Update to v3.0.123 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| General | 🏴☠️ Everest has just published a new victim : Chugoku Bend 📄 التفاصيل ← | Ransomware.live | [AI generated] N/A I don't have reliable, verifiable information about a company specifica… | No | 🟢 Low | AI Attack | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| General | 🏴☠️ Everest has just published a new victim : Taekwang Network 📄 التفاصيل ← | Ransomware.live | [AI generated] N/A | No | 🟢 Low | AI Attack | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Android | 🏴☠️ Everest has just published a new victim : Brenner Base Tunnel 📄 التفاصيل ← | Ransomware.live | [AI generated] The Brenner Base Tunnel (Brennerbasistunnel, BBT) is a major railway infrastructure p… | No | 🟢 Low | AI Attack | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
|
| Threat Intel | 🏴☠️ N0n has just published a new victim : Prafesta Ind. e Com. de Embalagens Lt… 📄 التفاصيل ← | Ransomware.live | packaging manufacturing (extrusion) · Brazil | Senior Sapiens ERP and Vetorh HR payroll platform; eS… | No | 🟢 Low | SAP | Vulnerability | Apply vendor security patch |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| WordPress |
CVE-2026-111602
CVSS 3.7 CVE-2026-111602 — The Appointment Booking Plugin – LatePoint | Calendar & Sc… 📄 التفاصيل ← |
NVD | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for Word… | No | 🟢 Low | WordPress | Exploit | Update to v5.7.4 |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
| Vulnerability |
CVE-2026-110758
CVE-2026-110758 — GHSA: Text::CSV_XS versions before 1.65 for Perl read before t… 📄 التفاصيل ← |
GHSA | Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_w… | No | 🟢 Low | Vulnerability |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
||
| Vulnerability |
CVE-2026-110757
CVE-2026-110757 — GHSA: Text::CSV_XS versions before 1.65 for Perl allow record … 📄 التفاصيل ← |
GHSA | Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers… | No | 🟢 Low | Vulnerability |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
||
| Vulnerability |
CVE-2026-110756
CVE-2026-110756 — GHSA: Text::CSV_XS versions before 1.65 for Perl drop the end … 📄 التفاصيل ← |
GHSA | Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8… | No | 🟢 Low | Vulnerability |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|
||
| Vulnerability |
CVE-2026-110755
CVE-2026-110755 — GHSA: Text::CSV_XS versions before 1.65 for Perl allow quadrat… 📄 التفاصيل ← |
GHSA | Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder… | No | 🟢 Low | Vulnerability |
UTC: 2026-10-17
EDT: 2026-10-17
SA: 2026-10-17
|