| المجال | الحدث / CVE | المصدر | الوصف | الاستغلال | الخطورة | الأنظمة المتأثرة | نوع التهديد | الحلول | 📅 تاريخ النشر |
|---|---|---|---|---|---|---|---|---|---|
| Vulnerability |
CVE-2026-18659
CVE-2026-18659 📄 التفاصيل ← |
Vulners | A flaw was found in Eclipse Jetty. A remote attacker can bypass security constraints by sending HTTP… | No | 🔴 Critical | Vulnerability | Refer to CVE-2026-18659 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-18660
CVE-2026-18660 📄 التفاصيل ← |
Vulners | A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to bypass access cont… | No | 🔴 Critical | Vulnerability | Refer to CVE-2026-18660 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit |
CVE-2018-15139
CVSS 9.9 AMENDER-pipeline exploit 📄 التفاصيل ← |
Sploitus | Proof-of-concept exploit for CVE-2018-15139 and CVE-2018-15142. CVSS 9.9. | PoC Only | 🔴 Critical | PoC Research | Refer to CVE-2018-15139 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit |
CVE-2020-8813
CVSS 9.3 CVE-2020-8813-Cacti-RCE-in-graph_realtime exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2020-8813. CVSS 9.3. | No | 🔴 Critical | Exploit | Refer to CVE-2020-8813 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Web |
CVE-2024-2961
Exploit for Out-of-bounds Write in Gnu Glibc 📄 التفاصيل ← |
Vulners | CVE-2024-2961 — PHP File Read to RCE glibc iconv 배포 정보 운영진 GZCTF 입력용 | 항목 | 값 | |---|---| | 이미지 빌드 결… | Yes | 🔴 Critical | PHP | Exploit | Refer to CVE-2024-2961 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Exploit |
CVE-2021-41117
CVSS 9.1 keypairvuln exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2021-41117. CVSS 9.1. | No | 🔴 Critical | Exploit | Refer to CVE-2021-41117 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit |
CVE-2019-14314
CVSS 9.8 CVE-2019-14314 exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2019-14314. CVSS 9.8. | No | 🔴 Critical | Exploit | Refer to CVE-2019-14314 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit |
CVE-2026-2699
CVSS 9.8 CVE-2026-2699 exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2026-2699. CVSS 9.8. | No | 🔴 Critical | Exploit | Refer to CVE-2026-2699 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit |
CVE-2018-9995
CVSS 9.8 DVRFaultNET exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2018-9995. CVSS 9.8. | Yes | 🔴 Critical | Exploit | Refer to CVE-2018-9995 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit |
CVE-2016-5636
CVE-2016-5636 exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2016-5636. CVSS 10. | No | 🔴 Critical | Exploit | Refer to CVE-2016-5636 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Web |
CVE-2019-18839
FUDforum-XSS-RCE exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2019-18839 and CVE-2019-18873. CVSS 9. | No | 🔴 Critical | Exploit | Refer to CVE-2019-18839 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit |
CVE-2025-2825
CVSS 9.8 ShatteredFTP exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2025-2825 and CVE-2025-31161. CVSS 9.8. | No | 🔴 Critical | Exploit | Refer to CVE-2025-2825 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111356
CVE-2026-111356 - MacCMS v10 through 2026.1000.4056 Account Takeover via Passwor… 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-111356 Published : 15 octobre 2026 22:19 | 5 heures, 30 minutes ago Descr… | No | 🔴 Critical | Vulnerability | Refer to CVE-2026-111356 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111283
CVE-2026-111283 - BMC Helix Network Management before 26.3.01 Authentication Byp… 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-111283 Published : 15 octobre 2026 22:19 | 5 heures, 30 minutes ago Descr… | No | 🔴 Critical | Vulnerability | Refer to CVE-2026-111283 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111281
CVE-2026-111281 - Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Cod… 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-111281 Published : 15 octobre 2026 22:19 | 5 heures, 30 minutes ago Descr… | No | 🔴 Critical | Vulnerability | Refer to CVE-2026-111281 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Browser |
CVE-2026-110922
CVE-2026-110922 - Google Chrome Prerender Use-After-Free Vulnerability 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-110922 Published : 15 octobre 2026 22:19 | 5 heures, 30 minutes ago Descr… | No | 🔴 Critical | Google Chrome | Chromium | Vulnerability | Refer to CVE-2026-110922 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-111444
CVSS 9.8 CVE-2026-111444 — Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB wit… 📄 التفاصيل ← |
NVD | Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKS… | No | 🔴 Critical | MySQL | Vulnerability | Refer to CVE-2026-111444 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-109515
CVSS 9.8 CVE-2026-109515 — The MailOptin – Popup, Optin Forms & Email Newsletters for… 📄 التفاصيل ← |
NVD | The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugi… | No | 🔴 Critical | WordPress | Vulnerability | Update to v1.2.78 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-109219
CVSS 9.8 CVE-2026-109219 — The Mang Board plugin for WordPress is vulnerable to Arbitrary… 📄 التفاصيل ← |
NVD | The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, an… | No | 🔴 Critical | WordPress | Vulnerability | Update to v2.4.4 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-104798
CVSS 9.8 CVE-2026-104798 — The My Calendar – Accessible Event Manager plugin for WordPres… 📄 التفاصيل ← |
NVD | The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Privilege Escalatio… | No | 🔴 Critical | WordPress | PHP | Vulnerability | Update to v3.8.7 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-108837
CVE-2026-108837 | Apache Kylin Computed Column resource consumption 📄 التفاصيل ← |
VulDB | A vulnerability has been found in Apache Kylin and classified as problematic. This impacts an unknow… | No | 🔴 Critical | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| General | greptile-rce-poc 📄 التفاصيل ← | Vulners | greptile-rce-poc TREX eval harness... | PoC Only | 🟠 High | PoC Research | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit |
CVE-2026-81983
CVSS 7.8 Critical Adobe Acrobat Flaw Lets Malicious PDFs Trigger One-Click Memory Corrupt… 📄 التفاصيل ← |
Cyber Security News | Adobe has fixed a flaw in Acrobat and Acrobat Reader that lets a malicious PDF corrupt memory when a… | No | 🟠 High | Exploit | Refer to CVE-2026-81983 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Linux | Exploit for Use After Free in Linux Linux_Kernel 📄 التفاصيل ← | Vulners | Samsung Root Kit — Offline Version Android App DF Chain Preferred · SRK Chain Fallback · DFE Persist… | No | 🟠 High | Android | Exploit | Update to v1.0.0 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Exploit |
CVE-2018-0114
