IBM WebMethods Integration Server security vulnerabilities

IBM webMethods Integration Server is an application connector from International Business Machines IBM. An HTML injection vulnerability exists in IBM webMethods Integration Server version 12.0. An attacker could exploit this vulnerability to execute arbitrary Web script or HTML...

IBM Sterling B2B Integrator and IBM Sterling File Gateway have security vulnerabilities

IBM Sterling B2B Integrator is a flexible integration platform that simplifies complex B2B and Electronic Data Interchange EDI processes across the partner ecosystem, supports local and hybrid cloud deployments, ensures data security, and provides high availability guarantees.IBM Sterling File...

CVE-2025-14289: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

IBM webMethods Integration Server 12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

PT-2026-20229

Name of the Vulnerable Software and Affected Versions IBM webMethods Integration Server version 12.0 Description The software is susceptible to HTML injection. A remote attacker could inject malicious HTML code that would be executed in the victim's web browser within the security context of the...

PT-2026-20318

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.3 Description OpenClaw is a personal AI assistant. When the Slack integration is enabled, Slack channel metadata topic/description can be incorporated into the model's system prompt. This increases the injecti...

WordPress Paytium: Mollie payment forms & donations plugin <= 4.3.7 - Missing Authorization in 'paytium_notice_dismiss' vulnerability

Missing Authorization in 'paytiumnoticedismiss' vulnerability discovered by WordFence in WordPress Plugin Paytium versions = 4.3.7...

Security Bulletin: IBM webMethods Integration Server is vulnerable to HTML injection

Summary IBM webMethods Integration Sever is vulnerable to HTML injection in Security Claims UI. CVE-2025-14289. Vulnerability Details CVEID:CVE-2025-14289 DESCRIPTION: IBM webMethods Integration is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed...

CVE-2019-25368

OPNsense 19.1 contains cross-site scripting vulnerabilities in the diag_backup.php endpoint. The issue allows injection of malicious scripts via multiple parameters (e.g., GDrive_GDriveEmail, GDrive_GDriveFolderID, GDrive_GDriveBackupCount, Nextcloud_url, Nextcloud_user, Nextcloud_password, Nextc...

CVE-2026-1303

The MailChimp Campaigns plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.2.4. This is due to missing capability checks on the mailchimpcampaignsmanagerdisconnectapp function that is hooked to the AJAX action of the same name. This makes it possib...

[SECURITY] Fedora 42 Update: nginx-mod-modsecurity-1.0.4-7.fc42

The ModSecurity-nginx connector is the connection point between nginx and libmodsecurity ModSecurity v3. Said another way, this project provides a communication channel between nginx and libmodsecurity. This connector is required to use LibModSecurity with nginx. The ModSecurity-nginx connector...

CVE-2026-0692

The BlueSnap Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.4.0. This is due to the plugin relying on WooCommerce's WCGeolocation::getipaddress function to validate IPN requests, which trusts user-controllable...

CVE-2026-26269

A flaw was found in Vim. A stack-based buffer overflow in the NetBeans integration can be triggered in the specialkeys function in the src/netbeans.c file via a malicious NetBeans server due to improper bounds checking, most likely resulting in a denial of service or in arbitrary command executio...

CVE-2026-26069

Scraparr is a Prometheus Exporter for various components of the arr Suite. From 3.0.0-beta to before 3.0.2, when the Readarr integration was enabled, the exporter exposed the configured Readarr API key as the alias metric label value. Users were affected only if all of the following conditions ar...

Linux Distros Unpatched Vulnerability : CVE-2026-26269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing t...

org.wildfly.core:wildfly-core-feature-pack-common (>=31.0.0.beta1, <=31.0.2.final), org.wildfly.core:wildfly-core-galleon-pack (>=31.0.0.beta1, <=31.0.2.final) +4 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (>=31.0.0.beta1, <=31.0.2.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version =31.0.0.beta1, =31.0.0.beta1, =31.0.0.beta1, =31.0.0.beta1, =39.0.0.beta1, =39.0.0.beta1, =39.0.0.beta1, =39.0.0.final Source cves: CVE-2025-23368 Source advisory: GHSA-QHP6-6P8P-2RQH...

org.wildfly.core:wildfly-core-dist (3.0.0.beta19), org.wildfly.core:wildfly-core-feature-pack (3.0.0.beta19) potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (3.0.0.beta19)

org.wildfly.core:wildfly-elytron-integration MAVEN version 3.0.0.beta19 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.beta19 -...

org.wildfly.core:wildfly-core-feature-pack-common (28.0.0.beta1), org.wildfly.core:wildfly-core-galleon-pack (28.0.0.beta1) +1 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (28.0.0.beta1)

org.wildfly.core:wildfly-elytron-integration MAVEN version 28.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 28.0.0.beta1 -...

org.wildfly.core:wildfly-core-build (7.0.0.beta1), org.wildfly.core:wildfly-core-dist-legacy (7.0.0.beta1) +3 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (7.0.0.beta1)

org.wildfly.core:wildfly-elytron-integration MAVEN version 7.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-build 7.0.0.beta1 -...

org.wildfly.core:wildfly-core-dist-legacy (16.0.1.final), org.wildfly.core:wildfly-core-feature-pack (16.0.1.final) +3 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (16.0.1.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version 16.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-dist-legacy 16.0.1.final -...

org.wildfly.core:wildfly-core-feature-pack-common (17.0.0.beta7), org.wildfly.core:wildfly-core-galleon-pack (17.0.0.beta7) +1 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (17.0.0.beta7)

org.wildfly.core:wildfly-elytron-integration MAVEN version 17.0.0.beta7 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 17.0.0.beta7 -...