PT-2026-88511

Impact The GitHub Trigger generated a signing secret when it registered a webhook and verified X-Hub-Signature-256 on each delivery. When GitHub answered the create request with a 422 because a webhook for the URL already existed, the node adopted the remote hook but kept only its id and events,...

PT-2026-87908

Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-72999: Out-of-bounds Read

Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-86080: Improper Verification of Cryptographic Signature

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the GitHub Trigger generated a webhook secret but discarded it when GitHub returned HTTP 422 and the node reused an existing webhook. Workflow static data then retained webhookId without webhookSecret, and...

CVE-2026-86480

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

CVE-2026-86480

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

CVE-2026-86480

JetBrains Hub prior to version 2026.2.52442 is affected by a privilege escalation vulnerability. An unauthenticated attacker over the network could register a trusted service and subsequently gain superuser privileges , resulting in full compromise of confidentiality, integrity, and availability ...

EUVD-2026-72496

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

CVE-2026-86480

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

PT-2026-86852

Name of the Vulnerable Software and Affected Versions JetBrains Hub versions prior to 2026.2.52442 Description An unauthenticated attacker can register a malicious trusted service through a registration endpoint where the service trust flag can be set without authentication. This allows the...

CVE-2026-86480: Missing Authentication for Critical Function

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...

messari-crack

Messari MSR Crack 2026 Messari プレミアムをアンロック | リサーチハブ & インテルデータフィードへのアクセス 説明 Messari MSR Crack は、Messari のプレミアムリサーチハブとインテルデータフィードへのアクセスをアンロックするために設計されたプロフェッショナルなクラッキングユーティリティです。機関投資家向けの暗号通貨リサーチ、市場インテリジェンスレポート、リアルタイムデータフィードへの無制限アクセスを提供します。 主な利点 ✅ リサーチハブのアンロック — Messari のプレミアムリサーチライブラリへの完全アクセス ✅...

CVE-2026-19224

The Hummingbird Performance WordPress plugin, in versions before 3.21.2 , contains a vulnerability where network-wide settings are not restricted to network administrators. This flaw allows an administrator of any single site on a multisite network to execute arbitrary code across the entire netw...

CVE-2026-19224 Hummingbird < 3.21.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite

The Hummingbird Performance WordPress plugin before 3.21.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

CVE-2026-19224 Hummingbird < 3.21.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite

The Hummingbird Performance WordPress plugin before 3.21.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

PT-2026-91299

In the Linux kernel, the following vulnerability has been resolved: usb: core: Add lock to usb wakeup notification Add a spin lock to usb wakeup notification to prevent a race condition with dereferencing freed memory. This could be hit by the xHCI driver as it calls this function from an IRQ and...

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.10.4 release.

Red Hat Developer Hub 1.10.4 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

CVE-2026-81769

Incorrect Privilege Assignment vulnerability in LiquidThemes Booking Hub allows Privilege Escalation. This issue affects Booking Hub: from n/a through 1.3.1...

CVE-2026-81769 WordPress Booking Hub plugin <= 1.3.1 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in LiquidThemes Booking Hub allows Privilege Escalation. This issue affects Booking Hub: from n/a through 1.3.1...

CVE-2026-81769

CVE-2026-81769 is an Incorrect Privilege Assignment vulnerability in the LiquidThemes Booking Hub WordPress plugin, affecting versions up to and including 1.3.1 . The flaw allows an attacker with low privileges to escalate access, potentially compromising confidentiality, integrity, and availabil...