CVSS 7.5 JWTweak exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2018-0114. CVSS 7.5. | No | 🟠 High | Exploit | Refer to CVE-2018-0114 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | The vulnerability of the ReadyScript e-commerce management system, related to th… 📄 التفاصيل ← | Vulners | The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loadin… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | The vulnerability of the ReadyScript e-commerce management system lies in the im… 📄 التفاصيل ← | Vulners | The vulnerability of the ReadyScript e-commerce management system is related to the improper impleme… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | The vulnerability of the ReadyScript e-commerce management system lies in the la… 📄 التفاصيل ← | Vulners | The vulnerability of the ReadyScript e-commerce management system lies in the lack of protective mea… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | The vulnerability of the ReadyScript e-commerce management system, related to im… 📄 التفاصيل ← | Vulners | The vulnerability of the ReadyScript e-commerce management system is related to improper session man… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | The vulnerability of the IAM Proxy component of the Identity & Access Manage… 📄 التفاصيل ← | Vulners | The vulnerability of the IAM Proxy component of the Identity & Access Management tool in Pla… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Browser |
CVE-2011-3026
CVSS 6.8 cve-2011-3026-firefox exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2011-3026. CVSS 6.8. | No | 🟠 High | Mozilla Firefox | Exploit | Refer to CVE-2011-3026 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Exploit |
CVE-2022-23935
CVSS 7.8 CVE-2022-23935 exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2022-23935. CVSS 7.8. | No | 🟠 High | Exploit | Refer to CVE-2022-23935 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Malware | No click required: How the ad industry became a pipeline for mercenary spyware 📄 التفاصيل ← | CSO Online | That ad you just scrolled past on your phone but barely spared a look or click? It could be tracking… | No | 🟠 High | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Windows |
CVE-2018-20250
CVSS 7.8 CVE-2018-20250-WINRAR-ACE-GUI exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2018-20250. CVSS 7.8. | Yes | 🟠 High | Exploit | Refer to CVE-2018-20250 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit |
CVE-2023-39910
CVSS 7.5 RAMnesia-Attack exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2023-39910 and CVE-2025-6202. CVSS 7.5. | No | 🟠 High | Exploit | Refer to CVE-2023-39910 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit |
CVE-2025-11177
CVSS 7.5 CVE-2025-11177 exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2025-11177. CVSS 7.5. | No | 🟠 High | Exploit | Refer to CVE-2025-11177 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit |
CVE-2025-68921
CVSS 7.8 CVE-2025-68921 exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2025-68921. CVSS 7.8. | No | 🟠 High | Exploit | Refer to CVE-2025-68921 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit |
CVE-2025-24132
CVSS 8.8 AirBorne-PoC exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2025-24132 and CVE-2025-24252. CVSS 8.8. | PoC Only | 🟠 High | PoC Research | Refer to CVE-2025-24132 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111280
CVE-2026-111280 - snap7 through 1.4.3 Out-of-Bounds Write via TSnap7MicroClient:… 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-111280 Published : 15 octobre 2026 22:19 | 5 heures, 30 minutes ago Descr… | No | 🟠 High | Vulnerability | Refer to CVE-2026-111280 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Browser |
CVE-2026-110921
CVE-2026-110921 - Google Chrome V8 Use-After-Free Vulnerability 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-110921 Published : 15 octobre 2026 22:19 | 5 heures, 30 minutes ago Descr… | No | 🟠 High | Google Chrome | Chromium | Vulnerability | Refer to CVE-2026-110921 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Browser |
CVE-2026-110919
CVE-2026-110919 - Google Chrome V8 Use-After-Free Vulnerability 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-110919 Published : 15 octobre 2026 22:19 | 5 heures, 30 minutes ago Descr… | No | 🟠 High | Google Chrome | Chromium | Vulnerability | Refer to CVE-2026-110919 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Ransomware | F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer … 📄 التفاصيل ← | Dark Reading | Built from decades of threat intelligence research, the new resource explains scams from the victims… | No | 🟠 High | Intel | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Exploit |
CVE-2026-111210
CVSS 7.3 CVE-2026-111210 — A vulnerability was determined in bitcoinj up to 0.17. Affecte… 📄 التفاصيل ← |
NVD | A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection o… | No | 🟠 High | Exploit | Refer to CVE-2026-111210 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-75941
CVSS 8 CVE-2026-75941 — A potential vulnerability was reported in the Lenovo Legion Zon… 📄 التفاصيل ← |
NVD | A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusivel… | No | 🟠 High | Vulnerability | Refer to CVE-2026-75941 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Web |
CVE-2026-84823
CVSS 7.1 CVE-2026-84823 — A flaw was found in WildFly. A user with the `Monitor` role, wh… 📄 التفاصيل ← |
NVD | A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based… | No | 🟠 High | Exploit | Refer to CVE-2026-84823 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-92629
CVSS 7.3 CVE-2026-92629 — A potential improper authorization vulnerability was reported i… 📄 التفاصيل ← |
NVD | A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distribut… | No | 🟠 High | Vulnerability | Refer to CVE-2026-92629 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Windows |
CVE-2026-111378
CVSS 7.5 CVE-2026-111378 — FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled reso… 📄 التفاصيل ← |
NVD | FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in pars… | No | 🟠 High | Vulnerability | Refer to CVE-2026-111378 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Windows |
CVE-2026-111379
CVSS 7.3 CVE-2026-111379 — FreeRDP before 3.32.0 contains a heap buffer overflow vulnerab… 📄 التفاصيل ← |
NVD | FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v… | No | 🟠 High | Vulnerability | Refer to CVE-2026-111379 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Windows |
CVE-2026-111380
CVSS 8.8 CVE-2026-111380 — FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow… 📄 التفاصيل ← |
NVD | FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_ma… | No | 🟠 High | Apple iOS | Apple macOS | Vulnerability | Refer to CVE-2026-111380 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Windows |
CVE-2026-111381
CVSS 7.3 CVE-2026-111381 — FreeRDP before 3.32.0 contains a heap buffer overflow vulnerab… 📄 التفاصيل ← |
NVD | FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v… | No | 🟠 High | Vulnerability | Refer to CVE-2026-111381 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Windows |
CVE-2026-111382
