22420 matches found
CVE-2026-9056 Security fix for Qlik Talend Administration Center cross-site scripting vulnerability
A stored cross-site scripting vulnerability has been found in the Talend Administration Center. An attacker with permission to manage servers can store a XSS payload that can be triggered by a different user...
CVE-2026-9056
Talend Administration Center is affected by a stored XSS vulnerability (CVE-2026-9056). An attacker with server-management permissions can store an XSS payload that is triggered when another user visits the affected interface. Documented as stored XSS with user interaction required; no explicit e...
PT-2026-42105
Name of the Vulnerable Software and Affected Versions Talend Administration Center affected versions not specified Description A stored cross-site scripting XSS issue exists where an attacker with server management permissions can store a malicious payload. This payload is subsequently triggered...
PT-2026-42106
Name of the Vulnerable Software and Affected Versions Talend Administration Center affected versions not specified Description A broken access control issue exists that allows a user with "View" permission to modify the Talend Studio update URL. Recommendations Apply the available patch to resolv...
PT-2026-42159
Name of the Vulnerable Software and Affected Versions Windows Admin Center in Azure Portal affected versions not specified Description Improper access control and incorrect link resolution before file access, known as link following, allows an authorized attacker to elevate privileges both locall...
Talend Administration Center 安全漏洞
Talend Administration Center is a web-based application developed by Talend Corporation in the United States. It allows for centralized management of workspaces. There is a security vulnerability in Talend Administration Center, which stems from ineffective access control. This vulnerability may...
TSC-Security-Public
TechSmith Security Publications This repository contains publ...
Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
KLA91065 Multiple vulnerabilities in Microsoft System Center
Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Defender can ...
KLA91064 PE vulnerability in Microsoft Azure
An elevation of privilege vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-42834 Exploitation Related products Microsoft-Windows Microsoft-Azure CVE list CVE-2026-42834 critical Solution Install necessary...
How to Reduce Phishing Exposure Before It Turns into Business Disruption
What happens when a phishing email looks clean enough to pass through security, but dangerous enough to expose the business after one click? That is the gap many SOCs still struggle with: the attacks that leave teams unsure what was exposed, who else was targeted, and how far the risk has spread...
Continuous Detection, Continuous Response: Mate Security Redefines the Modern SOC
New York, USA, 18th May 2026, CyberNewswire...
LITE-SOC: Lightweight Security Operations Center Simulator for Cybersecurity Education
This innovative practice WIP paper describes LITE-SOC, a lightweight web-based Security Operations Center SOC simulator designed for instructor-led cybersecurity education. SOC analysts must triage large volumes of alerts, separate genuine threats from false positives, and communicate decisions...
Tenable Security Center
This module collects credentials and setup information from Tenable Security Center. root or TNS user permissions are required. We don't utilize SC's builtin backup functionality as that requires SC to be shut down. The module works in 2 phases: Phase 1: gather all passwords which can be decrypte...
Turla Turns Kazuar Backdoor Into Modular P2P Botnet for Persistent Access
The Russian state-sponsored hacking group known as Turla has transformed its custom backdoor Kazuar into a modular peer-to-peer P2P botnet that's engineered for stealth and persistent access to compromised hosts. Turla, per the U.S. Cybersecurity and Infrastructure Security Agency CISA, is assess...
Security Headers Omission in Jira Service Management Data Center
This is a vulnerability in a non-Atlassian Jira Service Management dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity Security Headers Omission vulnerability was introduced in versions 10.3.0 and 11.3.0 of Jira Service...
ethyca-fides has a DOM-based XSS vulnerability in fides.js via fides_description override
Summary fides.js is the script that renders Fides's consent banner on customer websites. It lets the embedding page override the banner's description text at runtime via a URL query parameter, a JavaScript global, or a cookie. On sites that have opted into HTML-formatted descriptions, the...
Security Updates for Microsoft Windows Admin Center (May 2026)
The Microsoft Windows Admin Center installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network. CVE-2026-35438 - Improper access...
PT-2026-41138
Name of the Vulnerable Software and Affected Versions Fides versions 2.33.0 through 2.84.4 Description A DOM-based Cross-Site Scripting XSS issue exists in fides.js, the script used to render consent banners. The problem occurs when the fides description variable is overridden via a URL query...
