CVE-2026-84896

The King Addons for Elementor WordPress plugin (versions before 51.1.77 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the failure to escape a widget display-style setting before it is rendered within an HTML attribute. This allows users with Contributor-level acce...

CVE-2024-11080: Improper Control of Generation of Code

The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32 to 2.3.1 via several functions in the /includes/blocks/form-wrap/function.php file. This makes it possible for unauthenticated attackers to execute actions with...

Malicious Package

Overview infinity-grid is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

SUSE CVE-2026-84126

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

Linux Distros Unpatched Vulnerability : CVE-2026-84126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155. CVE-2026-84126 Note that Nessus...

CVE-2026-84126

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

CVE-2026-84126

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

EUVD-2026-69075

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

CVE-2026-84126 Incorrect boundary conditions in the Layout: Grid component

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

CVE-2026-84126 Incorrect boundary conditions in the Layout: Grid component

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

CVE-2026-84126

The Firefox and Thunderbird browsers are affected by a vulnerability involving incorrect boundary conditions in the Layout: Grid component . The issue has been remediated in Firefox 155 and Thunderbird 155 . While the vulnerability was identified as having a Medium base severity (CVSS 4.3) and a ...

CVE-2026-84126

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

CVE-2026-84126: Buffer Copy without Checking Size of Input

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

PT-2026-84179

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Thunderbird versions prior to 155 Description Incorrect boundary conditions exist within the Layout: Grid component. Recommendations Update Firefox to version 155. Update Thunderbird to version 155...

CVE-2026-55673 PowSyBl: Command Injection in LocalCommandExecutor-s

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to 7.2.2, UnixLocalCommandExecutor and WindowsLocalCommandExecutor concatenate command arguments and environment variables into strings interpreted through bash -c or cmd /c without sufficient escaping...

CVE-2026-55673

PowSyBl (Power System Blocks), a framework for building power system software, is affected by a command injection vulnerability prior to version 7.2.2. The UnixLocalCommandExecutor and WindowsLocalCommandExecutor components concatenate attacker-controlled arguments and environment variables into ...

CVE-2026-52834

A flaw was found in jxl-grid, a pure Rust implementation of a JPEG XL decoder. On 32-bit platforms, decoding a specially crafted JPEG XL image can lead to an integer overflow in length calculations. This overflow can cause the allocation of a smaller buffer than required, enabling...

Malicious Package

Overview streak-grid-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-4559 Image Photo Gallery Final Tiles Grid <= 3.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'delay' Shortcode Attribute

The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'delay' shortcode attribute in all versions up to, and including, 3.6.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Athiwat Tiprasaharn Jitlada, Itthidej Aramsri Boeing777 in WordPress Plugin Image Photo Gallery Final Tiles Grid versions = 3.6.12...