CVSS 8.8 CVE-2026-111382 — FreeRDP before 3.32.0 contains a client-side heap out-of-bound… 📄 التفاصيل ← |
NVD | FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaT… | No | 🟠 High | Vulnerability | Refer to CVE-2026-111382 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Web |
CVE-2026-111389
CVSS 7.7 CVE-2026-111389 — Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x… 📄 التفاصيل ← |
NVD | Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL injecti… | No | 🟠 High | Vulnerability | Refer to CVE-2026-111389 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| WordPress |
CVE-2026-109400
CVSS 7.5 CVE-2026-109400 — The InstaWP Connect – 1-click WP Staging & Migration plugi… 📄 التفاصيل ← |
NVD | The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Privi… | No | 🟠 High | WordPress | Vulnerability | Update to v0.1.4 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-107659
CVSS 7.5 CVE-2026-107659 — The Modula Image Gallery – Photo Grid & Video Gallery plug… 📄 التفاصيل ← |
NVD | The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to Sens… | No | 🟠 High | WordPress | Vulnerability | Update to v3.0.11 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-103895
CVSS 8.1 CVE-2026-103895 — The miniOrange OTP Login, Verification and SMS Notifications p… 📄 التفاصيل ← |
NVD | The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to A… | No | 🟠 High | WordPress | Vulnerability | Update to v5.5.8 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-110590
CVSS 7.5 CVE-2026-110590 — The Klarna for WooCommerce plugin for WordPress is vulnerable … 📄 التفاصيل ← |
NVD | The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all version… | No | 🟠 High | WordPress | Exploit | Update to v4.13.3 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-107746
CVSS 7.5 CVE-2026-107746 — The FunnelKit – Funnel Builder for WooCommerce Checkout plugin… 📄 التفاصيل ← |
NVD | The FunnelKit – Funnel Builder for WooCommerce Checkout plugin for WordPress is vulnerable to author… | No | 🟠 High | WordPress | Vulnerability | Update to v3.16.0 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-103525
CVSS 7.5 CVE-2026-103525 — The FluentCart A New Era of eCommerce – Faster, Lighter, and S… 📄 التفاصيل ← |
NVD | The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnera… | No | 🟠 High | WordPress | Vulnerability | Update to v1.7.0 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-109998
CVSS 7.2 CVE-2026-109998 — The Mang Board plugin for WordPress is vulnerable to Stored Cr… 📄 التفاصيل ← |
NVD | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conte… | No | 🟠 High | WordPress | PHP | Vulnerability | Update to v2.4.3 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-111114
CVSS 7.5 CVE-2026-111114 — The Nexter Extension – Security, Performance, Code Snippets &a… 📄 التفاصيل ← |
NVD | The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress … | No | 🟠 High | WordPress | Vulnerability | Update to v4.7.11 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-109221
CVSS 8.1 CVE-2026-109221 — The Groundhogg — CRM, Newsletters, and Marketing Automation pl… 📄 التفاصيل ← |
NVD | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to ar… | No | 🟠 High | WordPress | Vulnerability | Update to v4.9.3 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-108776
CVE-2026-108776 | Apache Kylin sql injection 📄 التفاصيل ← |
VulDB | A vulnerability was found in Apache Kylin and classified as critical. This affects an unknown part. … | No | 🟠 High | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-108762
CVE-2026-108762 | Apache Kylin path traversal 📄 التفاصيل ← |
VulDB | A vulnerability classified as critical was found in Apache Kylin. This impacts an unknown function. … | No | 🟠 High | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-97339
CVSS 7.2 CVE-2026-97339 — The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPr… 📄 التفاصيل ← |
NVD | The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Sit… | No | 🟠 High | WordPress | Vulnerability | Update to v7.5.5 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-109990
CVSS 7.2 CVE-2026-109990 — The Flying Scripts: Delay JavaScript to Improve Site Speed &am… 📄 التفاصيل ← |
NVD | The Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin for WordPress is… | No | 🟠 High | WordPress | Vulnerability | Update to v1.2.4 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Vulnerability |
CVE-2026-111451
CVSS 7.8 CVE-2026-111451 — Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or esc… 📄 التفاصيل ← |
NVD | Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and packag… | No | 🟠 High | Vulnerability | Refer to CVE-2026-111451 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit |
CVE-2026-111446
CVSS 8.6 CVE-2026-111446 — Wheels 4.0.0 through 4.1.2 exposes password-less development t… 📄 التفاصيل ← |
NVD | Wheels 4.0.0 through 4.1.2 exposes password-less development tools under /wheels/* to remote clients… | No | 🟠 High | Exploit | Refer to CVE-2026-111446 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111445
CVSS 8.1 CVE-2026-111445 — Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scop… 📄 التفاصيل ← |
NVD | Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condit… | No | 🟠 High | Vulnerability | Refer to CVE-2026-111445 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| WordPress |
CVE-2026-109207
CVSS 7.2 CVE-2026-109207 — The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, New… 📄 التفاصيل ← |
NVD | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator… | No | 🟠 High | WordPress | Vulnerability | Update to v5.2.11 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Vulnerability |
CVE-2026-111447
CVSS 8.1 CVE-2026-111447 — Wheels 1.1 through 4.1.2 resolves nestedProperties() records b… 📄 التفاصيل ← |
NVD | Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking … | No | 🟠 High | Vulnerability | Refer to CVE-2026-111447 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| WordPress |
CVE-2026-107758
CVSS 7.2 CVE-2026-107758 — The Colibri Page Builder plugin for WordPress is vulnerable to… 📄 التفاصيل ← |
NVD | The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the &… | No | 🟠 High | WordPress | Vulnerability | Update to v1.0.390 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-93953
CVSS 8 CVE-2026-93953 — The Backuply – Backup, Restore, Migrate and Clone plugin for Wo… 📄 التفاصيل ← |
NVD | The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injectio… | No | 🟠 High | WordPress | Exploit | Update to v1.5.8 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-104745
CVSS 8.1 CVE-2026-104745 — The Customer Email Verification for WooCommerce plugin for Wor… 📄 التفاصيل ← |
