900 matches found
MAL-2026-1746 Malicious code in hydra-node-consent-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e998f8c12c66f99b303fcb859d154aef24479204cf099b789871a4ee1a9943c The package hydra-node-consent-sdk was found to contain malicious code...
Malicious code in hydra-consent-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb154df736a12683f5680d8355dde8927952f257d80b1355152bcf337754be96 The package hydra-consent-sdk was found to contain malicious code...
MAL-2026-1745 Malicious code in hydra-consent-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb154df736a12683f5680d8355dde8927952f257d80b1355152bcf337754be96 The package hydra-consent-sdk was found to contain malicious code...
PT-2026-25914
Name of the Vulnerable Software and Affected Versions GL-iNet Comet GL-RM1 versions affected versions not specified Description The web interface for the KVM feature in GL-iNet Comet GL-RM1 does not restrict the number of login attempts. This allows attackers to perform brute-force attacks to...
GHSA-9H8M-3FM2-QJRQ vulnerabilities
Vulnerabilities for packages: k8sgpt, azure-workload-identity-webhook, fulcio, eks-distro, temporal, terraform-provider-google, azure-service-operator, k8s-agents-operator-fips, cass-operator-fips, ops-agent, kubescape, cluster-api-fips, percona-server-mongodb-operator, zarf, opencost,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: hydra, policy-controller, crossplane-provider-aws-cloudfront, apko, opentofu, melange, ksops, crossplane-provider-keycloak, crossplane-provider-azure-storage, kyverno-notation-aws, crossplane-provider-family-aws, flux-helm-controller, pulumi-language-dotnet,...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: hydra, policy-controller, crossplane-provider-aws-cloudfront, apko, opentofu, melange, ksops, crossplane-provider-keycloak, crossplane-provider-azure-storage, kyverno-notation-aws, crossplane-provider-family-aws, flux-helm-controller, pulumi-language-dotnet,...
GHSA-FW7P-63QQ-7HPR vulnerabilities
Vulnerabilities for packages: rke2-runtime, spire-server, dbmate, fulcio, keda, mariadb-operator-fips, temporal, kots, vault, flux-kustomize-controller, mattermost-fips, step-fips, kyverno-policy-reporter, tkn-fips, aactl, kine, caddy, percona-xtradb-cluster-operator, sqlexporter, step-ca,...
GHSA-FW7P-63QQ-7HPR vulnerabilities
Vulnerabilities for packages: hydra, fulcio, openfga, telegraf, timestamp-authority, apko, kots, spicedb, terragrunt, kyverno-policy-reporter, dbmate, ksops, wolfictl, trufflehog, step-issuer, grafana-alloy, k3s, jitsucom-bulker, ratify, chezmoi, gitsign, splunk-otel-collector, kine,...
CVE-2025-68027
Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...
CVE-2025-68027
Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...
CVE-2025-68027
CVE-2025-68027 : The Hydra Booking (Themefic Hydra Booking) WordPress plugin suffers an unauthenticated privilege escalation due to an incorrect privilege assignment in versions up to 1.1.32. The vulnerability enables elevation of privileges within Hydra Booking (hydra-booking) as described in pu...
CVE-2025-68027 WordPress Hydra Booking plugin <= 1.1.32 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...
CVE-2025-68027
Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...
CVE-2025-68027 WordPress Hydra Booking plugin <= 1.1.32 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...
PT-2026-4064
Name of the Vulnerable Software and Affected Versions Themefic Hydra Booking versions through 1.1.32 Description A privilege assignment issue exists in Themefic Hydra Booking hydra-booking, potentially allowing privilege escalation. The issue allows for unauthorized access or actions due to...
CVE-2025-68027: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privilege Escalation.This issue affects Hydra Booking: from n/a through = 1.1.32...
WordPress plugin Hydra Booking has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
