Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 6.5 CVE-2026-56024

WordPress WP EasyPay plugin <= 4.4.0 - Cross Site Request Forgery (CSRF) vulnerability_CVE-2026-56024

Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal WP EasyPay allows Cross Site Request Forgery. This issue affects WP EasyPay: from n/...

Saad Iqbal WP EasyPay n/a CVE
MEDIUM 5.3 CVE-2026-56022

Webmin MFA bypass_CVE-2026-56022

Webmin accepts basic authentication without session cookies when an attacker provides the 'User-Agent: webmin' header, allowing bypass of additiona...

Webmin Webmin CVE
MEDIUM 5.3 CVE-2026-56021

Webmin information disclosure via regex pattern_CVE-2026-56021

Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.

Webmin Webmin * CVE
HIGH 8.1 CVE-2026-56020

Webmin HTTP header authentication bypass_CVE-2026-56020

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a...

Webmin Webmin CVE
HIGH 8.8 CVE-2026-55237

AutoGPT SignUp Page has DOM-Based XSS and Open Redirect_CVE-2026-55237

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions prior to 0.6.62...

Significant-Gravitas AutoGPT < 0.6.62 CVE
HIGH 7.8 CVE-2026-12505

Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall_CVE-2026-12505

A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user informati...

Red Hat Red Hat Enterprise Linux 10 CVE
HIGH 8.8 CVE-2026-12407

E2Pdf <= 1.32.26 - Missing Authorization to Authenticated (Custom+) Arbitrary Option Update / Privilege Escalation via 'screen_action' Parameter_CVE-2026-12407

The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.32.26. Th...

oleksandrz E2Pdf – Export Pdf Tool for WordPress CVE
MEDIUM 4.3 CVE-2026-10023

Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.3 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Order Modification via Multiple AJAX Handlers_CVE-2026-10023

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecu...

dokaninc Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy CVE
NONE 2B2850BD-5CCC-

binary-exploitation-writeup_2B2850BD-5CCC-5FC9-BAFC-E1011A676871

Binary Exploitation — Buffer Overflow & Format String Attack Hands-on exploration of classic binary exploitation techniques on intentionally vulner...

N/A N/A GITHUBEXPLOIT
NONE TRENDMICROBLOG:...

Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign_TRENDMICROBLOG:C4306C7FC6E583B0A1DD88D1E5A8F86D

Cybercriminals hijacked Google Ads searches for popular AI developer tools to funnel over 2,000 victims toward malicious download pages before quie...

N/A N/A TRENDMICROBLOG