NVD | The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Esca… | No | 🟠 High | WordPress | Vulnerability | Update to v3.3.0 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Exploit | hugegraph-toolchain exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | jf-helper exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | Relapse-Exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | PoC Research | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | Relapse-Exploit 📄 التفاصيل ← | Vulners | No description... | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Linux | Linus Torvalds Reveals Claude Code Wrote Linux Kernel Patches and Test Programs 📄 التفاصيل ← | Cyber Security News | Linus Torvalds has disclosed that Claude Code helped write Linux kernel patches, test programs, revi… | No | 🟡 Medium | Linux Kernel | AI Attack | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Linux |
CVE-2026-99999
Critical Linux Kernel Flaw Lets Attackers Escape Virtual Machines and Take Contr… 📄 التفاصيل ← |
Cyber Security News | A critical flaw in the Linux kernel may allow an attacker-controlled virtual machine (VM) to breach … | No | 🟡 Medium | Linux Kernel | Vulnerability | Refer to CVE-2026-99999 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Exploit | dcipher exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Windows | NetNTLMtoSilverTicket exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | osv-scanner exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Enterprise | keycloak exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | responsible-ai-toolbox exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | osmedeus exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | thc-hydra exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | AMENDER-pipeline 📄 التفاصيل ← | Vulners | AMENDER: Automated Metasploit Module ENgineering and Diagnostic Exploit Runner A semi-automated pipe… | PoC Only | 🟡 Medium | PoC Research | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | auth exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | sccmhunter exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | commix exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | Blacklist3r exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | OSSEM exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | The vulnerability of the TrueConf Server software, related to the failure to tak… 📄 التفاصيل ← | Vulners | The vulnerability of the TrueConf Server software is related to the lack of measures taken to neutra… | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | The vulnerability of the Windows Update Orchestrator Service on Windows operatin… 📄 التفاصيل ← | Vulners | The vulnerability of the Windows Update Orchestrator Service on Windows operating systems is related… | No | 🟡 Medium | Microsoft Windows | Exploit | Microsoft Patch Tuesday |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Exploit |
CVE-2020-0014
CVSS 5.5 CVE-2020-0014-Toast exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2020-0014. CVSS 5.5. | No | 🟡 Medium | Exploit | Refer to CVE-2020-0014 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | wesng exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | Chankro exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | insmod_block exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit |
CVE-2026-20637
CVSS 6.2 CVE-2026-20637-AppleSEPKeyStore-UAF exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2026-20637. CVSS 6.2. | No | 🟡 Medium | Exploit | Refer to CVE-2026-20637 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | nDPI exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | google-dorks-bug-bounty exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | ByteCaster exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | GHSA-g48h-h5pc-396j exploit 📄 التفاصيل ← | Sploitus | Proof-of-concept exploit. | PoC Only | 🟡 Medium | PoC Research | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit |
CVE-2018-18955
CVE-2018-18955 exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2016-8655 and CVE-2016-9793. CVSS 7. | No | 🟡 Medium | Exploit | Refer to CVE-2018-18955 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | exactor-waf-guardian exploit 📄 التفاصيل ← | Sploitus | Proof-of-concept exploit. | PoC Only | 🟡 Medium | PoC Research | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | professional-services exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Threat Intel |
CVE-2026-79417
CVSS 5.3 CVE-2026-79417 exploit 📄 التفاصيل ← |
Sploitus | Exploit for CVE-2026-79417. CVSS 5.3. | No | 🟡 Medium | IOC | Refer to CVE-2026-79417 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | ASVS exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit | SnafflerParser exploit 📄 التفاصيل ← | Sploitus | Exploit. | No | 🟡 Medium | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Linux |
CVE-2026-64507
Exploit for CVE-2026-64507 📄 التفاصيل ← |
Sploitus | Proof-of-concept exploit for CVE-2026-64507 and CVE-2026-64508. | PoC Only | 🟡 Medium | Vulnerability | Refer to CVE-2026-64507 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111366
CVE-2026-111366 - cool-admin-midway through 8.0.0 Authorization Bypass via /admi… 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-111366 Published : 15 octobre 2026 22:19 | 5 heures, 29 minutes ago Descr… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111366 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111352
CVE-2026-111352 - ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST A… 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-111352 Published : 15 octobre 2026 22:19 | 5 heures, 30 minutes ago Descr… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111352 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111347
CVE-2026-111347 - go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /ba… 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-111347 Published : 15 octobre 2026 22:19 | 5 heures, 30 minutes ago Descr… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111347 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111330
CVE-2026-111330 - JuggleIM im-server through 1.8.16 Weak Password Hashing via Un… 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-111330 Published : 15 octobre 2026 22:19 | 5 heures, 30 minutes ago Descr… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111330 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111329
CVE-2026-111329 - JuggleIM im-server through 1.8.16 Default Admin Credentials in… 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-111329 Published : 15 octobre 2026 22:19 | 5 heures, 30 minutes ago Descr… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111329 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| AI/LLM |
CVE-2026-111322
CVE-2026-111322 - Archon 0.2.13 through 0.11.1 Missing Authentication via /api/*… 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-111322 Published : 15 octobre 2026 22:19 | 5 heures, 30 minutes ago Descr… | No | 🟡 Medium | AI Attack | Refer to CVE-2026-111322 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111312
CVE-2026-111312 - OpenHealth through 0.2.0 Missing Authentication via /api/healt… 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-111312 Published : 15 octobre 2026 22:19 | 5 heures, 30 minutes ago Descr… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111312 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111282
