25830 matches found
BIT-ELK-2026-72668 Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation
Unintended Proxy or Intermediary 'Confused Deputy' CWE-441 in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit a shared agent could cause privileged operations to be carried out under the identity of a higher-privileged user who subsequently interacts...
CVE-2026-89047
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2026-89047
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting (XSS) via URL in versions up to and including 3.0.1 . The root cause is insufficient input sanitization and output escaping . Unauthenticated attackers can inject a...
EUVD-2026-90543
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2026-89047 Social Media Share Buttons & Social Sharing Icons <= 3.0.1 - Reflected DOM-Based Cross-Site Scripting via URL
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2026-76147 Genians, Inc Genian NAC/ZTNA Remote Code Execution
A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...
CVE-2026-76147 Genians, Inc Genian NAC/ZTNA Remote Code Execution
A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...
CVE-2026-76147
A path traversal (ZIP Slip) vulnerability exists in the agent upgrade feature of Genian NAC/ZTNA . The root cause is insufficient authorization and integrity verification , which allows a remote attacker to achieve remote code execution . No specific patch versions or exploit links are provided i...
CVE-2026-102268 vulnerabilities
Vulnerabilities for packages: kserve, semgrep, open-webui, superset, py3-cassandra-medusa, datadog-agent, ggshield...
GHSA-FFC3-869F-JXW9 vulnerabilities
Vulnerabilities for packages: kserve, semgrep, open-webui, superset, py3-cassandra-medusa, datadog-agent, ggshield...
GHSA-R6X4-923Q-G947 vulnerabilities
Vulnerabilities for packages: kserve, semgrep, open-webui, superset, py3-cassandra-medusa, datadog-agent, ggshield...
CVE-2026-102269 vulnerabilities
Vulnerabilities for packages: kserve, semgrep, open-webui, superset, py3-cassandra-medusa, datadog-agent, ggshield...
CVE-2026-102272 vulnerabilities
Vulnerabilities for packages: kserve, semgrep, open-webui, superset, py3-cassandra-medusa, datadog-agent, ggshield...
GHSA-HXM8-2XGR-2P9M vulnerabilities
Vulnerabilities for packages: kserve, semgrep, open-webui, superset, py3-cassandra-medusa, datadog-agent, ggshield...
CLEANSTART-2026-TX77163 When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh
Security vulnerability affects the kube-state-metrics-fips package. When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh...
CVE-2026-51874
In Devika v1.0 , the Patcher Agent 's save_code_to_project function is susceptible to a path traversal vulnerability (CWE-22). This flaw allows an attacker to write files outside of the intended project workspace. The vulnerability has been observed in the wild, as evidenced by a sighting report....
PT-2026-104034
Name of the Vulnerable Software and Affected Versions Devika version 1.0 Description The save code to project function within the Feature Agent contains a path traversal flaw. This issue allows attackers to write files outside the designated project workspace, which could lead to a full server...
PT-2026-103718
Name of the Vulnerable Software and Affected Versions Social Media Share Buttons & Social Sharing Icons versions prior to 3.0.2 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting XSS, a technique where maliciou...
PT-2026-104033
Name of the Vulnerable Software and Affected Versions Devika version 1.0 Description The Patcher Agent save code to project function contains a path traversal flaw. This issue allows attackers to write files outside the intended project workspace by manipulating file paths. Recommendations As a...