736 matches found
PT-2026-39639
The flash-attention project thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 2025-13-04 contains a code injection vulnerability CWE-94 in its training script. The script registers the Python eval function as a Hydra configuration resolver under the name eval. This allows configuration files t...
CVE-2026-31254
The CVE-2026-31254 entry concerns the flash-attention project commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-04-13). A code-injection flaw (CWE-94) exists in the training script where Python’s eval() is registered as a Hydra config resolver under the name eval, enabling arbitrary code exec...
CVE-2026-41889 vulnerabilities
Vulnerabilities for packages: ldap2pg, authentik, spicedb-fips, cloudnative-pg, gitlab-cng-fips, step-issuer-fips, commercial-grafana, seaweedfs, gitaly-fips, opentelemetry-collector-contrib, rke2-runtime, falcosidekick, hydra, temporal, step, azure-service-operator-fips, peerdb-flow,...
Hydra Network Logon Cracker 9.7
THC-Hydra is a high quality parallelized login hacker for Samba, Smbnt, Cisco AAA, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support, parallel scans, and is part of Nessus...
GHSA-J88V-2CHJ-QFWX vulnerabilities
Vulnerabilities for packages: trillian, keda, telegraf, splunk-otel-collector, rke2-cloud-provider, amass, sftpgo-plugin-eventstore, opentelemetry-collector-contrib, pgtimetable, temporal, kubeflow-pipelines, k3s, kots, temporal-server, kine, src, caddy, hydra, sftpgo, cloudprober, step-ca, wal-g...
CVE-2026-39541
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...
GHSA-HFVC-G4FC-PQHX vulnerabilities
Vulnerabilities for packages: kube-logging-operator, keda, tempo, haproxy-ingress, pulumi, grafana-agent-operator, rancher-system-agent, tfsec, tekton-pipelines, verticadb-operator, ksops, pulumi-language-java, flux, argocd-image-updater, cri-tools, crossplane-provider-aws-firehose,...
CVE-2026-39883 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudsearch, crossplane-provider-aws-networkmanager-fips, node-feature-discovery, crossplane-provider-azure-synapse, harbor-registry-fips, crossplane-provider-azure-signalrservice, omni-fips, spicedb-fips, crossplane-provider-aws-firehose,...
pentestfr
Pentest Framework — Kali Linux / VirtualBox Framework Python...
EUVD-2026-20195
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...
CVE-2026-39541
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...
CVE-2026-39541 WordPress Hydra Booking plugin <= 1.1.38 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...
CVE-2026-39541 WordPress Hydra Booking plugin <= 1.1.38 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...
CVE-2026-39541
CVE-2026-39541 affects the WordPress Hydra Booking plugin by Themefic, affected versions: Hydra Booking
CVE-2026-39541
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...
PT-2026-31148
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through = 1.1.38...
WordPress plugin Hydra Booking 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
SUSE CVE-2019-8400
ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error errorhint parameter...