Web Security Insights By Maloy Roy Orko

IFTTT

CVE-2026-10513 - Webmention <= 5.8.0 - Unauthenticated Stored Cross-Site Scripting via MF2 'photo'/'url' Author Properties

byMaloy Roy Orko -June 30, 2026

CVE ID : CVE-2026-10513 Published : June 30, 2026, 6:32 p.m. | 1 hour, 9 minutes ago …

IFTTT

CVE-2026-13580 - Edimax EW-7478APC POST Request formQoS buffer overflow

byMaloy Roy Orko -June 29, 2026

CVE ID : CVE-2026-13580 Published : June 29, 2026, 3 p.m. | 2 hours, 41 minutes ago …

IFTTT

CVE-2026-13507 - volcengine OpenViking Local VectorDB Primary-key Label str_to_uint64.py str_to_uint64 data authenticity

byMaloy Roy Orko -June 28, 2026

CVE ID : CVE-2026-13507 Published : June 28, 2026, 9:30 p.m. | 2 hours, 10 minutes ago …

IFTTT

CVE-2026-58049 - FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()

byMaloy Roy Orko -June 27, 2026

CVE ID : CVE-2026-58049 Published : June 28, 2026, 1:32 a.m. | 2 hours, 7 minutes ago …

IFTTT

CVE-2026-8095 - Frontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Arbitrary File Deletion

byMaloy Roy Orko -June 27, 2026

CVE ID : CVE-2026-8095 Published : June 27, 2026, 11:28 p.m. | 2 hours, 11 minutes ago …

IFTTT

CVE-2026-10643 - Out-of-bounds heap write in Zephyr `recvmsg()` ancillary-data path (`insert_pktinfo` undersizes the control-buffer capacity check)

byMaloy Roy Orko -June 27, 2026

CVE ID : CVE-2026-10643 Published : June 27, 2026, 10:59 p.m. | 41 minutes ago Des…

IFTTT

CVE-2023-20572 - ASP Hash MAC Brute-Force Vulnerability

byMaloy Roy Orko -June 26, 2026

CVE ID : CVE-2023-20572 Published : June 26, 2026, 3:53 p.m. | 1 hour, 46 minutes ago …

IFTTT

CVE-2026-55092 - Trivy: Path traversal via a crafted vulnerability database or other downloaded artifacts

byMaloy Roy Orko -June 25, 2026

CVE ID : CVE-2026-55092 Published : June 25, 2026, 4:26 p.m. | 1 hour, 12 minutes ago …

IFTTT

CVE-2026-8660 - OS Command Injection in Rapid7 InsightConnect Ping Plugin

byMaloy Roy Orko -June 24, 2026

CVE ID : CVE-2026-8660 Published : June 25, 2026, 12:52 a.m. | 2 hours, 46 minutes ago …

IFTTT

CVE-2026-6458 - AES-256-GCM Authentication Tag Does Not Cover First Ciphertext Blocks When AAD Is Empty

byMaloy Roy Orko -June 23, 2026

CVE ID : CVE-2026-6458 Published : June 23, 2026, 11:49 p.m. | 1 hour, 48 minutes ago …

IFTTT

CVE-2026-11833 - FAST/TOOLS CI Server Information Disclosure

byMaloy Roy Orko -June 22, 2026

CVE ID : CVE-2026-11833 Published : June 23, 2026, 12:53 a.m. | 2 hours, 43 minutes ago…

IFTTT

CVE-2026-10645 - fs: ext2: Missing structural validation of directory entries can cause out-of-bounds read and zero-progress directory traversal

byMaloy Roy Orko -June 22, 2026

CVE ID : CVE-2026-10645 Published : June 22, 2026, 11:48 p.m. | 1 hour, 49 minutes ago …

IFTTT

CVE-2026-12805 - OFFIS DCMTK ofxml.cc parseFile heap-based overflow

byMaloy Roy Orko -June 21, 2026

CVE ID : CVE-2026-12805 Published : June 21, 2026, 7:15 p.m. | 2 hours, 21 minutes ago …

