-
Vulnerability Watch No74
NewStatPress WordPress Plugin Exposes Admins to Stored XSS • FV Flowplayer Video Player Plugin Vulnerable to Stored XSS • Gmedia Photo Gallery SQL Injection Exposes WordPress Databases • Smart Forms WordPress Plugin Allows Unauthenticated Script Injection • Form Maker by 10Web Exposes Databases to Blind SQL Injection…
-
Vulnerability Watch No32
go-git Symlink Escape Can Reach Files Outside Worktrees • ZenML Artifact Poisoning Enables Remote Code Execution • Absinthe Federation Atom Exhaustion Can Crash Erlang Nodes • ClamAV XAR Parser Memory Corruption Can Trigger DoS • Crafted Mach-O Files Can Crash ClamAV Scanners…
-
Vulnerability Watch No7
Network-AI Backup Prune Arbitrary File Deletion • xrdp DoS Bug Enables CPU Exhaustion • Network-AI Sandbox Bypass Leads to Command Execution • Network-AI MCP Server Authentication Bypass • WhatsApp MCP Server Exposes Files and Messaging…