CVE-2026-108942 philz1337x clarity-upscaler Extra Networks Card Rendering ui_extra_networks.py create_html_for_item cross site scripting

A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This impacts the function createhtmlforitem of the file modules/uiextranetworks.py of the component Extra Networks Card Rendering. The manipulation of the argument Description result...

CVE-2026-109403: Server-Side Request Forgery (SSRF)

A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file ai/src/main/java/org/conductoross/conductor/ai/a2a/A2AService.java of the component Agent Card Fetching. Executing a manipulation of the...

PT-2026-112440

Name of the Vulnerable Software and Affected Versions Windows Smart Card affected versions not specified Description A use-after-free condition in Windows Smart Card allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

CVE-2026-83584: Use After Free

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally...

CVE-2026-83579: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally...

CVE-2026-108942: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This impacts the function createhtmlforitem of the file modules/uiextranetworks.py of the component Extra Networks Card Rendering. The manipulation of the argument Description result...

Microsoft Windows: CVE-2026-83579: Windows Smart Card Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally...

VulnCheck KEV: CVE-2026-4394

The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Credit Card field's 'Card Type' sub-field input.4 in all versions up to, and including, 2.9.30. This is due to the getvalueentrydetail method in the GFFieldCreditCard class outputting the card type value...

PT-2026-112436

Name of the Vulnerable Software and Affected Versions Windows Smart Card affected versions not specified Description A heap-based buffer overflow occurs in Windows Smart Card, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption...

Microsoft Windows: CVE-2026-83584: Windows Smart Card Elevation of Privilege Vulnerability

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally...

Rocky Linux 9.6 [TuxCare] Security Update: opensc (ALMALINUX9.6:CLSA-2026:1791470029)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791470029 advisory. - A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcosconstructfci44 of the file...

bad_ducky

Bad Ducky Resumen Bad Ducky es otro clon de Rubber Ducky. Está basado en la placa CJMCU BadUsb ATMEGA32u4 - clon de Arduino Leonardo con lector de tarjetas integrado, que se puede comprar en eBay o aliexpress. Mi objetivo era crear algo compatible con los scripts de Rubber Ducky, con la capacidad...

BIT-GHOST-2026-104413 Ghost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card Images

Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including Contributors, to host arbitrary HTML by abusing bookmark card image fetching. Attackers can create bookmark cards that store non-image files from external websites as icons or...

swsim

swSIM Il progetto deve essere clonato in modo ricorsivo. Scaricare il file ZIP non è sufficiente. swSIM è una scheda SIM completamente software. È il primo simulatore di scheda SIM disponibile pubblicamente per quanto ne so che non dipende da alcun hardware SIM per funzionare. Ambito Un simulator...

CVE-2026-62127

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MediaRon LLC WP Plugin Info Card wp-plugin-info-card allows Stored XSS.This issue affects WP Plugin Info Card: from n/a through 6.3.5...

CVE-2026-62127

The WP Plugin Info Card (wp-plugin-info-card) by MediaRon LLC is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This issue impacts versions from n/a through 6.3.5 . The vulnerability allows for the execution of malicious scripts...

EUVD-2026-94888

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MediaRon LLC WP Plugin Info Card wp-plugin-info-card allows Stored XSS.This issue affects WP Plugin Info Card: from n/a through 6.3.5...

CVE-2026-62127 WordPress WP plugin Info Card plugin <= 6.3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MediaRon LLC WP Plugin Info Card wp-plugin-info-card allows Stored XSS.This issue affects WP Plugin Info Card: from n/a through 6.3.5...

WordPress WP plugin Info Card plugin <= 6.3.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin WP Plugin Info Card versions = 6.3.5...

CVE-2026-62127: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MediaRon LLC WP Plugin Info Card wp-plugin-info-card allows Stored XSS.This issue affects WP Plugin Info Card: from n/a through 6.3.5...