IFTTT

CVE-2026-12804 - lemonldap-ng SAML Common Domain Cookie Endpoint CDC.pm redirect

byMaloy Roy Orko -June 21, 2026

CVE ID : CVE-2026-12804 Published : June 21, 2026, 6:30 p.m. | 1 hour, 6 minutes ago …

IFTTT

CVE-2025-71331 - Flowise - Cross-Site Scripting in Chat Messages and Agent Workflows

byMaloy Roy Orko -June 20, 2026

CVE ID : CVE-2025-71331 Published : June 20, 2026, 3:24 p.m. | 4 hours, 11 minutes ago …

IFTTT

CVE-2017-20266 - Joomla SP Movie Database 1.3 SQL Injection via searchword

byMaloy Roy Orko -June 19, 2026

CVE ID : CVE-2017-20266 Published : June 19, 2026, 4:04 p.m. | 1 hour, 30 minutes ago …

IFTTT

CVE-2026-55205 - Hermes WebUI < 0.51.468 - Resource Exhaustion via Unauthenticated OAuth Flow Endpoint

byMaloy Roy Orko -June 18, 2026

CVE ID : CVE-2026-55205 Published : June 18, 2026, 3:49 p.m. | 1 hour, 43 minutes ago …

IFTTT

CVE-2026-56024 - WordPress WP EasyPay plugin <= 4.4.0 - Cross Site Request Forgery (CSRF) vulnerability

byMaloy Roy Orko -June 18, 2026

CVE ID : CVE-2026-56024 Published : June 18, 2026, 3:27 p.m. | 2 hours, 5 minutes ago …

IFTTT

CVE-2026-48814 - Network-AI: Empty default secret still authorizes all requests (Incomplete fix for CVE-2026-46701)

byMaloy Roy Orko -June 17, 2026

CVE ID : CVE-2026-48814 Published : June 17, 2026, 7:42 p.m. | 1 hour, 48 minutes ago …

IFTTT

CVE-2026-12447 - Google Chrome heap buffer overflow

byMaloy Roy Orko -June 16, 2026

CVE ID : CVE-2026-12447 Published : June 17, 2026, 1:38 a.m. | 1 hour, 51 minutes ago …

IFTTT

CVE-2026-5038 - multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads

byMaloy Roy Orko -June 15, 2026

CVE ID : CVE-2026-5038 Published : June 15, 2026, 4:16 p.m. | 1 hour, 10 minutes ago …

IFTTT

CVE-2026-10634 - Use-after-free in Zephyr native TCP net_tcp_foreach() due to dropping tcp_lock during the callback

byMaloy Roy Orko -June 15, 2026

CVE ID : CVE-2026-10634 Published : June 15, 2026, 4:16 p.m. | 1 hour, 10 minutes ago …

IFTTT

CVE-2025-15659 - WordPress Elizaibots plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

byMaloy Roy Orko -June 15, 2026

CVE ID : CVE-2025-15659 Published : June 15, 2026, 4:16 p.m. | 1 hour, 10 minutes ago …

IFTTT

CVE-2025-15658 - WordPress WP Emmet plugin <= 0.3.4 - Cross Site Scripting (XSS) vulnerability

byMaloy Roy Orko -June 15, 2026

CVE ID : CVE-2025-15658 Published : June 15, 2026, 4:16 p.m. | 1 hour, 10 minutes ago …

IFTTT

CVE-2026-54410 - nanoMODBUS TCP Server Off-by-One Buffer Overflow

byMaloy Roy Orko -June 14, 2026

CVE ID : CVE-2026-54410 Published : June 14, 2026, 6:17 p.m. | 1 hour, 7 minutes ago …

IFTTT

CVE-2026-12183 - Nefteprodukttekhnika BUK TS-G Improper Authentication

byMaloy Roy Orko -June 13, 2026

CVE ID : CVE-2026-12183 Published : June 13, 2026, 6:16 p.m. | 1 hour, 6 minutes ago …

