CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, rke2-runtime, ldap2pg, spire-server, keda, kuma, temporal, kots, dapr, vault, authentik-fips, step-fips, azure-service-operator, pgtimetable-fips, kine, caddy, sqlexporter, kube-bench-fips, step-ca, telegraf, harbor, envoy-gateway, goose-fips,...

Hydra Network Logon Cracker 9.7

THC-Hydra is a high quality parallelized login hacker for Samba, Smbnt, Cisco AAA, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support, parallel scans, and is part of Nessus...

GHSA-J88V-2CHJ-QFWX vulnerabilities

Vulnerabilities for packages: hydra, openfga, azure-service-operator, rke2-cloud-provider, spicedb, kots, cloudprober, step-issuer, falcosidekick, grafana-alloy, k3s, jitsucom-bulker, opentelemetry-collector-contrib, gitlab-kas, keda, kube-bench, kuma, splunk-otel-collector, kine, migrate, cerbos...

CVE-2026-39541

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: hydra, cert-manager-webhook-pdns, mcp-grafana, policy-controller, azure-workload-identity-webhook, dataplaneapi, gitlab-pages, opentofu, cloud-provider-azure, ksops, melange, kaniko, coredns, crossplane-provider-azure-storage, kyverno-notation-aws, octo-sts, cri-tool...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, k8sgpt, crossplane-provider-aws-memorydb-fips, azure-workload-identity-webhook, crossplane-provider-aws-athena, ko, fulcio, mesosphere-vsphere-csi-fips, eks-distro, crossplane-provider-aws-ssm, cert-manager-openshift-routes, temporal,...

pentestfr

Pentest Framework — Kali Linux / VirtualBox Framework Python...

EUVD-2026-20195

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...

CVE-2026-39541

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...

CVE-2026-39541

CVE-2026-39541 affects the WordPress Hydra Booking plugin by Themefic, affected versions: Hydra Booking

CVE-2026-39541 WordPress Hydra Booking plugin <= 1.1.38 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...

CVE-2026-39541

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...

CVE-2026-39541 WordPress Hydra Booking plugin <= 1.1.38 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...

CVE-2026-39541: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...

WordPress plugin Hydra Booking 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-31148

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...

SUSE CVE-2019-8400

ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error errorhint parameter...

GHSA-R9W3-57W2-GCH2 vulnerabilities

Vulnerabilities for packages: hydra, hydra-fips...

CVE-2026-33504 vulnerabilities

Vulnerabilities for packages: hydra, hydra-fips...

SUSE CVE-2026-33504

Ory Hydra is an OAuth 2.0 Server and OpenID Connect Provider. Prior to version 26.2.0, the listOAuth2Clients, listOAuth2ConsentSessions, and listTrustedOAuth2JwtGrantIssuers Admin APIs in Ory Hydra are vulnerable to SQL injection due to flaws in its pagination implementation. Pagination tokens ar...