2996 matches found
CVE-2026-94121 WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.33.6 - PHP Object Injection vulnerability
Contributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer = 2.33.6 versions...
CVE-2026-94121
The 10Web Booster WordPress plugin (versions
Security Bulletin: IBM Maximo Application Suite uses postcss-8.5.10.tgz which is vulnerable to CVE-2026-69153.
Summary IBM Maximo Application Suite uses postcss-8.5.10.tgz which is vulnerable to CVE-2026-69153. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-69153 DESCRIPTION: PostCSS takes a CSS file and provides an API to analyze and...
Security Bulletin: IBM Maximo Application Suite uses dompurify-3.4.7.tgz which is vulnerable to CVE-2026-66010
Summary IBM Maximo Application Suite uses dompurify-3.4.7.tgz which is vulnerable to CVE-2026-66010. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-66010 DESCRIPTION: DOMPurify before 3.4.12 fails to execute afterSanitizeElemen...
Important: Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)
Red Hat AI Inference Server Model Optimization Tools 3.2.2 CUDA is now available. Red Hat® AI Inference Server Model Optimization Tools...
Robustness of Local Energy Markets to Cyberattacks: Case Study of False Data Injection
Market clearing in community-based local energy markets relies on power demand and PV forecasts, making it vulnerable to coordinated false data injection FDI attacks. This paper proposes a bilevel optimization framework to identify worst-case bus-level FDI against interconnected multi-community...
Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.
Summary Multiple Vulnerabilities were addressed in IBM Decision Optimization for Cloud Pak for Data version 5.3.1 before Patch 13 and 5.4.0 before Patch 6. Vulnerability Details CVEID:CVE-2026-45623 DESCRIPTION: PostCSS takes a CSS file and provides an API to analyze and modify its rules by...
Frame the Adversary: A Structure-Aware Attack Methodology
Frequency-based adversarial attacks have recently grown popular by exploiting spectral sensitivities shared across neural architectures. Unlike spatial perturbations, frequency-based attacks expose deeper vulnerabilities, making them especially valuable for robust evaluation of safety-critical an...
Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.
Summary Multiple Vulnerabilities were addressed in IBM Decision Optimization for Cloud Pak for Data version 5.3.1 before Patch 13 Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is...
WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.33.6 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin 10Web Booster – Website speed optimization, Cache & Page Speed optimizer versions = 2.33.6...
Important: Red Hat Security Advisory: Red Hat AI Inference Model Optimization Tools 3.4.5 (cuda)
Red Hat AI Inference Model Optimization Tools 3.4.5 cuda is now available. Red Hat AI Inference Model Optimization Tools...
Important: Red Hat Security Advisory: Red Hat AI Inference Model Optimization Tools 3.4.5 (cuda)
Red Hat AI Inference Model Optimization Tools 3.4.5 cuda is now available. Red Hat AI Inference Model Optimization Tools...
janet:fuzz_compile: Heap-buffer-overflow in janet_bytecode_movopt_basic_block
Project: https://github.com/janet-lang/janet.git Detailed Report: https://oss-fuzz.com/testcase?key=5374445406191616 Project: janet Fuzzing Engine: afl Fuzz Target: fuzzcompile Job Type: aflasanjanet Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7abf99a0689c Crash...
PT-2026-95781
Name of the Vulnerable Software and Affected Versions Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization versions prior to 2.6.24 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform...
CVE-2026-15946: Missing Authorization
The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.23. This is due to the plugin not properly verifying that a user is authorized to perform an...
CVE-2026-84904
The King Addons for Elementor WordPress plugin before 51.1.81 does not perform per-object authorization checks on a group of image-optimization actions, gating them only on a coarse capability that lower-privileged users also hold and never confirming ownership of the targeted object, allowing...
EUVD-2026-82663
The King Addons for Elementor WordPress plugin before 51.1.81 does not perform per-object authorization checks on a group of image-optimization actions, gating them only on a coarse capability that lower-privileged users also hold and never confirming ownership of the targeted object, allowing...
perf-benchmark-poc
Large Model-Based Python Performance Optimization Loop v0.1...
CVE-2026-84904: Missing Authorization
The King Addons for Elementor WordPress plugin before 51.1.81 does not perform per-object authorization checks on a group of image-optimization actions, gating them only on a coarse capability that lower-privileged users also hold and never confirming ownership of the targeted object, allowing...
PT-2026-95236
Name of the Vulnerable Software and Affected Versions King Addons for Elementor versions prior to 51.1.81 Description The plugin fails to perform per-object authorization checks for image-optimization actions. It relies on a coarse capability shared by lower-privileged users and does not verify...