CVE ID :CVE-2026-108963 Published : Oct. 11, 2026, 8:16 p.m. | 3 hours, 14 minutes ago Description :databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database…
CVE-2026-108905 – pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Header
CVE ID :CVE-2026-108905 Published : Oct. 11, 2026, 3:16 p.m. | 8 hours, 13 minutes ago Description :pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allows…
CVE-2026-108902 – pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link
CVE ID :CVE-2026-108902 Published : Oct. 11, 2026, 3:16 p.m. | 8 hours, 13 minutes ago Description :pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto()…
CVE-2026-108865 – AmoyLab Unla through 0.10.0 OAuth2 Authentication Bypass via /authorize
CVE ID :CVE-2026-108865 Published : Oct. 11, 2026, 2:17 p.m. | 9 hours, 13 minutes ago Description :AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid access…
CVE-2026-108863 – Katanemo Plano through 0.4.37 Missing Authentication on Envoy Admin Interface
CVE ID :CVE-2026-108863 Published : Oct. 11, 2026, 2:17 p.m. | 9 hours, 13 minutes ago Description :Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the…
CVE-2026-108657 – JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApply
CVE ID :CVE-2026-108657 Published : Oct. 10, 2026, 10:16 p.m. | 1 hour, 13 minutes ago Description :JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated…
CVE-2026-108628 – JeecgBoot through 3.9.5 Missing Authorization via saveDeptRolePermission Endpoint
CVE ID :CVE-2026-108628 Published : Oct. 10, 2026, 10:16 p.m. | 1 hour, 13 minutes ago Description :JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of SysDepartPermissionController that allows any…
CVE-2026-81797 – WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 – PHP Object Injection vulnerability
CVE ID :CVE-2026-81797 Published : Oct. 10, 2026, 8:16 p.m. | 3 hours, 13 minutes ago Description :Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme Severity: 9.8 |…
CVE-2026-78535 – WordPress Photolia theme <= 1.0.3 – PHP Object Injection vulnerability
CVE ID :CVE-2026-78535 Published : Oct. 10, 2026, 8:16 p.m. | 3 hours, 13 minutes ago Description :Unauthenticated PHP Object Injection in Photolia Severity: 9.8 | CRITICAL Visit the link for more details, such…
CVE-2026-78533 – WordPress Qwery theme <= 3.6.1 – PHP Object Injection vulnerability
CVE ID :CVE-2026-78533 Published : Oct. 10, 2026, 8:16 p.m. | 3 hours, 13 minutes ago Description :Unauthenticated PHP Object Injection in Qwery Severity: 9.8 | CRITICAL Visit the link for more details, such…