CVE-2026-111282 - iso14229 before 0.10.1 Out-of-Bounds Read via Handle_0x38_Requ… 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-111282 Published : 15 octobre 2026 22:19 | 5 heures, 30 minutes ago Descr… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111282 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111279
CVE-2026-111279 - Dragonfly through 2.0.2 Unbounded Memory Allocation via Negati… 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-111279 Published : 15 octobre 2026 22:19 | 5 heures, 30 minutes ago Descr… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111279 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111277
CVE-2026-111277 - NivoCart through 2.5.1 Guest Order Invoice Disclosure via acco… 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-111277 Published : 15 octobre 2026 22:19 | 5 heures, 30 minutes ago Descr… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111277 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Browser |
CVE-2026-110920
CVE-2026-110920 - Google Chrome V8 Memory Corruption 📄 التفاصيل ← |
MITRE CVE High | CVE ID :CVE-2026-110920 Published : 15 octobre 2026 22:19 | 5 heures, 30 minutes ago Descr… | No | 🟡 Medium | Google Chrome | Chromium | Vulnerability | Refer to CVE-2026-110920 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Vulnerability |
CVE-2026-16754
CVSS 4.8 CVE-2026-16754 — A potential improper certificate validation vulnerability was r… 📄 التفاصيل ← |
NVD | A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, d… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-16754 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-16755
CVSS 5.3 CVE-2026-16755 — A potential vulnerability was reported in Lenovo Smart Camera C… 📄 التفاصيل ← |
NVD | A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Ch… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-16755 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-89057
CVSS 6.8 CVE-2026-89057 — A potential authentication bypass vulnerability was reported in… 📄 التفاصيل ← |
NVD | A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-89057 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-89062
CVSS 5.5 CVE-2026-89062 — A potential out-of-bounds write vulnerability was reported in t… 📄 التفاصيل ← |
NVD | A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver th… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-89062 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-92777
CVSS 6.4 CVE-2026-92777 — A potential vulnerability was reported in some Lenovo Tablets t… 📄 التفاصيل ← |
NVD | A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical … | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-92777 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| WordPress |
CVE-2026-100159
CVSS 4.8 CVE-2026-100159 — The Popup Box plugin for WordPress is vulnerable to Arbitrary … 📄 التفاصيل ← |
NVD | The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4.1 … | No | 🟡 Medium | WordPress | Vulnerability | Update to v6.4.1 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Vulnerability |
CVE-2026-105227
CVE-2026-105227 — This vulnerability allows remote attackers to disclose sensiti… 📄 التفاصيل ← |
NVD | This vulnerability allows remote attackers to disclose sensitive information on affected installatio… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-105227 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-105228
CVE-2026-105228 — This vulnerability allows remote attackers to disclose sensiti… 📄 التفاصيل ← |
NVD | This vulnerability allows remote attackers to disclose sensitive information on affected installatio… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-105228 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit |
CVE-2026-109812
CVE-2026-109812 — A missing authorization vulnerability exists in the internal A… 📄 التفاصيل ← |
NVD | A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa&… | No | 🟡 Medium | Exploit | Refer to CVE-2026-109812 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit |
CVE-2026-109813
CVE-2026-109813 — A hard-coded cryptographic key vulnerability exists in the `/u… 📄 التفاصيل ← |
NVD | A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's … | No | 🟡 Medium | Exploit | Refer to CVE-2026-109813 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Exploit |
CVE-2026-111212
CVSS 4.8 CVE-2026-111212 — A security flaw has been discovered in ImprintLab Medical-SAM-… 📄 التفاصيل ← |
NVD | A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by… | No | 🟡 Medium | ICS/OT | Refer to CVE-2026-111212 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| OT/ICS |
CVE-2026-111237
CVSS 5.3 CVE-2026-111237 — A weakness has been identified in Ultralytics FastSAM up to b4… 📄 التفاصيل ← |
NVD | A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52… | No | 🟡 Medium | ICS/OT | Refer to CVE-2026-111237 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Windows |
CVE-2026-111373
CVSS 5.3 CVE-2026-111373 — FreeRDP before 3.32.0 contains a NULL pointer dereference vuln… 📄 التفاصيل ← |
NVD | FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport t… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111373 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Windows |
CVE-2026-111374
CVSS 5.3 CVE-2026-111374 — FreeRDP from 3.30.0 before 3.32.0 contains a resource exhausti… 📄 التفاصيل ← |
NVD | FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam client… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111374 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Windows |
CVE-2026-111375
CVSS 4.8 CVE-2026-111375 — FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds rea… 📄 التفاصيل ← |
NVD | FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL cl… | No | 🟡 Medium | Microsoft Windows | Vulnerability | Microsoft Patch Tuesday |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Windows |
CVE-2026-111376
CVSS 5 CVE-2026-111376 — FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bound… 📄 التفاصيل ← |
NVD | FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows cl… | No | 🟡 Medium | Microsoft Windows | Vulnerability | Microsoft Patch Tuesday |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Windows |
CVE-2026-111377
CVSS 6.5 CVE-2026-111377 — FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassem… 📄 التفاصيل ← |
NVD | FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannel… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111377 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111383
CVSS 6.5 CVE-2026-111383 — Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion… 📄 التفاصيل ← |
NVD | Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnerability that allows authenticat… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111383 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111384
