52491 matches found
CVE-2026-92781
Builder.io Gen2 SDKs (through versions 5.2.11 and 0.25.13 ) are affected by a prototype pollution vulnerability in the unflatten helper that processes builder.userAttributes query parameters without prototype guards. An attacker can craft preview links containing __proto__ or prototype segments t...
CVE-2026-92781 Builder.io Gen2 SDKs through 5.2.11 Prototype Pollution via builder.userAttributes
Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the unflatten helper that processes builder.userAttributes query parameters without prototype guards. Attackers can craft preview links with proto or prototype segments to pollute...
CVE-2026-73169
Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Modbus transaction management interface of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to store...
CVE-2026-92358 Keycloak-services: keycloak-services: residual cross-browser account-link proof allows silent re-linking
A flaw was found in the first broker login flow of Keycloak. When a user confirms an account-linking request from a different browser, a temporary proof is created to validate the link. However, this proof is not properly cleared after the link is established or when the user later manually remov...
CVE-2026-92358
Keycloak 's first broker login flow contains a flaw where a temporary proof created during a cross-browser account-linking request is not properly cleared after the link is established or manually removed. An attacker who controls the external identity can exploit this residual proof to silently ...
CVE-2026-91720
creationtimestamp| type| source ---|---|--- 2026-09-16 05:16:49+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260916...
EUVD-2026-80068
An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScript supplied by the attacker...
CVE-2026-15639
An attacker can craft a malicious link that, if used by a legitimate user, may cause the user's browser to run JavaScript supplied by the attacker...
vhf-morse-transmitter-monitor
📡 VHF Monitor RF Transmitter TEMPEST / EMI Side-Channel Morse Generator Author: TA1EEI Efe Işık Version: 1.3 License: MIT Open Source / Educational & Experimental 📰 Featured In & Media Coverage UK NCSC National Cyber Security Centre – Included in the CTO Weekly Summary September 2026 highlighting...
CVE-2026-88976: Improper Neutralization of Input During Web Page Generation
Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.11, and in the discontinued 54.0.0-beta.0 through 54.0.0-beta.1 builds, Plate core HTML deserialization APIs parse supplied HTML strings in the active document. When an application passes untrusted or cross-user HTML to these APIs,...
PT-2026-93846
Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 9.5.4 Description Stored cross-site scripting occurs because the software fails to validate the uTimezone value during write operations and renders it without output encoding on the Dashboard user management page...
PT-2026-93977
A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface...
CVE-2026-91719
A code injection flaw was found in the XML component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=542115030...
CVE-2026-91715
A type confusion flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=558367547...
CVE-2026-15639
CVE-2026-15639 is a Reflected Cross-Site Scripting vulnerability in a Delinea product (specific product and version not detailed in the provided documents). An attacker crafts a malicious link that, when clicked by a legitimate user, causes the user's browser to execute attacker-supplied JavaScri...
CVE-2026-91733
A flaw was found in Skia, a 2D graphics library used in chromium-browser. This improper state validation vulnerability allows a remote attacker, who has already compromised the renderer process, to read memory outside of the security sandbox. This can be achieved by enticing a user to open a...
CVE-2026-91748
A race condition flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521559611...
CVE-2026-91720
An uninitialized resource flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523470135...