The Grid <= 2.8.1 - Unauthenticated Code Injection

Theme-one The Grid = 2.8.1 contains a command injection caused by improper control of code generation, letting attackers execute arbitrary commands remotely, exploit requires crafted input. id: CVE-2026-94169 info: name: The Grid = 2.8.1 - Unauthenticated Code Injection author: 0xAkoko severity:...

Selenium Grid < 4.0.0-alpha-7 - Remote Code Execution

Selenium Server Grid before 4.0.0-alpha-7 permits unauthenticated session creation and unsafe capability injection via /wd/hub/session due to missing Origin validation and weak content-type enforcement. id: CVE-2022-28108 info: name: Selenium Grid 4.0.0-alpha-7 - Remote Code Execution author: t0x...

Post Grid <= 2.2.50 - Information Exposure via REST API

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PickPlugins Post Grid Combo – 36+ Gutenberg Blocks.This issue affects Post Grid Combo – 36+ Gutenberg Blocks: from n/a through 2.2.50. id: CVE-2023-40211 info: name: Post Grid = 2.2.50 - Information Exposure via REST API...

Essential Grid <= 3.1.0 - Cross-Site Scripting

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability in ThemePunch OHG Essential Grid plugin = 3.1.0 versions. id: CVE-2023-47684 info: name: Essential Grid = 3.1.0 - Cross-Site Scripting author: 0xpugal severity: medium description: | Unauthenticated Reflected Cross-Site Scripting XS...

Grid-Mobile

Grid - Encrypted Location Sharing Be Hard to Track. mygrid.app Grid is a secure, end-to-end encrypted E2EE location sharing application integrated with the Matrix Protocol. Built using Flutter, Grid provides a privacy-focused solution for sharing your location with trusted contacts. Features...

CVE-2026-123975

The Grid Community Toolkit (versions before 6.2.20261111) and globus-gss-assist (before 12.9) are vulnerable to a heap out-of-bounds write in the globus_gss_assist_token_get_fd() function. This flaw is triggered by processing SSLv2 record lengths below 3. Remote unauthenticated clients can exploi...

EUVD-2026-125403

Grid Community Toolkit before 6.2.20261111 globus-gss-assist before 12.9 contains a heap out-of-bounds write in globusgssassisttokengetfd triggered by SSLv2 record lengths below 3. Remote unauthenticated clients can send a crafted GSI handshake record to services like globus-gatekeeper and myprox...

EUVD-2026-125356

In Telerik UI for Blazor, versions v12.0.0 through 15.2.0, an improper input validation vulnerability exists, where the Grid, TreeList and Gantt's AI command filters on any model property, bypassing the declared column allowlist...

CVE-2026-119102 AI Command Filters On Any Property Bypassing Column Allowlist

In Telerik UI for Blazor, versions v12.0.0 through 15.2.0, an improper input validation vulnerability exists, where the Grid, TreeList and Gantt's AI command filters on any model property, bypassing the declared column allowlist...

CVE-2026-119102

In Telerik UI for Blazor (versions v12.0.0 through 15.2.0 ), an improper input validation vulnerability allows the Grid , TreeList , and Gantt components to process AI command filters on any model property. This behavior bypasses the declared column allowlist , potentially exposing data outside t...

EUVD-2026-125043

listmonk 6.2.0 before 7.0.0-beta.2 contains a missing authentication vulnerability that allows unauthenticated attackers to submit Azure Event Grid bounce webhooks when no shared secret is configured. Attackers can POST forged EmailDeliveryReportReceived events with Bounced status to...

phantom-grid

⬡ Phantom Grid Free, open-source Burp Collaborator alternative for penetration testing labs Out-of-Band OOB interaction capture · HTTP/HTTPS · DNS · SQLite · Exfil reassembly What is this? Phantom Grid is a self-hosted OOB Out-of-Band interaction capture tool — a free alternative to Burp...

phantom-grid

Phantom Grid - Enterprise Zero Trust Network Access ZTNA Phantom Grid is a next-generation Zero Trust Network Access ZTNA and active defense system. It operates at both the Kernel Level eBPF and Application Level mTLS to transform Linux servers into a robust, deceptive attack surface. Built for...

CVE-2026-124692

In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, the Grid and TreeList column-reorder drag clue reparses header text as HTML. An attacker who can influence a column field or title used by an affected application can cause JavaScript to execute when a use...

CVE-2026-124692

In Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110 , a vulnerability exists in the Grid and TreeList components. The root cause is that the column-reorder drag clue reparses header text as HTML. An attacker capable of influencing a column field or title can trigger ...

CVE-2026-124692 Cross-Site Scripting in Kendo UI for jQuery Grid and TreeList Column Reordering

In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, the Grid and TreeList column-reorder drag clue reparses header text as HTML. An attacker who can influence a column field or title used by an affected application can cause JavaScript to execute when a use...

EUVD-2026-123601

In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, the Grid and TreeList column-reorder drag clue reparses header text as HTML. An attacker who can influence a column field or title used by an affected application can cause JavaScript to execute when a use...

WonderLanternZ7

WonderLantern Z7 lab EXPERIMENTAL CAMERA FIRMWARE RESEARCH. A failed or incorrect flash can permanently brick a camera, destroy data, or require paid repair/replacement. Use entirely at your own risk. To the fullest extent permitted by law, the authors/contributors accept no liability. No warrant...

CVE-2026-125436

Missing Authorization vulnerability in Mamunur Rashid The Post Grid the-post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Post Grid: from n/a through 7.9.9...

CVE-2026-125436 WordPress The Post Grid plugin <= 7.9.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mamunur Rashid The Post Grid the-post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Post Grid: from n/a through 7.9.9...