Threat Intelligence Database

The smartphone application "Vehicle Inspection Certificate Viewer" developed by the Ministry of Land, Infrastructure, Transport and Tourism has a vulnerability that may cause sensitive information to be disclosed through data transmitted by the app. No specific technical details or affected versions are provided. There is no indication of known exploits in the wild or available patches.

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.

A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow.

The Kirki – Freeform Page Builder, Website Builder & Customizer WordPress plugin is vulnerable to stored Cross-Site Scripting (XSS) in all versions up to and including 6.2.0. This vulnerability arises from insufficient input sanitization and output escaping in the Page Builder Text Content feature. Authenticated users with the kirki_content_access capability can inject malicious scripts that execute when other users view the affected pages.

The 10Web Booster WordPress plugin up to version 2.34.10 suffers from an arbitrary file upload vulnerability due to missing file type validation and leaked authentication nonce. This allows unauthenticated attackers to upload potentially executable files, enabling remote code execution. The vulnerability arises from a world-readable REST nonce file generated during bulk optimization pauses, which bypasses authentication checks.

PhastPress, a WordPress plugin by kiboit, is affected by a Server-Side Request Forgery (SSRF) vulnerability in all versions up to and including 3.10. The vulnerability arises because the scripts service endpoint builds its URL whitelist dynamically based on the HTTP 'Host' header, which attackers can manipulate. This allows unauthenticated attackers to bypass the whitelist and coerce the server into making HTTP requests to arbitrary internal or external destinations, potentially exposing response content.

CVE-2026-76664 is a medium severity vulnerability in Hewlett Packard Enterprise's HPE NonStop EXPAND product involving an out-of-bounds memory read/write condition. This flaw could allow unauthorized access or modification of memory, potentially impacting confidentiality, integrity, and availability. No specific affected versions or patch information are provided.

"Handmade Marketplace App - Creema", an application provided by CREEMA LTD., contains an open redirect vulnerability. This type of vulnerability allows attackers to redirect users to unintended external sites, potentially facilitating phishing or other malicious activities.

"ゲオアプリ", an application provided by GEO CORPORATION, is reported to contain multiple vulnerabilities. Specific technical details, affected versions, and exploitation information are not provided.