CVSS 6.5 CVE-2026-111384 — Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnera… 📄 التفاصيل ← |
NVD | Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability in the dashboard file manager W… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111384 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111385
CVSS 4.8 CVE-2026-111385 — Nezha from 2.1.0 before 2.3.15 contains a host header injectio… 📄 التفاصيل ← |
NVD | Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool th… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111385 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111386
CVSS 4.3 CVE-2026-111386 — Nezha from 1.7.0 before 2.3.15 contains an information disclos… 📄 التفاصيل ← |
NVD | Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows authenti… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111386 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111387
CVSS 6.5 CVE-2026-111387 — Nezha from 2.2.5 before 2.3.15 contains an information disclos… 📄 التفاصيل ← |
NVD | Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenti… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111387 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111388
CVSS 5.4 CVE-2026-111388 — Frappe Framework before 15.120.0 and 16.x before 16.33.0 does … 📄 التفاصيل ← |
NVD | Frappe Framework before 15.120.0 and 16.x before 16.33.0 does not enforce the per-user restrict_ip a… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111388 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Browser |
CVE-2026-110913
CVE-2026-110913 — Chrome: CVE-2026-110913[ 📄 التفاصيل ← |
Chrome Releases | Chrome security fix: CVE-2026-110913[ | Release: Extended Stable Update for Desktop | No | 🟡 Medium | Google Chrome / ChromeOS | Vulnerability | Update Chrome to latest — chromereleases.googleblog.com |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Browser |
CVE-2026-110918
CVE-2026-110918 — Chrome: CVE-2026-110918[ 📄 التفاصيل ← |
Chrome Releases | Chrome security fix: CVE-2026-110918[ | Release: Extended Stable Update for Desktop | No | 🟡 Medium | Google Chrome / ChromeOS | Vulnerability | Update Chrome to latest — chromereleases.googleblog.com |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-64944
CVE-2026-64944 | Apache Answer cross site scripting 📄 التفاصيل ← |
VulDB | A vulnerability described as problematic has been identified in Apache Answer. Impacted is an unknow… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-79633
CVE-2026-79633 | Apache Answer authorization 📄 التفاصيل ← |
VulDB | A vulnerability marked as problematic has been reported in Apache Answer. This issue affects some un… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-79624
CVE-2026-79624 | Apache Answer improper authentication 📄 التفاصيل ← |
VulDB | A vulnerability labeled as problematic has been found in Apache Answer. This vulnerability affects u… | No | 🟡 Medium | Apache HTTP Server | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-96562
CVSS 6.5 CVE-2026-96562 — The The Broken Link Checker plugin for WordPress is vulnerable … 📄 التفاصيل ← |
NVD | The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in a… | No | 🟡 Medium | WordPress | Vulnerability | Update to v2.4.14 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-76994
CVE-2026-76994 | Apache Answer Profiles information disclosure 📄 التفاصيل ← |
VulDB | A vulnerability categorized as problematic has been discovered in Apache Answer. Affected by this is… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-71563
CVE-2026-71563 | Apache Answer information disclosure 📄 التفاصيل ← |
VulDB | A vulnerability was found in Apache Answer. It has been rated as problematic. Affected by this vulne… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-68482
CVE-2026-68482 | Apache Answer improper authorization 📄 التفاصيل ← |
VulDB | A vulnerability was found in Apache Answer. It has been declared as problematic. Affected is an unkn… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-67249
CVE-2026-67249 | Apache Answer improper authentication 📄 التفاصيل ← |
VulDB | A vulnerability was found in Apache Answer. It has been classified as critical. This impacts an unkn… | No | 🟡 Medium | Apache HTTP Server | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-64945
CVE-2026-64945 | Apache Answer Question Permissions permission 📄 التفاصيل ← |
VulDB | A vulnerability was found in Apache Answer and classified as problematic. This affects an unknown fu… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-64943
CVE-2026-64943 | Apache Answer API Key missing encryption 📄 التفاصيل ← |
VulDB | A vulnerability has been found in Apache Answer and classified as problematic. The impacted element … | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-79620
CVE-2026-79620 | Apache Answer improper authorization 📄 التفاصيل ← |
VulDB | A vulnerability, which was classified as problematic, was found in Apache Answer. The affected eleme… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-79613
CVE-2026-79613 | Apache Answer information disclosure 📄 التفاصيل ← |
VulDB | A vulnerability, which was classified as problematic, has been found in Apache Answer. Impacted is a… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-103481
CVSS 6.1 CVE-2026-103481 — The Gwolle Guestbook plugin for WordPress is vulnerable to Ref… 📄 التفاصيل ← |
NVD | The Gwolle Guestbook plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the &#… | No | 🟡 Medium | WordPress | Exploit | Update to v5.1.1 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-109512
CVSS 6.4 CVE-2026-109512 — The Mang Board plugin for WordPress is vulnerable to Stored Cr… 📄 التفاصيل ← |
NVD | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conte… | No | 🟡 Medium | WordPress | Vulnerability | Update to v2.4.4 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-109191
CVSS 4.3 CVE-2026-109191 — The Image Hub – Free Images from Unsplash, Pixabay, Pexels, Op… 📄 التفاصيل ← |
NVD | The Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy plugin for WordPre… | No | 🟡 Medium | WordPress | Vulnerability | Update to v1.2.0 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-111106
CVSS 6.5 CVE-2026-111106 — The Mail Mint plugin for WordPress is vulnerable to SQL Inject… 📄 التفاصيل ← |
NVD | The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parame… | No | 🟡 Medium | WordPress | Vulnerability | Update to v1.31.4 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-110019
CVSS 4.3 CVE-2026-110019 — The Bulk Page Generator – LPagery plugin for WordPress is vuln… 📄 التفاصيل ← |
NVD | The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all … | No | 🟡 Medium | WordPress | Exploit | Update to v3.1.0 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-110721
CVSS 5.3 CVE-2026-110721 — The NotificationX plugin for WordPress is vulnerable to Missin… 📄 التفاصيل ← |
NVD | The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary c… | No | 🟡 Medium | WordPress | Vulnerability | Update to v3.3.3 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-103911
