Announcements

CVE-2026-65883 (matched: php)

  • 8th August 2026
A security vulnerability has been identified in the Aimy Captcha-Less Form Guard extension for Joomla, developed by aimy-extensions.com. The flaw impacts versions 18.0 through 20.0 of the tool.This issue exploits PHP object injection, a technique that lets unauthorized users run harmful code on your website's hosting server. Attackers can trigger ...
Continue reading

CVE-2026-14526 (matched: wordpress)

  • 8th August 2026
A security flaw has been found in the AI Copilot – Content Generator plugin for WordPress, affecting all versions up to and including 1.5.6. The plugin does not properly confirm that a user is allowed to perform sensitive actions, creating an opening for unauthorized access to your site.If your site uses this plugin and displays either the ...
Continue reading

JetBrains TeamCity: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

  • 8th August 2026
A security flaw has been discovered in JetBrains TeamCity, a software development and project management tool that some web hosting clients run on their servers. The vulnerability is a deserialization of untrusted data issue, which means the tool fails to properly check and validate data it receives from outside sources before processing it.If ...
Continue reading

Progress LoadMaster: Progress LoadMaster Command Injection Vulnerability

  • 8th August 2026
A security vulnerability has been identified in Progress LoadMaster, a load balancing tool some website owners use to distribute traffic across multiple servers for improved reliability and performance.This is a command injection flaw, meaning attackers who do not have any authorized access to a LoadMaster system can send specially crafted, ...
Continue reading