CVE-2026-76377

In versions below 2.5.3 of the Azure AD Graph app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive password by invoking the reset password action, because the action's temppassword parameter is not masked and is shown in cleartext in the user...

CVE-2026-76381 Information Disclosure through Action Parameters in MS Graph for Active Directory app for Splunk SOAR

In versions below 1.5.2 of the MS Graph for Active Directory app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive password by invoking the reset password action, because the action's temppassword parameter is not masked and is shown in cleartext in...

CVE-2026-76381

CVE-2026-76381 is an information disclosure vulnerability in the MS Graph for Active Directory app for Splunk SOAR , affecting versions below 1.5.2 . The root cause is that the temp_password parameter in the reset password action is not marked as a password field, causing it to be displayed in cl...

CVE-2026-76381 Information Disclosure through Action Parameters in MS Graph for Active Directory app for Splunk SOAR

In versions below 1.5.2 of the MS Graph for Active Directory app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive password by invoking the reset password action, because the action's temppassword parameter is not masked and is shown in cleartext in...

CVE-2026-76377 Information Disclosure through Action Parameters in Azure AD Graph app for Splunk SOAR

In versions below 2.5.3 of the Azure AD Graph app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive password by invoking the reset password action, because the action's temppassword parameter is not masked and is shown in cleartext in the user...

CVE-2026-76377

CVE-2026-76377 affects the Azure AD Graph app for Splunk SOAR in versions below 2.5.3 . The root cause is that the temp_password parameter in the reset password action is not marked as a password field, causing it to be displayed in cleartext in the Splunk SOAR user interface. Any user with a rol...

Scrapegraph-ai v2.1.7

🚀 Looking for an even faster and simpler way to scrape at scale only 5 lines of code? Check out our enhanced version at ScrapeGraphAI.com! 🚀 🕷️ ScrapeGraphAI: You Only Scrape Once English | 中文 | 日本語 | 한국어 | Русский | Türkçe | Deutsch | Español | français | Português | Italiano ScrapeGraphAI is a...

Exploit for Cross-site Scripting in Prometheus

CVE-2026-40179 — Prometheus stored XSS via remotewrite A m...

PT-2026-78808

In versions below 1.5.2 of the MS Graph for Active Directory app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive password by invoking the reset password action, because the action's temp password parameter is not masked and is shown in cleartext in...

HARP: Hierarchical Adaptive Ranking with Preference-Adaptive Fusion for Query-Based CVE Prioritization

Vulnerability prioritization is inherently preference dependent, since the same CVE can receive different remediation priority under different operational preference scenarios. Existing scoring systems and ranking methods typically assume a fixed criterion. In practice, organizations already...

PT-2026-78804

In versions below 2.5.3 of the Azure AD Graph app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive password by invoking the reset password action, because the action's temp password parameter is not masked and is shown in cleartext in the user...

CVE-2026-76381: Cleartext Storage of Sensitive Information

In versions below 1.5.2 of the MS Graph for Active Directory app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive password by invoking the reset password action, because the action's temppassword parameter is not masked and is shown in cleartext in...

CTIFoundry: An Agent-Native Corpus Scaffold for Cyber Threat Intelligence

Cyber threat intelligence CTI is increasingly consumed not by human analysts but by LLM agents that compose multi-step investigations at query time. The harness side of this shift has matured rapidly planning loops, tool protocols, context management, but the corpus side has not: threat reports a...

CVE-2026-76377: Cleartext Storage of Sensitive Information

In versions below 2.5.3 of the Azure AD Graph app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive password by invoking the reset password action, because the action's temppassword parameter is not masked and is shown in cleartext in the user...

GHSA-7CJ5-V4PP-V632 LibreNMS: Stored XSS via graph_descr admin config settings echoed without escaping to all authenticated users

Summary The graphdescr. family of settings is echoed verbatim without htmlspecialchars in includes/html/pages/graphs.inc.php:194. Any admin can store a malicious HTML payload that executes in every authenticated user's browser viewing that graph type. CVSS...

CVE-2026-74946

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

CVE-2026-74946

Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

PT-2026-83378

Summary The graph descr. family of settings is echoed verbatim without htmlspecialchars in includes/html/pages/graphs.inc.php:194. Any admin can store a malicious HTML payload that executes in every authenticated user's browser viewing that graph type. CVSS...

com.gitee.dqhm:emmon-util (1.0.2), org.cqfn:reportwine (0.1) +11 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.2.9)

org.docx4j:docx4j-core MAVEN version 8.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - com.gitee.dqhm:emmon-util 1.0.2 - org.cqfn:reportwine 0.1 - org.docx4j:docx4j-conversion-via-microsoft-graph 8.2.9 ...

hu.blackbelt.bundles.docx4j:org.docx4j (8.3.14_1), org.docx4j:docx4j-bundle (8.3.14) +11 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.3.14)

org.docx4j:docx4j-core MAVEN version 8.3.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - hu.blackbelt.bundles.docx4j:org.docx4j 8.3.141 - org.docx4j:docx4j-bundle 8.3.14 -...