CVSS 6.5 CVE-2026-103911 — The The Forminator Forms – Contact Form, Payment Form & Cu… 📄 التفاصيل ← |
NVD | The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress… | No | 🟡 Medium | WordPress | Vulnerability | Update to v1.58.1 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-101335
CVSS 6.5 CVE-2026-101335 — The Forminator Forms – Contact Form, Payment Form & Custom… 📄 التفاصيل ← |
NVD | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is … | No | 🟡 Medium | WordPress | Exploit | Update to v1.58.1 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-90910
CVE-2026-90910 | Apache Answer authorization 📄 التفاصيل ← |
VulDB | A vulnerability categorized as problematic has been discovered in Apache Answer. The affected elemen… | No | 🟡 Medium | Apache HTTP Server | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-86589
CVE-2026-86589 | Apache Answer User Center session expiration 📄 التفاصيل ← |
VulDB | A vulnerability was found in Apache Answer. It has been rated as problematic. Impacted is an unknown… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-108833
CVE-2026-108833 | Apache Kylin access control 📄 التفاصيل ← |
VulDB | A vulnerability was found in Apache Kylin. It has been declared as critical. This issue affects some… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-108823
CVE-2026-108823 | Apache Kylin authorization 📄 التفاصيل ← |
VulDB | A vulnerability was found in Apache Kylin. It has been classified as critical. This vulnerability af… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-108771
CVE-2026-108771 | Apache Kylin Broadcast API deserialization 📄 التفاصيل ← |
VulDB | A vulnerability has been found in Apache Kylin and classified as critical. Affected by this issue is… | No | 🟡 Medium | Apache HTTP Server | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-108766
CVE-2026-108766 | Apache Kylin JDBC Config improper authorization 📄 التفاصيل ← |
VulDB | A vulnerability, which was classified as critical, was found in Apache Kylin. Affected by this vulne… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-108764
CVE-2026-108764 | Apache Kylin Proxy server-side request forgery 📄 التفاصيل ← |
VulDB | A vulnerability, which was classified as critical, has been found in Apache Kylin. Affected is an un… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-108709
CVE-2026-108709 | Apache Kylin improper authentication 📄 التفاصيل ← |
VulDB | A vulnerability classified as problematic has been found in Apache Kylin. This affects an unknown fu… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-69080
CVE-2026-69080 | Apache Kylin SQL Blacklist QuerySQLBlacklistController access c… 📄 التفاصيل ← |
VulDB | A vulnerability described as critical has been identified in Apache Kylin. The impacted element is t… | No | 🟡 Medium | Apache HTTP Server | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-69077
CVE-2026-69077 | Apache Kylin JobController improper authorization 📄 التفاصيل ← |
VulDB | A vulnerability marked as critical has been reported in Apache Kylin. The affected element is an unk… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-68573
CVE-2026-68573 | Apache Kylin Metastore privileges management 📄 التفاصيل ← |
VulDB | A vulnerability labeled as critical has been found in Apache Kylin. Impacted is an unknown function … | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-68572
CVE-2026-68572 | Apache Kylin improper authorization 📄 التفاصيل ← |
VulDB | A vulnerability identified as critical has been detected in Apache Kylin. This issue affects some un… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-68571
CVE-2026-68571 | Apache Kylin URL Whitelist access control 📄 التفاصيل ← |
VulDB | A vulnerability categorized as critical has been discovered in Apache Kylin. This vulnerability affe… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-64959
CVE-2026-64959 | Apache Kylin Cache API missing authentication 📄 التفاصيل ← |
VulDB | A vulnerability was found in Apache Kylin. It has been rated as critical. This affects an unknown pa… | No | 🟡 Medium | Apache HTTP Server | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-64610
CVE-2026-64610 | Apache Kylin deserialization 📄 التفاصيل ← |
VulDB | A vulnerability was found in Apache Kylin. It has been declared as critical. Affected by this issue … | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-63619
CVE-2026-63619 | Apache Kylin improper authorization 📄 التفاصيل ← |
VulDB | A vulnerability was found in Apache Kylin. It has been classified as problematic. Affected by this v… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-63618
CVE-2026-63618 | Apache Kylin information disclosure 📄 التفاصيل ← |
VulDB | A vulnerability was found in Apache Kylin and classified as problematic. Affected is an unknown func… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-108780
CVE-2026-108780 | Apache Kylin Configuration Validation input validation 📄 التفاصيل ← |
VulDB | A vulnerability, which was classified as problematic, was found in Apache Kylin. This affects an unk… | No | 🟡 Medium | Apache HTTP Server | Exploit | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-69076
CVE-2026-69076 | Apache Kylin improper authorization 📄 التفاصيل ← |
VulDB | A vulnerability, which was classified as problematic, has been found in Apache Kylin. The impacted e… | No | 🟡 Medium | Apache HTTP Server | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-93535
CVSS 6.4 CVE-2026-93535 — The Dark Mode – Improve Accessibility with AI Powered Dark Them… 📄 التفاصيل ← |
NVD | The Dark Mode – Improve Accessibility with AI Powered Dark Theme plugin for WordPress is vulnerable … | No | 🟡 Medium | WordPress | Vulnerability | Update to v5.3.17 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-77829
CVSS 6.4 CVE-2026-77829 — The Cooked – Recipe Management plugin for WordPress is vulnerab… 📄 التفاصيل ← |
NVD | The Cooked – Recipe Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… | No | 🟡 Medium | WordPress | Vulnerability | Update to v1.16.1 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Exploit |
CVE-2026-111449
CVSS 5.9 CVE-2026-111449 — Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions wh… 📄 التفاصيل ← |
NVD | Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true (disab… | No | 🟡 Medium | Exploit | Refer to CVE-2026-111449 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111450
CVSS 5.9 CVE-2026-111450 — Wheels through 4.1.1 derives its default production error-emai… 📄 التفاصيل ← |
NVD | Wheels through 4.1.1 derives its default production error-email address from the Host header of the … | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111450 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| WordPress |
CVE-2026-103518
CVSS 4.9 CVE-2026-103518 — The FluentCart A New Era of eCommerce – Faster, Lighter, and S… 📄 التفاصيل ← |
NVD | The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnera… | No | 🟡 Medium | WordPress | Vulnerability | Update to v1.7.0 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-89280
