Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from nearly 30 public sources, updated hourly.
- Tracked
- 410,516
- Last 24h
- 736
- Critical, 7 days
- 315
- Known exploited
- 1,779
26,234 results · Clear filters · Feed
-
Critical 9.8
OpenReception: WebAuthn passkey injection allows account takeover
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, the registration handler at `POST /api/auth/register/{userId}` validates the relationship between the WebAuthn challenge and th…
-
Critical 9.9
Flowise 3.1.4 IDOR in OpenAI Assistants Integration
Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI Assistants integration that allows authenticated attackers to access credentials belonging to other workspaces by supplying an arbitrary credential UUID to Assistan…
-
Critical 9.9
OpenReception: Tenant admin self-promotes to GLOBAL_ADMIN
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANT_ADMIN promotes themselves to platform-wide GLOBAL_ADMIN through a single PUT request. The role-update handler accepts …
-
Critical 9.8
OpenReception has unauthenticated GLOBAL_ADMIN account creation post-bootstrap
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.1, a fully provisioned OpenReception instance accepts unauthenticated POST requests to `/setup/create-admin-account` and creates a…
-
Critical 9.6
Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a …
-
Critical 9.6
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially pe…
-
Critical 9.6
Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially …
-
Critical 9.6
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker…
-
Critical 9.6
Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potential…
-
Critical 9.6
Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially pe…
-
Critical 9.6
Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perfo…
-
Critical 9.3
A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS…
-
Critical 9.8
WGDashboard Server-Side Template Injection vulnerability
A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier, allows authenticated attackers to execute arbitrary code as root.
-
Critical 9.8
WGDashboard Remote Code Execution vulnerability
A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attackers to execute arbitrary commands as root.
-
Critical 9.8
WGDashboard Server-Side Request Forgery Vulnerability
A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTTP requests and retrieve responses.
-
Critical 9.8
Dinky Unauthenticated Arbitrary File Write via /download/uploadFromRsByLocal Gated Only by Hardcoded Default Token
Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new File(path) and file.transferTo(dest) with no path validation. The route is marked @SaIgnore and /download/** is excluded from the Sa-Token interceptor…
-
Critical 9.8
An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macO…
KEV Aug 18, 2026 -
Critical 9.1
Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Execution
The System REST API accepts user-supplied file uploads without enforcing sufficient validation on the file type or destination, allowing files to be written to arbitrary server-accessible locations. Exploitation requires authenticated administrative access wi…
-
Critical 9.0
Access Control Bypass via Publisher REST APIs in Multiple WSO2 Products Allows Cross-Tenant Operations
In multi-tenant deployments, the Publisher REST APIs fail to enforce tenant isolation correctly. This allows a user in one tenant, possessing sufficient privileges to invoke these APIs, to perform operations that impact other tenants. The vulnerability allows…
-
Critical 9.8
Supsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server
Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server, allowing unauthenticated attackers to deploy a second-stage payload that exfiltrates credentials and other sensitive data and grants full contr…
-
Critical 10.0
Premium SEO - Unauthenticated Backdoor (Admin Creation / RCE / SSRF / Content Injection)
The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backdoor that creates a hidden administrator account and, in some builds, also enables remote code execution, server-side request forgery and arbitrary front-end script/content injecti…
-
Critical 10.0
MonsterInsights Pro 10.2.0/10.2.2 - Backdoored via AWS S3 bucket compromise
The official MonsterInsights Pro update distribution bucket (`monster-insights.s3.amazonaws.com`) was compromised. Both the current release (10.2.2) and the version MonsterInsights rolled back to (10.2.0) contain a malicious file, `class-system-check.php`. Th…
-
Critical 9.1
Ground Station prior to 0.6.0 Unauthenticated Database Wipe and Arbitrary Data Injection via Socket.IO database_backup full_restore Action
Ground Station prior to 0.6.0 contains an unauthenticated database-destruction and arbitrary-data-injection vulnerability in the Socket.IO server's database_backup event handler that allows any unauthenticated network peer to wipe or replace the entire SQLite…
-
Critical 9.1
Apache Portable Runtime Utility: apr-util XML stack recursion crash
A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the apr_xml_quote_elem() function. Users are recommended to upgrade to version 1.6.4, which fixes this …
-
Critical 9.1
Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3
-
Critical 9.1
WordPress CTX Feed plugin <= 6.6.42 - Remote Code Execution (RCE) vulnerability
Shop manager Remote Code Execution (RCE) in CTX Feed <= 6.6.42 versions.
-
Critical 10.0
WordPress Type Hub plugin <= 2.0.6 - Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions.
-
Critical 9.8
WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions.
-
Critical 9.3
WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability
Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.
-
Critical 9.8
WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions.
-
Critical 9.8
WordPress Agora theme <= 1.9 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Agora <= 1.9 versions.
-
Critical 9.8
WordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions.
-
Critical 9.8
WordPress Advice theme <= 1.18.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions.
-
Critical 9.8
WordPress Accalia theme <= 1.5.3 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions.
-
Critical 9.8
WordPress Adrena theme <= 1.2.14 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions.
-
Critical 9.8
WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Abogado <= 1.18 versions.
-
Critical 9.8
WordPress A.Williams theme <= 1.3.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions.
-
Critical 9.8
WordPress Abelle theme <= 1.22 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Abelle <= 1.22 versions.
-
Critical 9.8
WordPress 69 Clothing theme <= 1.2.11.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions.
-
Critical 9.8
WordPress WPBruiser {no- Captcha anti-Spam} plugin <= 3.1.43 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in WPBruiser {no- Captcha anti-Spam} <= 3.1.43 versions.