The Appointment Booking Plugin – LatePoint for WordPress contains an authentication bypass vulnerability due to a race condition in the OTP verification process. Versions up to and including 5.7.4 are affected. The flaw arises from a non-atomic increment of the OTP attempts counter, allowing attackers to bypass the 10-attempt lockout by sending concurrent requests. This enables brute-forcing of the 6-digit OTP code and unauthorized access to customer accounts and data. The nonce mechanism does not prevent exploitation as it is publicly accessible. The vulnerability has a critical severity with a CVSS score of 9.1.
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses versions up to and including 4.4.10 are vulnerable to stored cross-site scripting (XSS) via the 'quantity (REST)' and 'order_comments (checkout)' parameters. This vulnerability allows unauthenticated attackers to inject malicious scripts that execute when users access affected pages. The attack can be performed without authentication if guest checkout is enabled; otherwise, a Subscriber-level user can exploit it through their own checkout process.
The Hippoo Mobile App for WooCommerce WordPress plugin is vulnerable to reflected cross-site scripting (XSS) via the 'token_id' parameter in all versions up to and including 1.12.0. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary scripts that execute when a user interacts with a crafted link. The vulnerability bypasses URL path regex constraints due to query-string parameter precedence in WP_REST_Request.
The Kirki – Freeform Page Builder, Website Builder & Customizer WordPress plugin up to version 6.3.2 is vulnerable to PHP Object Injection via deserialization of untrusted input. This vulnerability allows authenticated users with at least Editor-level privileges to inject PHP objects. Exploitation requires the presence of a gadget chain (POP chain) in another installed plugin or theme, which could lead to arbitrary file deletion, data disclosure, or code execution. Without such a POP chain, the vulnerability has no direct impact.
The Kirki – Freeform Page Builder plugin for WordPress up to version 6.3.2 contains an insecure direct object reference vulnerability via the 'context' parameter. This flaw allows unauthenticated attackers to access sensitive profile data of arbitrary users, including email addresses, display names, registration dates, profile image URLs, and various user meta fields. Exploitation requires a published page using a Kirki template with at least one user-type dynamic content block. User IDs can be enumerated through standard WordPress REST endpoints, making the attack feasible if such templates exist on the site.
The Fastcache by Host.it WordPress plugin up to version 1.7.5 contains an authorization bypass vulnerability. Authenticated users with subscriber-level access or higher can modify the site's root .htaccess file by adding or removing page-cache rewrite rules without proper authorization checks. This vulnerability does not impact confidentiality or availability but allows unauthorized integrity modifications to the web server configuration.
Tektronix 3 Series MDO devices before version 1.21.1 contain a path traversal vulnerability in their web management interface. This flaw allows remote attackers to read arbitrary files accessible to the application by exploiting insufficient validation of user-supplied file paths. Exploitation may be possible without authentication depending on the device configuration. The vulnerability has a high severity rating with a CVSS score of 7.5.
Tektronix 3 Series MDO devices before version 1.21.1 contain a path traversal vulnerability in the SCPI FILESystem command interface. This flaw allows remote attackers with limited privileges to read or modify arbitrary files on the device due to insufficient validation of file paths. The vulnerability has a high severity with a CVSS score of 8.1, impacting confidentiality and integrity but not availability.
Tektronix 3 Series MDO devices before version 1.21.1 contain an OS command injection vulnerability in the FILESystem:MOUNT:DRIve SCPI command handler. This flaw allows remote attackers with limited privileges to execute arbitrary operating system commands with elevated privileges due to insufficient neutralization of user input.
A use-after-free vulnerability exists in libarchive's archive_entry_copy_mac_metadata() function. This flaw allows an attacker who can supply crafted input to cause a Denial of Service (application crash) or potentially read uninitialized memory, leading to limited information disclosure. The vulnerability arises because an internal buffer is deallocated before the data copy completes. A security update addressing this issue is available from Red Hat for their Hardened Images RPMs.
VigilOSS is an AI-powered harness designed to assist in structured, long-running offensive security engagements such as code audits, web penetration tests, and bug bounty hunting. It coordinates specialist agents and tools to maintain investigation continuity, improve quality, and reduce false negatives. The tool emphasizes human oversight and verification, ensuring findings are reliable and reproducible. VigilOSS is intended for authorized use only and is provided under an Apache 2.0 license without warranty.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the pgbouncer package to version 1.26.1-1.hum1. This update addresses multiple vulnerabilities identified by CVE-2026-107348, CVE-2026-107349, and CVE-2026-107350. The advisory indicates this is a bug fix and enhancement update with a high severity rating. No specific affected versions were detailed beyond the updated package version. The update is available for multiple architectures including aarch64, s390x, and x86_64.
Sudocrypt v16.0 is an international Capture The Flag (CTF) and cryptic challenge event organized by Exun Clan, a student-run tech club. The event is scheduled for October 27–28, 2026, and is open globally. It features cryptography, code-breaking, and cybersecurity challenges with a prize pool of approximately $900 USD and additional rewards. The competition is online and team-based, encouraging participants to solve puzzles and demonstrate cybersecurity skills.
The provided information references 'pwn.college' as a resource for learning exploit development and hacking techniques. It is presented as a recommendation for beginners and those exploring cybersecurity, without any indication of a specific vulnerability, exploit, or active threat. No technical details, affected software versions, or exploit data are provided.
This entry provides Indicators of Compromise (IOCs) from ThreatFox dated 2026-10-16. It relates to open-source intelligence (OSINT) about malware activity, specifically focusing on payload delivery and network activity. No specific technical details, affected software versions, or exploits in the wild are reported.
A vulnerability exists in the internal WebAssembly (WASM) shim used by the Kuadrant operator. The flaw involves improper escaping of values from HTTPRoute match fields when generating the CEL predicate that controls Gateway-level authentication and rate limiting. This allows a user with permission to create or modify an HTTPRoute attached to a shared Gateway to craft match values that cause the predicate to skip authentication and rate limiting checks, although the request is still forwarded to the backend.
A vulnerability in Ghostscript allows crafted PostScript or EPS documents to bypass the -dSAFER sandbox and execute arbitrary shell commands. This occurs through a combination of memory corruption during document parsing and disabling of internal path access controls at runtime. Exploitation can compromise confidentiality, integrity, and availability of data accessible to the Ghostscript process. The affected versions include 10.05.0dfsg1-0ubuntu4 and 10.05.0dfsg1-0ubuntu5. The vulnerability has a CVSS score of 7.8, indicating a high impact. No known exploits are reported in the wild, and no patch or remediation details are provided in the input data.
OpenVPN versions 2.7_alpha1 through 2.7.7 contain a vulnerability that allows remote authenticated users to impersonate other users by exploiting a crafted certificate subject field. This issue affects multiple specific OpenVPN package versions primarily on Ubuntu distributions. The vulnerability is rated medium severity based on the CVSS 4.0 vector provided. There is no explicit patch or remediation information available in the provided data.