CVSS 4.3 CVE-2026-89280 — The Dokan: AI Powered WooCommerce Multivendor Marketplace Solut… 📄 التفاصيل ← |
NVD | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Et… | No | 🟡 Medium | WordPress | Vulnerability | Update to v5.2.1 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| WordPress |
CVE-2026-104769
CVSS 5.9 CVE-2026-104769 — The Debloat – Remove Unused CSS, Optimize JS plugin for WordPr… 📄 التفاصيل ← |
NVD | The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Travers… | No | 🟡 Medium | WordPress | Vulnerability | Update to v1.3.0 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Vulnerability |
CVE-2026-111443
CVSS 6.5 CVE-2026-111443 — Wheels 4.0.6 through 4.1.2 lets an unauthenticated client swit… 📄 التفاصيل ← |
NVD | Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test appl… | No | 🟡 Medium | Vulnerability | Refer to CVE-2026-111443 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| General | hugegraph-toolchain 📄 التفاصيل ← | Vulners | No description... | No | 🟢 Low | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| General | jf-helper 📄 التفاصيل ← | Vulners | 简化jfinal的开发的包... | No | 🟢 Low | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Android | Hackers Target 60 Indian Banking and UPI Apps With New GhostBat Android Malware 📄 التفاصيل ← | Cyber Security News | A new version of GhostBat Android malware is targeting users of 60 banking, UPI, wallet, fintech and… | No | 🟢 Low | Android | Malware | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| General | ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/… 📄 التفاصيل ← | SANS ISC | (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 … | No | 🟢 Low | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| General | 🏴☠️ N0n has just published a new victim : Company #75 📄 التفاصيل ← | Ransomware.live | fintech payments · US | [PENDING EXPOSURE] | No | 🟢 Low | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| General | 🏴☠️ N0n has just published a new victim : Company #74 📄 التفاصيل ← | Ransomware.live | media technology / broadcast playout · United States | [PENDING EXPOSURE] | No | 🟢 Low | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| General | Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th) 📄 التفاصيل ← | SANS ISC | I believe the cybersecurity industry may be approaching AI security the wrong way.
 | No | 🟢 Low | AI Attack | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Threat Intel | TypeSafe’s Jev ‘even more susceptible to attack’ than LLMs, says security vendor 📄 التفاصيل ← | CSO Online | Although the Jev model rolled out last month by TypeSafe claims to have significant advantages over … | No | 🟢 Low | AI Attack | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| General | 🏴☠️ N0n has just published a new victim : Evolution Spine / All Labs 📄 التفاصيل ← | Ransomware.live | Medical device manufacturing (US) · Texas, USA | FDA quality system records of a Texas spinal implan… | No | 🟢 Low | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| General | Panchan's Mining Island [Guest Diary], (Wed, Oct 14th) 📄 التفاصيل ← | SANS ISC | [This is a Guest Diary by Zachary Norwood, an ISC intern as part of the SANS.edu BACS progr… | No | 🟢 Low | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Browser | Chrome for Android Update 📄 التفاصيل ← | Chrome Releases |    Hi, everyone! We've just released Chrome 155 (155.0.8059.84) for Android. … | No | 🟢 Low | Android | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| General | 🏴☠️ Incransom has just published a new victim : fairfeelegalservices.com 📄 التفاصيل ← | Ransomware.live | proof | No | 🟢 Low | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| General | 🏴☠️ Incransom has just published a new victim : verveba.com \ www.att.com 📄 التفاصيل ← | Ransomware.live | 2tb | No | 🟢 Low | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Browser | Chrome Beta for Android Update 📄 التفاصيل ← | Chrome Releases | Hi everyone! We've just released Chrome Beta 157 (157.0.8103.5) for Android. It's now avai… | No | 🟢 Low | Android | Google Chrome | Chromium | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| General | SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape 📄 التفاصيل ← | Dark Reading | The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks,… | No | 🟢 Low | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| General | 🏴☠️ Incransom has just published a new victim : www.coopecaja.fi.cr 📄 التفاصيل ← | Ransomware.live | / | No | 🟢 Low | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| General | 🏴☠️ Incransom has just published a new victim : nowaszkola.com 📄 التفاصيل ← | Ransomware.live | / | No | 🟢 Low | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Linux | AI-Powered Espionage Campaign Targets Government Linux Infrastructure 📄 التفاصيل ← | Palo Alto Unit42 | Our analysis an AI-powered espionage campaign targeting government Linux infrastructure with custom … | No | 🟢 Low | Malware | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Browser | Extended Stable Update for Desktop 📄 التفاصيل ← | Chrome Releases | The Extended Stable channel has been updated to 152.0.7977.169 for Windows and Mac which will roll o… | No | 🟢 Low | Microsoft Windows | Vulnerability | Update to v152.0.7977 |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| General | 🏴☠️ Qilin has just published a new victim : Keio Corporation 📄 التفاصيل ← | Ransomware.live | N/A | No | 🟢 Low | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| General | 🏴☠️ Qilin has just published a new victim : Kemlows Diecasting Products Limited 📄 التفاصيل ← | Ransomware.live | N/A | No | 🟢 Low | Vulnerability | Apply vendor security patch |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Browser | Chrome for Android Update 📄 التفاصيل ← | Chrome Releases |    Hi, everyone! We've just released Chrome 155 (155.0.8059.84) for Android. … | No | 🟢 Low | Google Chrome / ChromeOS | Vulnerability | Update Chrome to latest version |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Browser | Chrome Beta for Android Update 📄 التفاصيل ← | Chrome Releases | Hi everyone! We've just released Chrome Beta 157 (157.0.8103.5) for Android. It's now avai… | No | 🟢 Low | Google Chrome / ChromeOS | Vulnerability | Update Chrome to latest version |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
| Web |
CVE-2026-111448
CVSS 3.7 CVE-2026-111448 — Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons i… 📄 التفاصيل ← |
NVD | Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sens… | No | 🟢 Low | Vulnerability | Refer to CVE-2026-111448 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|
|
| Vulnerability |
CVE-2026-111442
CVE-2026-111442 — Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.… 📄 التفاصيل ← |
NVD | Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploa… | No | 🟢 Low | Vulnerability | Refer to CVE-2026-111442 NVD advisory |
UTC: 2026-10-16
EDT: 2026-10-16
SA: 2026-10-16
|