Astra Linux – Vulnerability in Firefox and Thunderbird

The Content-Security-Policy-Report-Only header could allow an attacker to leak the unredacted URI of a child iframe when interaction with that iframe triggers a redirect. This vulnerability affects Firefox 110, Thunderbird 102.8, and Firefox ESR 102.8...

Astra Linux – Vulnerability in Zabbix

The URL validation scheme receives input from a user and then parses it to identify its various components. This validation scheme ensures that all URL components comply with internet standards...

WordPress Agile Store Locator plugin < 1.6.9 - Admin+ Arbitrary File Read via Path Traversal vulnerability

Admin+ Arbitrary File Read via Path Traversal vulnerability discovered by Abisheik M in WordPress Plugin Store Locator WordPress versions 1.6.9...

Arbitrary Code Injection

Overview n8n-editor-ui is a Workflow Editor UI for n8n Affected versions of this package are vulnerable to Arbitrary Code Injection in the editor's resource locator link preview rendering, which inserts stored field values into URL templates without sanitizing them, so expression syntax held in a...

CVE-2026-77075

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an expression injection vulnerability in resource-locator field link preview rendering. The editor spliced the field's stored value directly into the node type's URL template without checking for expression syntax. An...

CVE-2026-66680

Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...

CVE-2026-66680 WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability

Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...

EUVD-2026-63306

Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...

CVE-2026-66680 WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability

Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...

WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability

SQL Injection vulnerability discovered by arrester in WordPress Plugin Locatoraid Store Locator versions = 3.9.72...

CVE-2026-77075 n8n before 1.123.69 Expression Injection via Resource Locator

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an expression injection vulnerability in resource-locator field link preview rendering. The editor spliced the field's stored value directly into the node type's URL template without checking for expression syntax. An...

CVE-2026-77075 n8n before 1.123.69 Expression Injection via Resource Locator

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an expression injection vulnerability in resource-locator field link preview rendering. The editor spliced the field's stored value directly into the node type's URL template without checking for expression syntax. An...

CVE-2026-77075 n8n before 1.123.69 Expression Injection via Resource Locator

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an expression injection vulnerability in resource-locator field link preview rendering. The editor spliced the field's stored value directly into the node type's URL template without checking for expression syntax. An...

CVE-2026-77075: Improper Control of Generation of Code

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an expression injection vulnerability in resource-locator field link preview rendering. The editor spliced the field's stored value directly into the node type's URL template without checking for expression syntax. An...

CVE-2026-66680: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...

UBUNTU-CVE-2026-72098

In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix buffer overflow in FEC calculation There's a buffer overflow in dm-verity-fec: if neras && neras fec-roots fio-erasuresneras++ = i; This allows neras to reach roots + 1 the post-increment pushes it past roots. This...

PT-2026-72287

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow exists in dm-verity-fec during Forward Error Correction FEC calculations. The issue occurs when the neras variable is incremented beyond the roots limit, allowing it to...

MAL-2026-14009 Malicious code in root-locator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2028000ac5395ba0f5ddda0c3d9003770de8f14847dd2cebaeb04031bbcf9ce8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in root-locator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2028000ac5395ba0f5ddda0c3d9003770de8f14847dd2cebaeb04031bbcf9ce8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-68127

CVE-2026-68127 describes a Linux kernel flaw in the Identifier-Locator Addressing (ILA) subsystem where a slab-use-after-free can occur during IPv6 packet processing if a transport-header-based path is used. Specifically, ila_csum_adjust_transport() caches ip6h before pskb_may_pull(), and non-lin...