PT-2026-110000

Name of the Vulnerable Software and Affected Versions Studio-Saelix Sencho versions prior to 0.97.1 Description An issue exists in the Add Remote Node API Endpoint component within the isValidRemoteUrl function of the backend/src/utils/validation.ts file. An authenticated user with node-managemen...

PT-2026-110165

Name of the Vulnerable Software and Affected Versions CoreShop versions prior to 2026.2.3 Description Low-privileged backend users can list permission-restricted resources due to a missing authorization check in the listAction function of the ResourceController. Authenticated Pimcore users withou...

PT-2026-110148

Name of the Vulnerable Software and Affected Versions Vearch versions 3.5.2 through 3.5.9 Description An incorrect authorization issue exists in the HasPermissionForResources function. This flaw allows the system to ignore stored ReadOnly or None privilege levels for resources assigned to a role...

PT-2026-110170

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.11 Description An authorization flaw exists in the MCP server faq search tool. This occurs because the searchDatabase function fails to apply user or group permission checks. Consequently, clients connected to th...

PT-2026-109502

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.9 This is due to a missing ownership and capability check on the user parameter within the process edit function, which allows any...

GHSA-FPRF-R6RV-XG99 Vikunja: Saved filter creation with an empty filter string recalculates task positions across all tenants

Summary In Vikunja v2.6.0 the task position recalculation that runs when a saved filter view is created fails open when the requesting user has no accessible projects. Instead of aborting, the search that feeds the recalculation loses its project scope entirely and returns every task in the...

Vikunja: Saved filter creation with an empty filter string recalculates task positions across all tenants

Summary In Vikunja v2.6.0 the task position recalculation that runs when a saved filter view is created fails open when the requesting user has no accessible projects. Instead of aborting, the search that feeds the recalculation loses its project scope entirely and returns every task in the...

CVE-2026-97468

A flaw was found in Apache CXF. The Security Token Service STS and token validation components cache validated security tokens using a weak, non-cryptographic hash function and treat cache matches as proof of validity. A remote attacker can craft a security token that generates a hash collision...

Groundhogg permission and access control vulnerabilities

Groundhogg versions 4.9 and earlier have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from a lack of ownership and capability checks for the user parameter in the processedit function. As a result, authenticated users with the ability to edit...

WordPress Filter Everything Cross-Site Script Vulnerabilities

WordPress Filter Everything 1.9.6 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from the flrtelementorloadmoreanchor function’s insufficient input sanitization and output escaping. The function does not escape the URL retrieved from $SERVER'REQUESTURI' a...

WordPress Payment Plugins for Stripe: WooCommerce Cross-Site Script Vulnerabilities

WordPress payment plugins for Stripe and WooCommerce versions 4.0.17 and earlier have a cross-site scripting vulnerability. This vulnerability stems from the use of the “response” URL fragment to trigger reflective cross-site scripting. The issue arises due to improper input cleaning and output...

TwoMillion-Machine-Writeup

About Machine TwoMillion is an Easy difficulty Linux box that was released to celebrate reaching 2 million users on HackTheBox. The box features an old version of the HackTheBox platform that includes the old hackable invite code. After hacking the invite code an account can be created on the...

Denial of Service (DoS)

Overview org.apache.cxf:cxf-core is an an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. Affected versions of this package are vulnerable to Denial of Service DoS via the CompressionUtils.inflate function. An...

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are below - CVE-2026-105133 CVSS v4 score: 5.5 - An improper authentication...

Security Bulletin: UPDATED security alert for multiple OpenSSL vulnerabilities impacting AIX. Updated On: Fri Oct 9 03:18:49 CDT 2026. Reason: Updated the iFix to include the previously missing OpenSSL 1.1 and 1.0.2 shared libraries.

Summary Vulnerabilities in OpenSSL could cause excessive memory consumption CVE-2026-54874, heap buffer overflow CVE-2026-63072, indefinite cache growth leading to denial of service CVE-2026-63074, invalid pointer dereference CVE-2026-63076, and authentication forgery CVE-2026-75803. OpenSSL is...

BIT-THRIFT-2026-94636 Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up

Improper handling of highly compressed data data amplification, Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

Security Bulletin: Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in version 1.0.2.0 Vulnerability Details CVEID:CVE-2026-30892 DESCRIPTION: crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the crun exec option -u --user is incorrectly...

Security Bulletin:Vulnerabilities exists in callhome of IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in security patch ina-release-callhomeimage-1.0.2.3. Vulnerability Details CVEID:CVE-2022-2042 DESCRIPTION: Use After Free in GitHub repository vim/vim prior to 8.2. CWE:CWE-416: Use After Free CVSS Source: IBM X-Forc...

windows_hardening

HardeningKitty e Windows Hardening Introduzione Il progetto è nato come una semplice lista di hardening per Windows 10. Dopo qualche tempo, è stato creato HardeningKitty per semplificare l'hardening di Windows. Ora, HardeningKitty supporta le linee guida di Microsoft, CIS Benchmarks, DoD STIG e B...

K000163617: OpenSSL vulnerabilities CVE-2026-63072, CVE-2026-63073 and CVE-2026-63074

Security Advisory Description CVE-2026-63072 Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap writ...