stemshop.bsky.social

@stemshop.bsky.social

Critical CVEs, vulnerability research, PoCs and security intelligence. Tracking high-impact vulnerabilities and affected products. https://stemshop.top/cve/ #CVE #CyberSecurity #InfoSec #Vulnerability #SecurityResearch

🚨 CVE-2026-112005 — CVSS 9.2 CRITICAL WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read a... 🔎 https://stemshop.top/cve/CVE-2026-112005 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-111998 — CVSS 9.3 CRITICAL Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote a... 🔎 https://stemshop.top/cve/CVE-2026-111998 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-110886 — CVSS 9.8 CRITICAL Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversati... 🔎 https://stemshop.top/cve/CVE-2026-110886 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-110372 — CVSS 9.8 CRITICAL Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Esca... 🔎 https://stemshop.top/cve/CVE-2026-110372 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-109894 — CVSS 9.3 CRITICAL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Array... 🔎 https://stemshop.top/cve/CVE-2026-109894 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-111911 — CVSS 9.3 CRITICAL phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registration end... 🔎 https://stemshop.top/cve/CVE-2026-111911 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-104736 — CVSS 9.8 CRITICAL The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including,... 🔎 https://stemshop.top/cve/CVE-2026-104736 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-110653 — CVSS 9.1 CRITICAL The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vu... 🔎 https://stemshop.top/cve/CVE-2026-110653 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-111823 — CVSS 9.8 CRITICAL Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth... 🔎 https://stemshop.top/cve/CVE-2026-111823 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-96620 — CVSS 9.2 CRITICAL Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to the Clau... 🔎 https://stemshop.top/cve/CVE-2026-96620 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-111711 — CVSS 9.3 CRITICAL Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa we... 🔎 https://stemshop.top/cve/CVE-2026-111711 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-111708 — CVSS 9.3 CRITICAL WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unau... 🔎 https://stemshop.top/cve/CVE-2026-111708 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-111704 — CVSS 9.3 CRITICAL LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated... 🔎 https://stemshop.top/cve/CVE-2026-111704 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-111693 — CVSS 9.3 CRITICAL DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allows unau... 🔎 https://stemshop.top/cve/CVE-2026-111693 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-111692 — CVSS 9.3 CRITICAL DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthentica... 🔎 https://stemshop.top/cve/CVE-2026-111692 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-111691 — CVSS 9.1 CRITICAL WIMOOR through commit ec86736 contains an authentication bypass vulnerability that allows attackers to impe... 🔎 https://stemshop.top/cve/CVE-2026-111691 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-111690 — CVSS 9.3 CRITICAL Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated... 🔎 https://stemshop.top/cve/CVE-2026-111690 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-111687 — CVSS 9.3 CRITICAL WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated ... 🔎 https://stemshop.top/cve/CVE-2026-111687 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-111675 — CVSS 9.1 CRITICAL Course-tencent-cloud through 2.0.1 contains an improper restriction of authentication attempts vulnerabilit... 🔎 https://stemshop.top/cve/CVE-2026-111675 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-111673 — CVSS 9.3 CRITICAL IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers ... 🔎 https://stemshop.top/cve/CVE-2026-111673 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-111663 — CVSS 9.2 CRITICAL Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated atta... 🔎 https://stemshop.top/cve/CVE-2026-111663 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-111643 — CVSS 9.3 CRITICAL Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticat... 🔎 https://stemshop.top/cve/CVE-2026-111643 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-111641 — CVSS 9.3 CRITICAL FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attack... 🔎 https://stemshop.top/cve/CVE-2026-111641 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-111636 — CVSS 9.2 CRITICAL OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated... 🔎 https://stemshop.top/cve/CVE-2026-111636 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-111626 — CVSS 9.3 CRITICAL Webreaper Damselfly through 4.5.3 contains an authentication bypass vulnerability that allows unauthenticat... 🔎 https://stemshop.top/cve/CVE-2026-111626 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-109588 — CVSS 9.3 CRITICAL Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 an... 🔎 https://stemshop.top/cve/CVE-2026-109588 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-109587 — CVSS 9.3 CRITICAL Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11... 🔎 https://stemshop.top/cve/CVE-2026-109587 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-102551 — CVSS 9.2 CRITICAL Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in ... 🔎 https://stemshop.top/cve/CVE-2026-102551 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-92262 — CVSS 9.9 CRITICAL MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13,... 🔎 https://stemshop.top/cve/CVE-2026-92262 #CVE #CyberSecurity #InfoSec

🚨 CVE-2026-85748 — CVSS 9.9 CRITICAL MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYS_REFC... 🔎 https://stemshop.top/cve/CVE-2026-85748 #CVE #CyberSecurity #InfoSec