CVE-2026-86784 Visualizer < 4.0.8 - Contributor+ Stored XSS via JSON Data Source

The Visualizer WordPress plugin before 4.0.8 does not sanitise and escape a chart's JSON data source configuration before outputting it back in the chart editor, allowing users with the Contributor role and above to store JavaScript that executes in the browser of any higher-privileged user, such...

EUVD-2026-80205

The Visualizer WordPress plugin before 4.0.8 does not sanitise and escape a chart's JSON data source configuration before outputting it back in the chart editor, allowing users with the Contributor role and above to store JavaScript that executes in the browser of any higher-privileged user, such...

CVE-2026-86784

The Visualizer WordPress plugin (versions before 4.0.8 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the failure to sanitise and escape a chart's JSON data source configuration before it is output back in the chart editor. This allows users with Contributor role p...

CVE-2026-86784 Visualizer < 4.0.8 - Contributor+ Stored XSS via JSON Data Source

The Visualizer WordPress plugin before 4.0.8 does not sanitise and escape a chart's JSON data source configuration before outputting it back in the chart editor, allowing users with the Contributor role and above to store JavaScript that executes in the browser of any higher-privileged user, such...

testkube v2.13.2

The Open Testing Platform for AI-driven Engineering Teams Testkube provides a single platform for defining, running and analyzing automated tests, using your existing testing tools/scripts, running in your Kubernetes infrastructure...

CVE-2026-83269

creationtimestamp| type| source ---|---|--- 2026-09-16 02:12:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2u3nuct2t 2026-09-16 04:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmatwdqw42f 2026-09-16 16:00:43+00:00| seen|...

CVE-2026-83282

creationtimestamp| type| source ---|---|--- 2026-09-16 01:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlzlhlam52n 2026-09-16 02:12:57+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2udztim2w 2026-09-16 16:00:43+00:00| seen|...

EUVD-2026-80007

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol DHCP relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from an IP address that is not configured as a helper address, and the relay agent would forward it to...

CVE-2026-83154

creationtimestamp| type| source ---|---|--- 2026-09-16 00:13:54+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu7i6j742g 2026-09-16 03:30:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm76dl4zg24 2026-09-22 12:37:07+00:00| seen|...

CVE-2026-83103

creationtimestamp| type| source ---|---|--- 2026-09-16 00:13:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu5yc23725 2026-09-16 01:00:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlws6nrfs2g 2026-09-23 09:46:49+00:00| seen|...

CVE-2026-83066

creationtimestamp| type| source ---|---|--- 2026-09-16 00:12:14+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu4ijv3s2w 2026-09-16 02:50:13+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm4wyf3v72t 2026-09-23 04:07:07+00:00| seen|...

CVE-2026-83062

creationtimestamp| type| source ---|---|--- 2026-09-16 00:11:57+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu3yttex2j 2026-09-16 02:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm4wrexzx2f 2026-09-23 06:07:07+00:00| seen|...

CVE-2026-83058

creationtimestamp| type| source ---|---|--- 2026-09-16 00:11:24+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu2zg6332t 2026-09-16 00:40:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlvodn7ut2t 2026-09-23 09:48:09+00:00| seen|...

CVE-2026-83056

creationtimestamp| type| source ---|---|--- 2026-09-16 00:11:08+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu2jcud422 2026-09-16 00:30:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlv4invrx2t 2026-09-23 09:48:13+00:00| seen|...

The vulnerability of the CORS configuration mechanism of the Langflow agent creation and deployment tool allows a attacker to execute arbitrary code.

The vulnerability of the CORS configuration mechanism used by the Langflow agent creation and deployment tool is related to deficiencies in the data source verification mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-92588: Authorization Bypass Through User-Controlled Key

n8n is a workflow automation platform. In n8n versions before 1.123.76, 2.37.7, and 2.38.2, the source control push endpoint derived the set of files to push from the file paths and status supplied in the client request payload instead of from the server-side status computed for the requesting...

PT-2026-94105

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.76 n8n versions prior to 2.37.7 n8n versions prior to 2.38.2 Description The source control push endpoint relies on file paths and status provided in the client request payload rather than server-side status compute...

CVE-2026-92784: Improper Control of Generation of Code

@refinedev/inferencer through 7.0.0 fails to escape API field names when interpolating them into generated JSX source code. Attackers controlling the data provider can inject malicious JavaScript through crafted JSON property names that execute in the developer's browser when the Inferencer page...

CVE-2026-92719: Server-Side Request Forgery (SSRF)

Quickwit through 0.9.0 fails to validate the host and scheme of the queueurl parameter in SQS file sources, allowing attackers to make the node issue requests to arbitrary internal addresses. Attackers can supply a malicious queueurl to the create-source API to scan internal networks and...

Google Chrome Authorization Vulnerability (CNVD-2026-37842)

Google Chrome is a free web browser developed by Google Inc. Google Chrome has a licensing issue vulnerability, which stems from improper licensing management in FedCM. Attackers can exploit this vulnerability by using specially crafted HTML pages to bypass Web source policies...