IFTTT

CVE-2026-6428 - Koha SQL Injection

byMaloy Roy Orko -June 13, 2026

CVE ID : CVE-2026-6428 Published : June 13, 2026, 4:34 p.m. | 48 minutes ago Descr…

IFTTT

CVE-2025-14098 - Avira antivirus engine heap buffer OOB write when scanning a malformed MS-DOS executable file

byMaloy Roy Orko -June 12, 2026

CVE ID : CVE-2025-14098 Published : June 12, 2026, 11:16 p.m. | 2 hours, 4 minutes ago …

IFTTT

CVE-2026-12027 - Google Chrome Headless Sandbox Escape

byMaloy Roy Orko -June 11, 2026

CVE ID : CVE-2026-12027 Published : June 11, 2026, 10:16 p.m. | 1 hour, 2 minutes ago …

IFTTT

CVE-2026-46669 - `openvm-pairing` pairing check missing proper subfield check on scaling factor

byMaloy Roy Orko -June 10, 2026

CVE ID : CVE-2026-46669 Published : June 10, 2026, 10:17 p.m. | 1 hour ago Descrip…

IFTTT

CVE-2026-47919 - Acrobat Reader | Use After Free (CWE-416)

byMaloy Roy Orko -June 09, 2026

CVE ID : CVE-2026-47919 Published : June 9, 2026, 8:01 p.m. | 29 minutes ago Descr…

IFTTT

CVE-2026-46291 - crypto: caam - guard HMAC key hex dumps in hash_digest_key

byMaloy Roy Orko -June 08, 2026

CVE ID : CVE-2026-46291 Published : June 8, 2026, 5:16 p.m. | 41 minutes ago Descr…

IFTTT

CVE-2026-11461 - NousResearch hermes-agent resume Endpoint hermes_state.py resolve_session_by_title authorization

byMaloy Roy Orko -June 07, 2026

CVE ID : CVE-2026-11461 Published : June 7, 2026, 10:16 p.m. | 1 hour, 41 minutes ago …

IFTTT

CVE-2026-11460 - Boost Serialization improper validation of specified type of input

byMaloy Roy Orko -June 07, 2026

CVE ID : CVE-2026-11460 Published : June 7, 2026, 8:16 p.m. | 1 hour, 41 minutes ago …

IFTTT

CVE-2026-11436 - Mage AI Sign-in Flow index.tsx useMutation cross site scripting

byMaloy Roy Orko -June 06, 2026

CVE ID : CVE-2026-11436 Published : June 6, 2026, 4:16 p.m. | 1 hour, 40 minutes ago …

IFTTT

CVE-2026-6208 - IDOR in in HAVELSAN's Geographic Tracking System

byMaloy Roy Orko -June 05, 2026

CVE ID : CVE-2026-6208 Published : June 5, 2026, 3:16 p.m. | 2 hours, 39 minutes ago …

IFTTT

CVE-2025-67447 - Neterbit Router OS Command Injection

byMaloy Roy Orko -June 04, 2026

CVE ID : CVE-2025-67447 Published : June 4, 2026, 6:16 p.m. | 1 hour, 39 minutes ago …

IFTTT

CVE-2026-46266 - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP

byMaloy Roy Orko -June 03, 2026

CVE ID : CVE-2026-46266 Published : June 3, 2026, 3:50 p.m. | 2 hours, 5 minutes ago …

IFTTT

CVE-2026-10690 - wonderwhy-er DesktopCommanderMCP read_file filesystem.ts readFileFromUrl server-side request forgery

byMaloy Roy Orko -June 02, 2026

CVE ID : CVE-2026-10690 Published : June 3, 2026, 12:16 a.m. | 1 hour, 38 minutes ago …

IFTTT

CVE-2026-10529 - westboy CicadasCMS Task Scheduling Management ScheduleJobController.java cross site scripting

byMaloy Roy Orko -June 01, 2026

CVE ID : CVE-2026-10529 Published : June 2, 2026, 12:15 a.m. | 1 hour, 39 minutes ago …