CVE Vulnerabilities - 13 July 2026

The Realtyna Organic IDX plugin, used for real estate listings, has a security flaw that could allow hackers to inject and execute malicious code on a website. This could lead to unauthorized access a...

An attacker can upload malicious files to the Aimogen Pro platform, which could lead to unauthorized actions or data corruption. This affects users of Aimogen Pro versions up to 2.8.3. It's recommende...

The DIRAC FileCatalog DatasetManager has a security flaw that lets an authenticated user execute malicious code on the system. This is due to an unsecured SQL query that can be manipulated by a user. ...

An authenticated user can run commands on the DIRAC server, which allows them to access sensitive information, delete evidence, and potentially take control of the system. This is due to the use of ev...

WoowBot Pro Max, a software used to manage cloud services, has a security issue that allows users to upload files that could potentially harm the system. This is a concern because malicious files coul...

The SureDash software has a security issue that allows hackers to access files they shouldn't be able to. This is a concern because sensitive data could be stolen or modified. To stay safe, update Sur...

The D-Link DIR-1253 router's etc/shadow file is vulnerable to unauthorized access. This could allow an attacker to gain elevated privileges on the router, potentially allowing them to make changes to ...

A security flaw in the Shenzhou Shihan Video Conference System v.1.0 allows a malicious user to potentially take control of the system by sending specially crafted data to the /user/getUserLogin endpo...

The OpENer messaging software is at risk of a critical memory corruption issue when handling certain types of messages. This could lead to unexpected crashes or data loss. Update to the latest version...

An attacker can access and manipulate provider connections without a password, potentially exposing sensitive information and disrupting service. This vulnerability affects 9Router versions up to 0.4....

Rejetto HFS, a web file manager, has a security flaw that allows an attacker to steal an administrator's session and take control of the server. This can happen if an attacker observes a few login att...

Versions of Perl's Storable module before 3.41 can crash if it's given a specially crafted file. This can happen when the module tries to deserialize data that's been tampered with. To fix this, updat...

A misconfiguration in Debian Linux's sudo package can allow unauthorized users to gain elevated privileges, potentially allowing them to access sensitive data or take control of the system. This issue...

Versions of Perl Storable before 3.41 have a bug that can allow attackers to execute malicious code. This affects systems that use Perl Storable to store and retrieve data. To fix this, update Perl to...

Attackers can access sensitive data and system information if they exploit a vulnerability in CKAN's Datastore Search feature. This issue has been fixed in CKAN versions 2.10.10 and 2.11.5. To protect...

A security flaw in the search feature of the Alerta monitoring tool allowed hackers to inject malicious code, potentially exposing sensitive data. This has been fixed in version 9.1.0, so update to th...

The Vitec Flamingo 4.12.2 software has a security issue that lets hackers execute system commands without needing a password. This is a serious risk because hackers can access sensitive system setting...

The Vitec Flamingo 4.12.2 software has a security flaw that allows unauthorized access to the system. This means an attacker can execute commands on the system without needing a password, potentially ...

The Directorist software has a security issue that could allow an attacker to inject malicious code. This affects versions up to 8.8.2, which means you should update to a newer version to stay secure....

The MailOptin plugin for WordPress has a security issue that allows an attacker to gain elevated privileges. This means they could potentially access and modify sensitive data or settings. To fix this...

Grand Photography versions 5.7.8 and below are at risk of object injection attacks. This means an attacker could potentially inject malicious code into the application, leading to unauthorized actions...

The RT-Theme 18 | Extensions rt18-extensions may allow an attacker to inject malicious code by sending untrusted data. This affects websites using the affected extension. To protect your site, update ...

A bug in the Axiomthemes 777 Triple-Seven software allows attackers to inject malicious code. This issue affects versions of the software from unknown to 1.13.0, which means anyone using these version...

Kirki, a plugin used in WordPress themes, has a vulnerability that allows attackers to inject malicious objects. This could potentially lead to unauthorized access or data tampering. Update Kirki to t...

WAGO System I/O Field devices have a hidden diagnostic mode that becomes accessible for a short time during startup. This allows an attacker to access the device's internal processes without a passwor...